Language

Search

View Cart (0)

Register

Login

× Search

Menu

Friday, May 15, 2026

ProductsCopyRight2Profile-Migration

Computer and User Profile Migration

CopyRight2 simplifies computer and user profile migrations across domains. Secure, effective, and free to try!

CopyRight2's Computer and Profile Migration feature assists in migrating Windows® user profiles on remote computers. This includes keeping application settings, existing data, shortcuts and personal preferences intact.

The feature supports desktop operating systems from Windows® 7 through Windows® 11, and server operating systems from Windows® Server 2003 through Windows® Server 2025.

It enables seamless migration of domain computer objects to target domains within the same or a different Active Directory forest, automatically updating client computers' domain membership—a practical solution for Windows® profile migrations.

Our user profile migration tool is designed for fast cutovers. During profile migrations, it typically re-ACLs ~6,000+ objects per second (files, folders, and registry keys), so even large profiles can often be processed in seconds, depending on endpoint performance and profile size.

CopyRight2's password migration feature allows users to continue authenticating with their existing passwords after the move, reducing user disruption and avoiding password resets.

In addition, CopyRight2 can migrate the user's DPAPI master key, helping users retain access to DPAPI-protected data after the migration. This includes stored browser passwords, saved Remote Desktop credentials, user certificates and application data encrypted by third-party software through Windows® DPAPI.

Our solution has a simple interface. It makes it easy to track and control the profile migration process in real-time. Its security-focused implementation leverages Windows® native security features to protect data integrity and avoid delegating sensitive security contexts to endpoints.

CopyRight2 also supports Computer and Profile Migration scenarios from an on-prem Active Directory domain to Microsoft Entra, as well as from Microsoft Entra back to a domain.

Preserve User Settings

Migrate user profiles with all personalized settings and preferences intact.

Remote Management

Remotely manage profile migrations across all workstations without onsite visits.

Enhanced Security

Secure profile migration relying on Windows® native security features.

Free Trial Watch Video

Computer and Profile Migration Tutorial Video

Configuration Settings

Source and Target Domain Selection

Choose a domain controller in the source domain and the target domain to perform the remote computer migration.

Computer Selection

Select the computer objects in the source domain that you want to remotely migrate to the target domain.

Job Settings

Enable user profile migration, including shortcuts and persistent network connections.

Perform string replacement operations in users' HKCU registry hive based on a predefined replacement list. Migrate local group memberships, service accounts and Windows® user rights (NT privileges). If necessary, reset the client's TPM to ensure all settings are properly updated.

Profile Filter

CopyRight2 offers multiple options for handling profiles that have no matching account in the target domain.

You can exclude profiles for users who are missing, disabled in the source domain, or inactive for a defined period. You can also specify users or groups to exclude.

Active Directory Options

Active Directory options.

Decide where to create computer objects in the new domain. Determine if you want to migrate the parent OU structure of the selected computers.

Migrate the group memberships of the source computer object. Some third-party software deployment solutions use group memberships of computers to automatically distribute software.

Active Directory Attributes

Active Directory computer attributes.

Define which Active Directory attributes to migrate to the target computer object.

Include all required attributes—for example, custom attributes introduced through an Active Directory schema extension.

Domain Trust Relationship

Domain trust relationship definition.

If the target domain trusts the source domain, you don't need to set up security contexts or share credentials between systems. If the trust uses selective authentication, see Selective authentication for Computer & Profile Migration.

If there is no trust, configure the credentials used to join the target domain.

Advanced Settings

To rename computers or user accounts when naming conventions differ between the source and target domain, create a mapping file.

For direct Microsoft Entra migrations, CopyRight2 also supports mapping existing Windows profile owners to Entra identities and can authenticate to the target Entra tenant when required.

Enable advanced options such as cached credential updates for VPN or Wi-Fi clients (available as an add-on). This is useful for clients that require pre-logon authentication, because Windows® clears cached credentials after a domain change.

Microsoft Entra Device Join

Automated Entra Device Join

CopyRight2 supports Microsoft Entra device join as part of a Computer and Profile Migration job.

Devices can optionally leave an existing Entra tenant and join a target Entra tenant using a provisioning package (PPKG) created with Microsoft Windows Configuration Designer.

Existing Windows profile owners can be mapped to Entra users by Entra GUID, by UPN, or by automatic AD/Entra UPN matching.

Scripting

You can customize the migration process by using a VBScript or PowerShell script.

These scripts can transform the Active Directory computer object or perform custom tasks when the job starts or ends on the server side.

You can also define scripts to run at the start or end of the client-side job or during profile migration.

Job Tracking

The computer and user profile migration feature doesn’t require an external software distribution solution.

CopyRight2 includes job tracking and validation to monitor migration progress on each remote endpoint, which is especially useful for large-scale projects.

You can also use the command-line interface with your existing deployment solution.

Status Overview

In the status overview, monitor the status of computers being migrated by the job.

After the process runs on the remote computer, the log file is uploaded to a central repository.

You can then manage and view the job log for each computer.

Status Details

Open the detail view to see Windows® user profiles stored on remote computers.

The system also highlights profiles that can’t be migrated—for example, profiles without a matching user account in the new domain.

Cached Credential Update Add-On

Migrating computers connected over VPN can present additional challenges. Windows® clears cached credentials after a domain membership change, because they usually don't work in a new domain.

If the VPN client does not have logon screen authentication, users need to use the Windows® switch user function to save new cached credentials. This process involves:

Logging on with a local account to open the VPN tunnel.
Performing a second logon while the tunnel remains open to cache the new credentials.

Alternatively, they can visit a location with domain controller access.

Similar challenges arise with Wi-Fi networks requiring additional authentication after logging on to Windows®.

The CopyRight2 Cached Credential Add-on resolves these issues by updating cached credentials for the new domain.

Do You Have Any Questions or Suggestions?

In case of any questions or suggestions, please feel free to contact us at support@sys-manage.com. We like hearing from you.

COPYRIGHT2 TRIAL

Connect with us

Terms Of Use Privacy StatementCopyright © Sys-Manage, 1998-2026. All Rights Reserved.

Back To Top