Ghost Solution Suite

 View Only
Expand all | Collapse all

Can GSS2 copy User data from one profile/login and apply it to another?

  • 1.  Can GSS2 copy User data from one profile/login and apply it to another?

    Posted Feb 26, 2007 05:57 PM
    Hi All,

    I'm evaluating GSS2 for our medium-sized business; and since they refuse to hire fulltime IT staff I'm limited in how much time I can dedicate to testing the trialware version... I had a question about the capabilities of GSS2; and couldn't find an obvious answer on the main product documentation, tutorials, or datasheets.

    We would like to be able to reset PCs to a default state for deployment. Ghost can certainly do most of this with a standard image. HOWEVER, some of our shared printers and other software must currently be configured while logged in as the end-user, in order for the settings to be what we want (they're user/profile/login specific and cannot simply be set while logged in as the Administrator account)...

    Can GSS2 somehow handle this situation? I know it can capture user information & settings (user migration tool or something similar, right?) ...But can it only copy that same user to a new PC/OS, or can it somehow apply those settings to a different user's profile?

    Please advise; any and all suggestions would be appreciated!

    Thanks, take care,

    --Noel
    P.S. We're running an Active Directory Domain on a couple of Win2k3 boxes.


  • 2.  RE: Can GSS2 copy User data from one profile/login and apply it to another?

    Posted Feb 26, 2007 06:09 PM
    BTW, In case you're curious, here's a partial list of tasks I typically perform on a machine during deployment, while logged in as the end-user. Any way Ghost can help automate these tasks?

    1) Map a network drive or two (can vary depending upon user's department)
    2) Map a network printer
    3) Change default file & folder views
    4) Clean up desktop icons and start menu preferences - standardizing the items that appear.
    5) Clean up default IE links and set some IE preferences.
    6) Rename some of the links to "My Documents" and other user-specific folders.
    7) Put a shortcut on the desktop for the user's personal (profile-specific) network share/drive.
    8) Set some power & screensaver settings (power settings appear to only "stick" in Windows XP when logged in as the actual end-user).

    Take care,

    --Noel


  • 3.  RE: Can GSS2 copy User data from one profile/login and apply it to another?

    Posted Feb 26, 2007 07:18 PM
    Hi Noel

    There are two user migration features in GSS2.0.

    Integrated User Migration - which does not have the ability to restore to different users at present, and separately the Symantec User Migration Wizard - which does.

    To restore settings to a different user's profile, the wizard requires that the different user has previously logged in to the target machine. This is not the case for 'same user' restore.

    There is also an undocumented use of the wizard which allows restore to different users without requiring login for those users. This requires the inclusion of those users as 'dummies' in the source package.

    The Symantec User Migration Wizard is not available in the trial version.

    Perhaps your local Symantec representative can work out some way for you to be able to evaluate this module.

    Regarding your specific questions in the second post, I'll answer those separately.

    Thanks,
    Xan


  • 4.  RE: Can GSS2 copy User data from one profile/login and apply it to another?

    Posted Feb 26, 2007 09:20 PM
    Hi Noel,

    Both integrated user migration and migration wizard are able to create and restore user profiles to the target machines provided following conditions are met:

    a) if user account was local on the source machine then local user account must exist on the target machine prior to restore (just account, not user profile, ie. no user specific files or folder need be present on the target machine).
    b) if user account was domain on the source machine then user migration will create account and profile on the target machine provided that domain in question can be contacted for user information (eg. machine is connected to the domain). This can be easily achieved by using standard Ghost console tasks.

    Answering your second post in brief: yes both user migration tools can do everything apart from network printers install. Network printers require a specific API call in the context of the currently logged in user for the printer to be created. It is possible that we might consider investigating and extending this feature for the next release or service pack so that it does not require Win32 API.


  • 5.  RE: Can GSS2 copy User data from one profile/login and apply it to another?

    Posted Feb 27, 2007 06:41 PM
    Hi Noel

    Regarding your second post, and adding to the information already supplied.

    > 1) Map a network drive or two (can vary depending upon user's department)

    This is supported. Mapped network drives are captured and restored for each user.

