samba - Dec 2004 - Way to salvage profiles after domain rejoin?

Somehow my workstations lost their connection to
the domain recently.  I can rejoin them, but when
I leave the domain and rejoin the previous user
profiles are lost.  Well, the data is still on
the system, but all pre-rejoin domain profiles are
listed as "account unknown" in the profile manager.

I know I can probably use the Files and Settings
Transfer Wizard on the XP machines as long as I
do it before the rejoin, but there has
got to be a way to preserve these profiles
without resorting to that time-consuming procedure.
Plus, I've got a healthy mix of XP and 2k boxes,
and the F&STW isn't an option for the 2k machines.

My users have lots of loca data, much of which can
be copied after the fact (My Documents, etc) but
things like Outlook pst files and whatnot are
a bit more difficult.  I don't want to spend
an hour per machine importing pst files and
copying data around.  If it were only a few
machines I wouldn't care, but it's more than
a few. :(

Does anyone have any ideas?

Right now the workstations are functioning fine
and are able to log in (probably with cached
credentials) and work OK, but I've lost the
abilty to remotely manage them and some other
administrative software is no longer functioning
correctly, such as Sophos Enterprise Manager
that lets me monitor the anti-virus software
status on the workstations.

I believe this is related to the server change
I made a few weeks ago.  Some of you may recall
that I had serious speed issues and I blew
away a lot of tdb files in the process of trying
to fix it.  Things seemed fine for a while (again,
I'm assuming things were cached) but now I'm
having trouble.

Thanks for any ideas,

--J(K)

>that I had serious speed issues and I blew
>away a lot of tdb files in the process of trying
>to fix it.  Things seemed fine for a while (again,
>  
>
Sounds like you also lost your SID.  Do you have any backup of your old 
files that you could load up, maybe on a test box, and salvage your SID 
from?  You can always reset the SID on your domain, but you have to know 
what the old one was to do it.

You could also try to determine it from your registry.  In my machine, 
under HKEY_USERS I have a tree named:
S-1-5-21-112718084-1284083569-2990761952-5532
which is my current user SID.  The part before the 5532 (my user RID) is 
the domain portion.  If you see two different sets (of similar length, 
the really short S- numbers are builtins), compare that to the result of
net getlocalsid
The one that doesn't match is your old sid.  Replace the current one 
with the old one and see if things aren't better. 
>I'm assuming things were cached) but now I'm
>having trouble.
>
>Thanks for any ideas,
>
>--J(K)
>
>  
>
-- 
--
Paul Gienger                    Office: 701-281-1884
Applied Engineering Inc.
Systems Architect               Fax:    701-281-1322
URL: www.ae-solutions.com       mailto: pgienger@ae-solutions.com