Forensit – User Profile Wizard 3.5

Forensit User Profile Wizard 3.5 is a small application that can be used both to move a machine between two domains, and to migrate 99.99% of user profile information. The application can also set the primary user that appears at the Windows login screen after reboot post-migration to ensure uofi\netid is listed rather than uiuc\netid. Initial testing has shown an average 10 minute start to finish for AD domain and primary user profile migration time per computer. Other profiles on the machine can be moved individually after the initial migration at a fraction of the time. As long as the users have not logged in as uofi\netid (thus establishing a netid.uofi profile folder), the current UIUC profile folder will be migrated as the UOFI profile folder. This is a positive in that multiple profile folders will not exist on the machine per user, and a negative in that if you needed a recovery option for the folder it will be lost in the migration process. After testing close to 30 unique machines this has yet to be an issue.

Great! How do I use it?

There are two options on installation:

1. (Preferred) – Navigate to (engrIT server, you’ll have to put it on your own, sorry). You will see a folder named “Run on Network or USB”. This folder already contains the extracted .exe and license file to run the software. You can run it from this or copy it to any network location of your choosing. You can also copy it to a USB key and run it from there. This avoids having the software installed on the local machine. (In Vista and Win 7 you will need to right-click, Run as Administrator on the executable)
2. Navigate to (engrIT server, you’ll have to run it from your own, sorry). Double-clicking the User_Profile_Wizard_3.0.1145_setup.exe will initiate a local installation of the software. After installation, the Profwiz.config needs to be copied into the installation directory for licensing. The launch icon will appear in the Start menu.

Running the application: (Before starting this process you will need to rename the computer in Windows. Forensit cannot rename it for you)

1. The first screen is the standard wizard welcome screen. Click Next, and you will be asked to Select Computer. Choose “Local Computer” (at this time we have not tested the “Another Computer” option). Click Next.
2. The next screen will ask for user account information. If this machine is in UIUC, it will appear in the “Enter the domain” box. Overwrite it to UOFI, and leave the “Join Domain” box checked. In the “Enter the account name” box, put the NetID of the user whose profile you wish to migrate at this time (probably the primary user). If you want this user’s uofi\netid to appear on the Windows login screen then leave the “Set as default login” box checked. Click Next.
3. The next screen will ask for you to select a user profile. A list of all current profiles on the machine will appear. Select the profile of the user you entered in Step 2 (important it’s the same!), and click Next.
4. You’ll be asked for your UOFI credentials. You will see it run the process of changing the ACLs of the profile and joining the new domain. Upon successful completion you will be asked to reboot. Go ahead and do so.
5. If the machine only has one user then you are finished. If you need to migrate more profiles, then log back into the machine with an administrator account, and launch Forensit again. This time you can uncheck “Join Domain” (you’re already in it), and it is your choice on whether you want this user to show up as the default login next reboot. Choose their profile (it may show in the list as UOFI\netid, you can ignore this) and it will reapply the ACLs for that user.

      Issues:

1. It is VERY important when you run the software that the netid you enter for the account name in Step 2 and the profile you choose in Step 3 match. Forensit does not care and will gladly merge the wrong profile and user together.
2. The first login after migration will be a little slow for the first user. In particular, we have noticed that Outlook takes awhile to get going the first time as the .pst and profile information get reapplied. We have found waiting about 5 minutes after the user logs in the first time helps with that delay. 
3. Again, Forensit can not rename the machine name. It will need renamed prior to migration. You will also need access in the new UOFI AD to stage the account

ForensIT: http://www.forensit.com/?source=google&gclid=CNrq5ta7r6wCFQyFQAodSwpKJA