    > 2) Map a network printer

    As per Eugene?s comments, but also note, restoring a network printer to a logged on user in the context of that logged on user (using the wizard) should succeed.

    > 3) Change default file & folder views

    This is supported. Explorer options Tools-> Folder Options -> General, and Tools-> Folder Options -> View are captured and restored for each user.

    > 4) Clean up desktop icons and start menu preferences - standardizing the items that appear.

    The answer to this one has a few different parts.
    - Capture and restore of Start ->Settings -> Taskbar and Startmenu preferences is supported.
    - Migration of some startmenu items is supported.
    - Desktop shortcuts to local resources will be captured and restored.
    - The ?clean up? part could be achieved using console command execution.
    - Desktop shortcuts to non-local resources like unc shares and files and directories hosted on mapped network drives will be captured, but will not be restored*.

    *This applies to restore of shortcuts by user migration generally. If user migration cannot resolve the shortcut to a file or directory target during the restore process, the shortcut will not be restored. The functionality was intended to be helpful, with the intention of not restoring shortcuts to local resources that did not exist on the target machine. This has turned out to be less than ideal for a number of reasons. We are looking at how we might resolve this for future releases. The resolution attempt takes place in the context of the user performing the restore operation. When performing a restore using console, the restore takes place in the context of local SYSTEM. Local SYSTEM cannot resolve shortcuts to remote resources. This functionality does not affect internet explorer links.

    > 5) Clean up default IE links and set some IE preferences.

    Migration of Internet Explorer preferences and favorites/links is supported.
    The ?clean up? part could be achieved using console command execution.

    > 6) Rename some of the links to "My Documents" and other user-specific folders.

    I'm not 100% sure I understand. Could you expand on this one?

    > 7) Put a shortcut on the desktop for the user's personal (profile-specific) network share/drive.

    If the drive mapping is included in the package, or alternatively if the drive mapping is present on the machine prior to the restore, the shortcut will be restored.

    > 8) Set some power & screensaver settings (power settings appear to only "stick" in Windows XP when logged in as the actual end-user).

    Capture and restore of these settings is supported.

    Appendix O of the GSS2.0 Implementation Guide has detailed information about all supported applications and settings and related caveats - we are happy to discuss these anytime.

    Regards,
    Xan


  • 6.  RE: Can GSS2 copy User data from one profile/login and apply it to another?

    Posted Feb 28, 2007 02:38 PM
    Thanks, Xan! A couple of follow-up questions, if I could:

    > Hi Noel
    >
    > Regarding your second post, and adding to the
    > information already supplied.
    > .......
    > - The ?clean up? part could be achieved using console
    > command execution.

    Console Command Execution. Haven't had a chance to explore this - are these like macros or batch files that you run (from the console) on client machines?

    > - Desktop shortcuts to non-local resources like unc
    > shares and files and directories hosted on mapped
    > network drives will be captured, but will not be
    > restored*.


    So basically what you're saying is that since the restoration is attempted by the "System" account, the user's credentials can't be used to validate access to remote resources (like mapped drives); and thus they aren't currently restored? ...Just trying to get a handle on exactly what the limits are.

    > > 6) Rename some of the links to "My Documents"
    > and other user-specific folders.

    >
    > I'm not 100% sure I understand. Could you expand on
    > this one?

    Certainly. I can't get the company to agree to mapping people's "My Documents" folder to a network share/drive (using AD/Domain policies). So we have people that use "My Documents" instead of the network share for their work files. In an attempt to nudge them in the proper direction, I typically rename the start-menu "My Documents" item to "Personal Documents" in order to differentiate it from their "Work Documents" network share (this start-menu change usually automatically propogates through some other system-level menus/UI; though some applications still use the traditional "My Documents" name).

    > > 7) Put a shortcut on the desktop for the user's
    > personal (profile-specific) network share/drive.

    >
    > If the drive mapping is included in the package, or
    > alternatively if the drive mapping is present on the
    > machine prior to the restore, the shortcut will be
    > restored.

    The drive mapping in question is established via a login-script, and is specific to each user (basically its a Domain-level script establishing a "home directory" on the network). The shortcut is usually created from the drive letter/mapping. I'm guessing that your answer here is going to be that such an operation isn't supported in the User Migration tool, but I've been surprised already by some of the functionality of GSS! :-)

    Thanks again!

