After migrating user accounts with the option 'translate terminal server profiles', the users get a (NETIQKB44526)

fact
Domain Migration Administrator 7.x

symptom
After migrating user accounts with the option 'translate terminal server profiles', the users get a default profile when logging on to the terminal server with their source account.

cause
For a terminal server profile to be accessed, the folder where the profile resides must be 'owned' by either the 'administrators' group or the the account the user is logging on with. Because the 'owner' value is not a multi-valued property, DMA does a 'Replace' on the 'Owner' when it translates security. If the original owner was the source user account, this results in the target user account being the new 'owner' of the profile folders, which prevents further access by the source account. This causes the default profile to load when the user logs on with his source domain account. 

fix

There are two possible solutions:

1. Set the profile folder owner to 'administrators'.
2. Do NOT select the option 'translate terminal server profiles' in the migration settings wizard. Instead, run the 'remoteprof' utility after the user accounts have been migrated. 

note
NetIQ recommends using the 'remoteprof' utility for translating Terminal Server Profiles or Roaming Profiles in cases where the users need to continue accessing these profiles with their source user accounts.

note

For more information about the 'remoteprof' utility, see the following NetIQ KB article:

'What is the remoteprof utility used for and where can I find documentation on it?'

https://www.netiq.com/kb/esupport/consumer/esupport.asp?id=NETIQKB12651

 

Formerly known as NETIQKB44526