Question : Join a Domain without losing users' profiles.

I need to get all of my users on to the domain that I have created, but some of them are reluctant to join because they don't want to lose their profile settings.  All of the computers are running Windows XP (most with SP2, all with SP1 at least).  The domain is a Windows 2003 domain (all servers are Windows 2003).  I know that I can "copy" profiles in Windows XP (System Properties, Advanced Tab, User Profiles section, click Settings), but I have had trouble doing that on some machines.  Not all of their settings copy over and some program do not work.

I have got to believe that there is some way to have a user join a domain and keep the user's current profile in tact and active.  If anyone can help me out with this I would greatly appreciate it.

Thanks.

Answer : Join a Domain without losing users' profiles.

When you use the "copy to" feature...it will ask you to select the location to copy the profile to....and it will also have a "change" button under  a section called "permitted to use"....you click the button and give the domain user account permission.  for example, you would type: domain\username.

"I'm planning on giving each user "local" adminstrator priveleges"

Well I hope that you realize that this is a HUGE, HUGE, HUGE SECURITY RISK. Best practice states that users should never have local admin accounts unless it is ABSOLTELY necessary....and then it is good to create a seperate account that is only used when someone needs to act as an administrator. A user with local admin rights can do anything on the computer that they wish.....

Also, if a computer is infected with a virus/trojan...then if the user has a local admin account....that virus would be able to easy spread and corrupt your entire network.

What do you mean by "change things" on their laptops?

By making users "power users" then they will be able to do most things on the computer...including changing desktop settings, etc. But they won't be able to access critical system files which is good since only real administrators need access to these for security reasons.

Most programs work fine without administrator rights.

You do need local admin rights to install programs...so if you let your users install programs then you may think about creating and giving them access to a local admin account...but not making their domain accounts local admins.