    Take care,

    --Noel


  • 7.  RE: Can GSS2 copy User data from one profile/login and apply it to another?

    Posted Feb 28, 2007 08:28 PM
    Firstly, a philosophical digression. The function of Ghost's integrated User Migration and the Symantec User Migration Wizard is - user migration, roughly defined as the moving of a specific users files and settings from one machine to that same user or a different user on another machine. Although I think Ghost/User Migration is capable of addressing your needs, Some of the issues you are trying to address fit more closely into deployment and configuration.

    Having said this, thank you for pointing out exactly what your needs are. There is potential to extend the user migration solution into this area. This is something we need to follow up. Certainly it would make your task much easier. Deployment, configuration and management is what Ghost is all about after all.

    Anyway, on to your specific questions as they relate to the current version of the GSS User Migration and Symantec User Migration Wizard.

    Most of the user configuration needs you have identified can be served by using the wizard to capture a model user (which you wouldnt use for anything else) from a source machine with your required settings, then logging on as the target user on the target machine and restoring the model user in that context.

    > Console Command Execution. Havent had a chance to explore this - are these like macros or batch files that you run (from the console) on client machines?

    Pretty much. If you create a new task in console there is a checkbox on the general tab called Command Execution. If you tick this, the command execution task step tab will appear. Im not surprised if it has been missed, the way the tasks are displayed, you need to enable the checkboxes on the general tab before the individual task steps appear. If your command requires files not normally present in a windows installation (like a custom script for example) those can be transferred to the machine (as part of the same task) using the Transfer Files step.

    As an aside, the command execution step is always the last step executed. To see the order in which task steps are executed, right click the task and choose Task Scenario Report.

    > So basically what you're saying is that since the restoration is attempted by the "System" account, the user's credentials can't be used to validate access to remote resources (like mapped drives); and thus they aren't currently restored? ...Just trying to get a handle on exactly what the limits are.

    Thats true for shortcut validation during managed Ghost User Migration using the console. If you are running the Symantec User Migration Wizard though, shortcut validation will occur in the context of the logged on user you are using to perform the restore operation.

    We are looking at how we might provide an option in future releases to restore shortcuts without validating them, or perhaps some kind of advanced validation.

    > I can't get the company to agree to mapping people's "My Documents" folder to a network share/drive (using AD/Domain policies). So we have people that use "My Documents" instead of the network share for their work files. In an attempt to nudge them in the proper direction, I typically rename the start-menu "My Documents" item to "Personal Documents" in order to differentiate it from their "Work Documents" network share (this start-menu change usually automatically propogates through some other system-level menus/UI; though some applications still use the traditional "My Documents" name).

    Ah, o.k. This is something more than a simple rename operation. When you rename this item, windows actually makes a change to the registry, but the underlying name of the folder isnt actually changed. This is probably a good thing. The approach you have chosen will not cause any problems for any non windows logo compliant applications which might want to access this location using the absolute name.

    For Windows XPSP2, the change made to the registry by windows is located under:

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{450D8FBA-AD25-11D0-98A8-0800361B1103}

    The default value for that key is unset. When the item is renamed under windows, the default value is set to the value you specified. Eg; Personal Documents.

    After setting this key you can capture it by specifying it in the Registry tab of the console user migration template. Do not include child keys as they are sometimes machine specific for this particular clsid. The console migration template can then be exported for use with the wizard. Drop it into the Program Files\[]\User Migration Wizard\XML directory on the client side.

    > The drive mapping in question is established via a login-script, and is specific to each user (basically its a Domain-level script establishing a "home directory" on the network). The shortcut is usually created from the drive letter/mapping. I'm guessing that your answer here is going to be that such an operation isn't supported in the User Migration tool, but I've been surprised already by some of the functionality of GSS!

    Again, command execution should be able to handle this task. A logical place for this is as part of the script above. Basically, you will need to script the creation of a shortcut, or alternatively just file transfer it and copy it to each user enumerated by the script.

    If you are logged on at the client in the user context anyway (to restore the model user) a script written for execution in that context will be much simpler and will not require user enumeration.

    Let us know how your implementation goes.

