Re-assing XP desktop profile to another user

[Karabas]

Hello everyone!
Here is my situation:
Here we have domain1\user1 and domain2\user2, windows XP COMP1 a member of domain1.
Domain1\user1 has logged to COMP1 and has local desktop profile with all sorts of settings (printers, PST's connected, My-documents, wallpapers etc).
Need a scripting method to grant domain\user2 ability to log-in to domain1\user1 desktop profile, and continue to use it with all it's settings and attributes.

Here is the approach I tried:
1) Grant full access for domain2\user2 to all local profile files and folders (C:\Documents and Settings\user1.domain1)
2) Let domain2\user2 log-in to COMP1 to have profile created for the user.
3) Change registry value ( HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\SID...\ProfileImagePath = %SystemDrive%\Documents and Settings\user2.domain2 ) to match user1.domain1
4) Permission files/folders to grant access for domain2\user2

Unfortunately, this is not enough
Any ideas?

 

[Karabas]

I would also add the next step:
5) Have domain1\user1 log-in to COMP1
6) Access remote registry to change current user permission to allow full control for user2:
HKEY_USERS\User_SID
HKEY_USERS\User_SID_Classes
7) Reboot COMP1

Seeking for remote script

 

[Karabas]

OK, no one wanted to share his/her best practice, so I will put my experience here:

I used RegPerm and FILEACL tools to assign permissions on folders and made registry changes for remote PC. Both are quite powerful, with tons of options etc...
For registry changes for particular user - the hive under HKEY_USERS is only available when the user is logged in to workstation at that moment. Otherwise the hive is not available!


Links may be helpful:

http://www.gbordier.com/gbtools/fileacl.asp

http://homepages.cae.wisc.edu/~micro/regperm/

 

[markdmac]

Use the right tool for the job is my motto.

http://www.forensit.com/desktop-management.html

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.