//flex table opened by JP

Click to See Complete Forum and Search --> : Rejoin a domain remotely and retrieve a profile


zillah
11-01-2007, 09:51 PM
Two sites called : SY and ME at NewZeland connected to each other through WAN cloud (IP-VPN).



A client came from a third site (Singapore ) and started his work at SY site,,,,his laptop was assigned with this domain mork.co.sg when he was at Singapore.



At NewZeland the client was able to access his laptop (profile) by using his username and password that was assigned to him when he was with “ mork.co.sg “ domain,,,,although physically he was not with the domain : mork.co.sg,,,this what it is called he was using the credential. [i.e the client was able to access his domain’s account profile , though he is in different country (domain) ]



By using local admin account for his laptop, I removed him from the domain : mork.co.sg and joined him to a workgroup called : “ moursi “, because at NZ we used to have workgroup at both sites SY and ME, we do not have domain.



As a result we lost the domain client’s profile (email, outlook, faivorite,,,etc)



I can not rejoin him the domain again , for two reasons:



A- I do not have domain admin account for mork.co.sg

B- I am not physically within the domain mork.co.sg,,,,can a user be joined to a domain remotely ?



Since I do not have the user account for Singapore domain’s admin, can the domain’s admin in Singapore remotely access the client’s laptop in NZ (I will enable remote access), to rejoin it again ? what would be remotely fully qualified domain name (FQDN) that you should use ?



Suppose the domain’s admin would be able to rejoin the client again, would the client be able to access his origin domain ‘s profile ?

rraehal
11-05-2007, 12:47 PM
The old profile is in C:\Documents and Settings\old user name

Log into the PC as the local administrator and back up the new user profile. Copy everything from the old profile folder to the new profile folder except the registy files NTUSER.DAT and NTUSER.DAT.LOG.

Log back in as the new user and he should have his stuff. You may need to tell outlook where to find his PST file.

zillah
11-05-2007, 02:51 PM
The old profile is in C:\Documents and Settings\old user name

Log into the PC as the local administrator and back up the new user profile. Copy everything from the old profile folder to the new profile folder except the registy files NTUSER.DAT and NTUSER.DAT.LOG.

Log back in as the new user and he should have his stuff. You may need to tell outlook where to find his PST file.

Thanks for this clarification.

This query just for my knowledge, now if I wan to join him the domain remotly, can I ? How ? what would be FQDN in this case ?

Regards

rraehal
11-09-2007, 03:23 PM
In order to join a domain from a remote location, you must be connected to the domain. You user could log onto the PC as the local administartor and use dial-up networking or a vpn to connect to your network. Once on the network, the proper credentials can be used to join the domain. The computer simply needs to see the domain controller for a domain or a directory server to reattach to the domain or AD.

I have a VPN that connect my Colorado offices to my Michigan offices. I join the AD in Michigan from Colorado all the time simply because traffic can move across my VPN to verify the abi;ity to join the AD.

Remember that the VPN or Dialup connection must should made using credentials of a user that is allowed to join the domain (ie your account not the user account). If you dial-up with the user account and try to use a domin admin account to join the domain it will most likely fail. You would get an error saying something about a conflict of credentials.

zillah
11-09-2007, 03:33 PM
Thanks for that