I've messed up permissions on orphan workstations!

I've dug myself quite a hole here - hopefully you can help me get out

On an upgrade from Win2K server to Win2K3, I figured with only a dozen workstations and users in my network it would be easier to just do a clean install and rebuild the network than migrate. That was my first mistake

After formatting the server and installing Win2003, I re-setup the users and computers in Active Directory. All seemed to be OK, except I was getting a cryptic critical error in the System Events Log about workstations needing to re-establish trust relationships (event #5513). Users could browse their folders on the server, but I couldn't create any roaming profiles

Following the advice on another forum, I began disconnecting workstations from the domain by joining a workgroup, deleting the computer from the server and then reconnecting to the domain

OK, now I'm not getting the trust relationship error anymore. But the next gopher to raise its ugly head is that workstations are assigning brand-new profiles when they log-in (so while the profile for "Frank" still exists, when he logs in he instead gets the profile for "Frank.AURORATHEATRE")

OK, says I, I will just sign in as administrator, copy over the important settings (My Documents, Outlook PST files) etc to the new profile, and adjust the permissions on the new profile folder so all the files will be accessible

No go. The files show up on the desktop and in my docs, etc. when users log in, but they are still unable to access the files. If I change their user group to "Administrator" they can sort of work (some Outlook stuff still is unhappy), but I don't want all my users to be Administrators

No amount of logging in as Admin and removing and re-establishing security permissions for the profile will give them access to these files. What have I done? Can it be fixed

All workstations are on Win2000 Pro

Any help would be MUCH appreciated. Thanks in advance

Daniel

You've solved your first problem.

As far as the profiles go, that is normal. Profiles are based on the
security ID of the user account. Since you have a new domain, you have new
SIDs. That is also why you cannot access the old profiles. The owner is
based on the old SID and does not exist.

You might try using system properties, user profiles and copy the profiles
over that way. The other alternative is to while your users are
administrators, have them take ownership of the old profile folder and copy
that way. Do this under the security tac, advanced, ownership tab of each
folder.

"Daniel Olmstead" <(E-Mail Removed)> wrote in message
news:2CD4A055-0FE7-459D-B04F-(E-Mail Removed)...
> I've dug myself quite a hole here - hopefully you can help me get out.
>
> On an upgrade from Win2K server to Win2K3, I figured with only a dozen
workstations and users in my network it would be easier to just do a clean
install and rebuild the network than migrate. That was my first mistake.
>
> After formatting the server and installing Win2003, I re-setup the users
and computers in Active Directory. All seemed to be OK, except I was
getting a cryptic critical error in the System Events Log about workstations
needing to re-establish trust relationships (event #5513). Users could
browse their folders on the server, but I couldn't create any roaming
profiles.
>
> Following the advice on another forum, I began disconnecting workstations
from the domain by joining a workgroup, deleting the computer from the
server and then reconnecting to the domain.
>
> OK, now I'm not getting the trust relationship error anymore. But the
next gopher to raise its ugly head is that workstations are assigning
brand-new profiles when they log-in (so while the profile for "Frank" still
exists, when he logs in he instead gets the profile for
"Frank.AURORATHEATRE").
>
> OK, says I, I will just sign in as administrator, copy over the important
settings (My Documents, Outlook PST files) etc to the new profile, and
adjust the permissions on the new profile folder so all the files will be
accessible.
>
> No go. The files show up on the desktop and in my docs, etc. when users
log in, but they are still unable to access the files. If I change their
user group to "Administrator" they can sort of work (some Outlook stuff
still is unhappy), but I don't want all my users to be Administrators.
>
> No amount of logging in as Admin and removing and re-establishing security
permissions for the profile will give them access to these files. What have
I done? Can it be fixed?
>
> All workstations are on Win2000 Pro.
>
> Any help would be MUCH appreciated. Thanks in advance,
>
> Daniel