Re: How do I restore security only on XP Pro?

From: Roger Abell {MVP} (mvpNOSPAM_at_asu.edu)
Date: 04/28/03


Date: Mon, 28 Apr 2003 07:47:02 -0700


ASR would be similar to just doing a backup with system state
and then restoring after the fresh install, which you indicate you
have reason for not wanting to do.
Simply copying profiles is no longer an advised way of doing
things. There is now stuff stored there that is SID sensitive as
well as controlled by encryption based on a hash of the password.
The Fast approach would be very tedious if there are many accounts,
but it will handle things like Office product identities, email storage,
etc. which is otherwise a little tricky.
In the long run, trying for a shortcut based on simple copy out
and copy back will probably end up being more effort (again,
depending on how much of this you need to do)

-- 
Roger 
"Vince C." <noname@hotmail.com> wrote in message news:ulxAM1YDDHA.1960@TK2MSFTNGP12.phx.gbl...
> "Roger Abell {MVP}" <mvpNOSPAM@asu.edu> a écrit dans le message de
> news:eRPWbBYDDHA.2100@TK2MSFTNGP11.phx.gbl...
> > There is no tool available to do exactly what you ask.
> > What you can do however, is to use the Fast tool (file
> > and settings transfer = fast) to collect together what
> > should be transferred from an old account and restored
> > into the new accounts.
> > You will need to define the new accounts in the new
> > install.  For each account you need to log in before in
> > the old system and then again in the new system, each
> > time running Fast.
> > You will find Fast as the fastwiz file in the CD, IIRC it
> > its in the support folder.  You will want to filter down
> > rather severely what files are transferred, keeping things
> > like the email software's pst pab etc files, but not keeping
> > things like exe files or the transfer file will become large.
> >
> > -- 
> > Roger
> 
> Thanks Roger.
> 
> If I understood there is no way to recover the machine SID, for instance? At
> that level it seems it's as fast to save my profiles somewhere, logon using
> new accounts and restore all profiles from saved locations. I also assume
> I'll need to set access rights on all registries accordingly.
> 
> I read a little on ASR (Automated System Recovery). Can't it substantially
> do what I want? I won't have both machines in the same time, that's my
> problem...
> 
> Vince C.
> 
> 


Relevant Pages

  • Re: Unix Services / Default Permissions / WinXP_Pro
    ... the funny part is is that this is a fresh install of the OS by ... Again, Encryption is currently turned off and nothing is encrypted, I have ... > and configuration settings and completely reinstall the operating system - ... >> delete or Create some accounts, all of the other accounts usually get ...
    (microsoft.public.security)
  • Re: Problems restoring user states with OSD and USMT
    ... you captured local accounts from the old ... > I'm having problems restoring a user state using OSD and USMT. ...
    (microsoft.public.sms.tools)
  • Re: Non-admin accounts logon problem...
    ... > accounts, ... in is not in the first and that Users group is ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Transferring Newsgroups to Another System
    ... www.tomsterdam.com and the sections on backing up and restoring. ... I already have the accounts transferred... ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Please explain accounts in XP
    ... > a fresh install, but considering it's only me who uses the PC do I ... > need all these accounts can I just not set pc up with me ... Hi, Jim; ... Computer Management, Local Users screen. ...
    (microsoft.public.windowsxp.newusers)