Sunday, January 29, 2012

Lithnet.MoveUser - replacement for Microsoft's moveuser.exe and Win32_UserProfile.ChangeOwner

Lithnet.MoveUser is a command line tool that can be used to change the owner of a profile from one user to another. It is designed to be a replacement for Microsoft's moveuser.exe tool (used for Windows XP), originally included in the Windows Resource Kit, and the Win32_UserProfile.ChangeOwner WMI method, used for Windows Vista and above.

The Lithnet.MoveUser tool provides the same functionality as the other tools, but overcomes some of the shortcomings of the Microsoft provided toolsets. It does not require any scripting knowledge, provides a consistent experience across Windows XP, Vista, and Windows 7, and provides detailed logging of progress and any errors encountered.

The tool will perform the following tasks
  1. Change the owner of the profile to the destination user, and update associated permissions
  2. Add the destination user to the same local groups that the source user was a member of
  3. If the source account is a local account, then it can either be deleted, disabled, or left as-is after a successful migration. By default it is deleted
  4. The source and destination usernames can either be provided in standard username format (domain\username, computer\username) or as a SID
  5. The tool can also scan areas outside of a users profile for permissions assigned to the source user, and update them to apply to the destination user instead.
Ensure you have at least Microsoft .NET framework 3.5 installed, then download the tool and run the following command for help

lithnet.moveuser.exe /?

The following examples take the profile for the local account for 'bob' and migrate it to bob's account in the lithnet domain
lithnet.moveuser.exe .\bob lithnet\bob
lithnet.moveuser.exe bob lithnet\bob
lithnet.moveuser.exe BOBSPC\bob lithnet\bob

The following example migrates the local profile for 'jane' and migrates it to the SID of jane's domain account (the workstation may not yet be joined to the new domain)

lithnet.moveuser.exe .\jane S-1-5-21-2656768339-1635643127-14959812366-1038

Other examples

lithnet.moveuser.exe .\dave lithnet\davidm /replace
lithnet.moveuser.exe john lithnet\johnsmith /postmoveaction:keep
lithnet.moveuser.exe S-1-5-21-2656768339-1635643127-14959812366-3442 S-1-5-21-2
lithnet.moveuser.exe otherdomain\john lithnet\john
lithnet.moveuser.exe lithnet\john .\john
Download Latest Version

Change log

Date Version Details
29/1/2012 1.0.4411 Initial release

1 comment :

Rickett said...

This script is awesome. I've used it quite a bit.