de-DEen-US
Language
Search
× Search
Saturday, February 14, 2026

Computer and User Profile Migration

CopyRight2 simplifies computer and user profile migrations across domains. Secure, effective, and free to try!

CopyRight2's Computer and Profile Migration feature assists in migrating Windows® user profiles on remote computers. This includes keeping application settings, existing data, shortcuts and personal preferences intact.

The feature supports desktop operating systems from Windows® 7 through Windows® 11, and server operating systems from Windows® Server 2003 through Windows® Server 2025.

It enables seamless migration of domain computer objects to target domains within the same or a different Active Directory forest, automatically updating client computers' domain membership—a practical solution for Windows® profile migrations.

Our user profile migration tool is designed for fast cutovers. During profile migrations, it typically re-ACLs ~6,000+ objects per second (files, folders, and registry keys), so even large profiles can often be processed in seconds, depending on endpoint performance and profile size.

CopyRight2's password migration feature allows users to continue authenticating with their existing passwords after the move, reducing user disruption and avoiding password resets.

Our solution has a simple interface. It makes it easy to track and control the profile migration process in real-time. Its security-focused implementation leverages Windows® native security features to protect data integrity and avoid delegating sensitive security contexts to endpoints.

 

Preserve User Settings

Migrate user profiles with all personalized settings and preferences intact.

Remote Management

Remotely manage profile migrations across all workstations without onsite visits.

Enhanced Security

Secure profile migration relying on Windows® native security features.

Computer and Profile Migration Tutorial Video

Active Directory Migration Video Thumb

Configuration Settings

Source and Target Domain Selection

Domain selection for user profile migration

Choose a domain controller in the source domain and the target domain to perform the remote computer migration.



Computer Selection

Computer selection for user profile remote migration.

Select the computer objects in the source domain that you want to remotely migrate to the target domain.



Job Settings

User profile migration settings.

Enable user profile migration, including shortcuts and persistent network connections.

Perform string replacement operations in users' HKCU registry hive based on a predefined replacement list. Migrate local group memberships, service accounts and Windows® user rights (NT privileges). If necessary, reset the client's TPM to ensure all settings are properly updated.

Profile Filter

User profile migration filter page.
CopyRight2 offers multiple options for handling profiles that have no matching account in the target domain.

You can exclude profiles for users who are missing, disabled in the source domain, or inactive for a defined period. You can also specify users or groups to exclude.

Active Directory Options

Active Directory options.

Decide where to create computer objects in the new domain. Determine if you want to migrate the parent OU structure of the selected computers.

Migrate the group memberships of the source computer object. Some third-party software deployment solutions use group memberships of computers to automatically distribute software.

Active Directory Attributes

Active Directory computer attributes.

Define which Active Directory attributes to migrate to the target computer object.

Include all required attributes—for example, custom attributes introduced through an Active Directory schema extension.

Domain Trust Relationship

Domain trust relationship definition.

If the target domain trusts the source domain, you don't need to set up security contexts or share credentials between systems. If the trust uses selective authentication, see Selective authentication for Computer & Profile Migration.

If there is no trust, configure the credentials used to join the target domain.

Advanced Settings

Advanced Computer and Profile Migration Settings.
To rename computers or user accounts when naming conventions differ between the source and target domain, create a mapping file.

Enable advanced options such as cached credential updates for VPN or Wi-Fi clients (available as an add-on). This is useful for clients that require pre-logon authentication, because Windows® clears cached credentials after a domain change.

Scripting

Scripting for user profile migration.

You can customize the migration process by using a VBScript or PowerShell script.

These scripts can transform the Active Directory computer object or perform custom tasks when the job starts or ends on the server side.

You can also define scripts to run at the start or end of the client-side job or during profile migration.

Job Tracking

The computer and user profile migration feature doesn’t require an external software distribution solution.

CopyRight2 includes job tracking and validation to monitor migration progress on each remote endpoint, which is especially useful for large-scale projects.

You can also use the command-line interface with your existing deployment solution.

Status Overview

Remote user profile migration status.
In the status overview, monitor the status of computers being migrated by the job.

After the process runs on the remote computer, the log file is uploaded to a central repository.

You can then manage and view the job log for each computer.

Status Details

User profile migration details.

Open the detail view to see Windows® user profiles stored on remote computers.

The system also highlights profiles that can’t be migrated—for example, profiles without a matching user account in the new domain.

Cached Credential Update Add-On

Migrating computers connected over VPN can present additional challenges. Windows® clears cached credentials after a domain membership change, because they usually don't work in a new domain.

If the VPN client does not have logon screen authentication, users need to use the Windows® switch user function to save new cached credentials. This process involves:

  1. Logging on with a local account to open the VPN tunnel.
     
  2. Performing a second logon while the tunnel remains open to cache the new credentials.

Alternatively, they can visit a location with domain controller access.

Similar challenges arise with Wi-Fi networks requiring additional authentication after logging on to Windows®.

The CopyRight2 Cached Credential Add-on resolves these issues by updating cached credentials for the new domain.

Do You Have Any Questions or Suggestions?

In case of any questions or suggestions, please feel free to contact us at support@sys-manage.com. We like hearing from you.
Terms Of UsePrivacy StatementCopyright © Sys-Manage, 1998-2026. All Rights Reserved.
Back To Top