    Thanks,
    Xan


  • 8.  RE: Can GSS2 copy User data from one profile/login and apply it to another?

    Posted Feb 28, 2007 08:59 PM
    > So basically what you're saying is that since the restoration is attempted by the "System" account, the user's credentials can't be used to validate access to remote resources (like mapped drives); and thus they aren't currently restored? ...Just trying to get a handle on exactly what the limits are.

    Just to be clear, this applies only to restore of shortcuts to files and directories hosted on mapped network drives and to restore of shortcuts to files and directories hosted on unc paths, and only where the restore does not take place in the context of a user which has access to those mapped network drives and unc paths. Restore of the mapped network drive mappings themselves is entirely unaffected.


  • 9.  RE: Can GSS2 copy User data from one profile/login and apply it to another?

    Posted Feb 28, 2007 09:18 PM
    > since the restoration is attempted by the "System" account, the user's credentials can't be used to validate access to remote resources (like mapped drives); and thus they aren't currently restored?

    Just thought I'd add some additional detail to this, since you're in an AD environment and there are several "modes" Windows filesharing works in. Microsoft have made it so that if you're in a workgroup, the "System" context on a machine functions like it did in NT4, and services don't get to do anything on the network full stop.

    In AD, this behaviour changes; if a machine is a domain member, then software running in a system context picks up the identity of the machine itself, and in an Active Directory environment your ACL editors and such like will allow the user accounts that exist "under the hood" to represent machines themselves to be added to the ACLs for file shares and other resources.

    So, in AD you can write scripts that execute in system context that do useful things on the network, the difference being that you grant the necessary permissions to the machines they run on rather than to a logged-on user.


  • 10.  RE: Can GSS2 copy User data from one profile/login and apply it to another?

    Posted Mar 01, 2007 01:14 PM
    Thanks, Nigel!

    As you might have guessed, some of our file-shares and printers are machine-specific; and some are user-specific... :-P Its never a simple solution!

    ..I read about AD scripting and the console command execution, and it just makes me wish I had the time to devote to learning all of this - having to support several MS-SQL databases and a couple of popular websites (using old-style ASP no less) really eats up the time!

    Much appreciated,

    --Noel


  • 11.  RE: Can GSS2 copy User data from one profile/login and apply it to another?

    Posted Mar 07, 2007 07:56 PM
    Xan (or others) -

    Is the User Migration Wizard that you mentioned in your previous replies pretty well documented / User-Friendly to use for restoring one user's settings to another account (per my earlier replies)? Or is this an "undocumented" feature that I'll need to get info on?

    We just purchased 25 licenses of GSS2, so now I have to make it work... ;-)

    Thanks, take care,

    --Noel


  • 12.  RE: Can GSS2 copy User data from one profile/login and apply it to another?

    Posted Mar 07, 2007 08:06 PM
    Hi Noel,

    User Migration Wizard is a well documented application that is a natural extension of the old scriptable application called "Automigrate" from SCM 3x days. In addition to allowing you to use friendly UI interface it also lets you to script your migrations in case you are not using Ghost console. Please refer to the Ghost manual for all supported command-line options. Internally User Migration Wizard is using same migration engine that is serving Ghost console migration. User Migration Wizard is not available in the trial version hence why you missed it while evaluating GSS 2.0.

    Have a great migrations!
    Eugene.


  • 13.  RE: Can GSS2 copy User data from one profile/login and apply it to another?

    Posted Mar 07, 2007 08:20 PM
    Yup. The feature is documented. There is actually a separate Symantec User Migration Guide specifically for this product. The guide (pdf) is located in the Symantec User Migration Wizard installation directory.

    Let us know how you get on with your implementation.

    Thanks,
    Xan


  • 14.  RE: Can GSS2 copy User data from one profile/login and apply it to another?

    Posted Apr 25, 2007 07:19 PM
    Hi Noel

    We are releasing a live update for GSS2.0 later today which will allow restore of shortcuts which point to to unc paths and network locations, where shortcuts to unc paths and network locations are captured using a file/folder inclusion path. The live update does not apply to the GSS2.0 trial edition, but we will provide an updated trial edition for download some time soon.

    Regards,
    Xan