A new profile gets created when user logs on for the first time, after security translation for prof (NETIQKB49152)

fact
DMA 7.x

symptom
A new profile gets created when user logs on for the first time, after security translation for profile has been executed.

symptom
Translate Security Settings option is grayed-out when trying to translate security on a workstation within a project.

symptom
Cannot translate security for a profile on a workstation within a project.

symptom
Cannot find user objects within a project.

symptom
Cannot migrate a computer account and translate security for profiles simultaneously.

cause
Security translation is being attempted for user and/or group objects that were not yet migrated.

cause
User and/or group objects were not selected within the project.

fix

To fix this issue, you can perform one of the following:

If the user account was migrated with DMA, translate security for that user object's profile at the global level instead of at the project level:

1. Right-click the Domain Migration Administrator folder object at the top of the MMC console.
2. Select Translate Security Settings.
3. Follow the wizard selecting the computer and user objects for which you want to translate security.

Or, instead of the previous steps, you can re-migrate the user account for the profile you want to translate within the project, and then run the Translate Security Settings Wizard at the project level.

note
For more information about security translation, see the DMA documentation.

Formerly known as NETIQKB49152