AD Users=Domain-X computers=Domain-Y and logon scripts

[natesin]

In the process of a forest to forest domain migraiton due to a company merger from Domain-X to Domain-Y. 75% of the computers have been migrated to Domain-Y and computer accounts have been disabled on Domain-X. Of course, logon scripts no longer work. The finalization of the migration is to occur mid December. We have a mapping to a public drive P:. I tried group policy on Domain-Y for computer accounts to get this mapping. Gave domain users on Domain X the same rights to the sysvol directory as the authenticated users of domain-y have and disabled user configuration settings in the policy.

This has not seemed to work thus far. Any input would be greatly appreciated!!

Natesin...

I am Nate, for I have sinned.

 

[markdmac]

Setup a trust between the two domains. Alter the login script on the user domain and set to use resources on the new domain.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[markdmac]

I guess since you mention Sysvol I should point out to deploy the login scripts using AD GPO.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[monsterjta]

So the question is, how to map a drive from domainY to domainX?

 

[natesin]

I figured it out. I was moving computers to the new domain in leu of migrating the users, email, voicemail, RAS, etc at a later time. I already have a 2-way forrest trust established. The problem was, the computers resided on the new domain and the users on the old domain and the logon scripts wouldnt work. We are using login scripts by specifying them in the users property sheet in AD (I know this is probably not the best way and we will change in the future). On the new domain I had to create a policy to allow cross forrest policies plus user group policy loopbact to merge and I created a drive mapping policy on the new domain. Seemed to work like a champ. Of course I think I will have to wait for the policies to take affect. Does anyone know a better way to force a policy refresh besides gpupdate /force from the command line. I do that and it still doesnt ever seem to work.

Thanks for your input!!

Natesin...

I am Nate, for I have sinned.

 

[markdmac]

Policies should auto update after 15 minutes.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript