Re: Exchange 5.5 to 2003 migration questions

From: Jaclynn Hiranaka [MSFT] (jaclynnh_at_online.microsoft.com)
Date: 04/07/04 

Date: Wed, 7 Apr 2004 12:44:44 -0400

Do you see the "LDAP returned the error [32] Insufficient Rights when
importing the transaction" in the error message?

That usually means you do not have the correct accounts listed on the
Connection agreement. What accounts do you have on your connection
agreements? Were these CAs made by the ADC Wizard?

Also from my previous post:
The mail attributes would be stamped on that disabled account.
So if you brought up AD Users and Computers from the Exchange server you
would see an Email Addresses tab and an Exchange Advanced tab. 

-- 
-------------------------
Jaclynn Hiranaka
Enterprise Messaging Support
This posting is provided "AS IS" with no warranties, and confers no rights.
© 2003 Microsoft Corporation. All rights reserved.
"Chris Tatro" <k0rnshell@charter.net> wrote in message
news:eVcR0nLHEHA.3556@TK2MSFTNGP10.phx.gbl...
> On the NT domain all the accounts in Exchange 5.5 are associated with the
nt
> account yet.
> where do you look at the attributes stamped on the ADC?
>
> if i go into Exchange System Manager the two accounts i migrated one is
> associated with nt authority\system and the other is with
> domain\administrator
> ----------------------------------------
> MSADC
> Category: Replication
> Event ID: 8148
> Synchronization summary for Connection Agreement 'Users: wausauhomes.com -
> WHI_DOMAIN\WHI' --- 
>
> [Destination Server: MOLLY]
>
> [Start Time: Wed Apr 07 10:56:51 2004]
>
> [End Time: Wed Apr 07 10:56:51 2004]
>
> [Number of entries processed successfully: 0]
>
> [Number of adds: 0, Number of modifications: 0]
>
> [Number of entries failed: 0]
>
> For more information, click http://www.microsoft.com/contentredirect.asp.
>
> ---------------------------------------------------------
>  source: msadc
> category: ldap operations
> event id: 8270
>
> LDAP returned the error [32] Insufficient Rights when importing the
> transaction
>
> dn: cn=Material Create,cn=Recipients,ou=WHI_DOMAIN,o=WHI
>
> changetype: Add
>
> distinguishedname:CN=Material Create,cn=Recipients,ou=WHI_DOMAIN,o=WHI
>
> createtimestamp:20040406151455.0Z
>
> cn:Material Create
>
> report-to-originator:TRUE
>
> report-to-owner:FALSE
>
> hide-dl-membership:TRUE
>
> --------------------------------------------------------------------------
--
> ----------------------------------------------
>
> source MSADC
>
> category: Replication
>
> Event ID 8183
>
> Could not import the entry
> 'cn=Webmaster@WHTrans.com,cn=Recipients,ou=WHI_DOMAIN,o=WHI' into the
> directory server 'MOLLY' in the second attempt. (Connection Agreement
> 'Users: wausauhomes.com - WHI_DOMAIN\WHI' #3272)
>
>
> ------------------------
>
> domain is in native mode
>
> Any ideas?
>
>
>
> "Jaclynn Hiranaka [MSFT]" <jaclynnh@online.microsoft.com> wrote in message
> news:us6ZLDLHEHA.2472@TK2MSFTNGP10.phx.gbl...
> > From my previous post:
> >
> > What NT accounts are the 5.5 mailboxes associated with?  When you set up
> the
> > ADC what accounts are the mail attributes stamped on?
> >
> > What NT accounts are the E2K3 mailboxes associated with?
> >
> > What are the descriptions on the ADC events you are seeing?  Just an
event
> > ID an source don't tell me the whole story.
> >
> > Is the Win2K3 domain in native mode for Windows?
> >
> > -- 
> > Hope that helps.
> >
> > -------------------------
> > Jaclynn Hiranaka
> > Enterprise Messaging Support
> >
> > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> > © 2003 Microsoft Corporation. All rights reserved.
> >
> >
> > "Chris Tatro" <k0rnshell@charter.net> wrote in message
> > news:eW6BiFKHEHA.2668@TK2MSFTNGP10.phx.gbl...
> > >
> > > I have a two domains one is the old nt 4.0 domain the other in the
> windows
> > > 2003 domain ( they have two different names). I created a trust
between
> > the
> > > two domains and then used ADMT to migrate all the NT 4.0 accounts to
> > Active
> > > Directory. I then ran setup /forestprep and setup /domainprep I then
ran
> > > exdeploy and made sure I didn't have any errors in the logs once I had
> all
> > > the errors worked out I ran ADC to make a connection from exchange 5.5
> to
> > > Active Directory. I then installed Exchange 2003 and moved two
mailboxes
> > > from exchange 5.5 to exchange 2003 to see if they worked. Well I am
> > getting
> > > a bunch of error in the event log like this on the server running ADC:
> > >
> > >
> > >
> > > source: msadc
> > >
> > > category: ldap operations
> > >
> > > event id: 8270
> > >
> > >
> > >
> > > source:msadc
> > >
> > > category: replication
> > >
> > > event id: 8183
> > >
> > >
> > >
> > >
> > > "Jaclynn Hiranaka [MSFT]" <jaclynnh@online.microsoft.com> wrote in
> message
> > > news:%23vyDI3JHEHA.3528@TK2MSFTNGP09.phx.gbl...
> > > > You said that you have an old domain and a new domain.  Was your
> > original
> > > > domain NT 4.0?  How did you migrate the user accounts to Windows
200X?
> > > Did
> > > > you use ADMT?  Are you running Windows 2000  or 2003?
> > > >
> > > > Do you have the ADC set up?  If you came from a separate domain and
> did
> > > not
> > > > use ADMT to migrate the user accounts the ADC would have created
> > disabled
> > > > user accounts in the new Windows 200X domain.  The mail attributes
> would
> > > be
> > > > stamped on that disabled account.  So if you brought up AD Users and
> > > > Computers from the Exchange server  you would see an Email Addresses
> tab
> > > and
> > > > an Exchange Advanced tab.  What accounts are the 5.5 mailboxes
> > associated
> > > > with?
> > > >
> > > > There should have been several scenarios in the deployment guide to
> get
> > > from
> > > > NT 4.0/Exchange 5.5 to Windows 200X/Exchange 200X.
> > > >
> > > > Sounds like you still have 2 separate domains so it doesn't sound
like
> > you
> > > > upgraded the NT 4.0 domain to Windows 200X.   That would have been
one
> > way
> > > > to upgrade the domain.  The other way would be to use some sort of
> user
> > > > migration tool to migrate the user accounts from the NT 4.0 domain
to
> > the
> > > > Windows 200X domain.
> > > >
> > > > When you move the mailboxes to the new E2K3 server what NT account
are
> > > they
> > > > associated with?  Are they associated with a new NT account created
in
> > the
> > > > Win2KX domain?
> > > >
> > > > -- 
> > > > Hope that helps.
> > > >
> > > > -------------------------
> > > > Jaclynn Hiranaka
> > > > Enterprise Messaging Support
> > > >
> > > > This posting is provided "AS IS" with no warranties, and confers no
> > > rights.
> > > > © 2003 Microsoft Corporation. All rights reserved.
> > > >
> > > >
> > > > "Chris Tatro" <k0rnshell@charter.net> wrote in message
> > > > news:%23xRYDJJHEHA.1528@TK2MSFTNGP09.phx.gbl...
> > > > > I have a question on how exchange 5.5 and exchange 2003 are
suppose
> to
> > > > > interact after you install ADC and Exchange 2003. I have followed
> the
> > > > > Exchange 2003 deployment guide that I downloaded from Microsoft's
> > > website
> > > > to
> > > > > get where I am at now. I have moved two mailboxes from the
Exchange
> > 5.5
> > > > > server to the Exchange 2003 server with now errors occurring
during
> > the
> > > > > move. But when I logon to the old domain and the old exchange 5.5
> > server
> > > > and
> > > > > try to send a message to one of the migrated mailboxes I mentioned
> > above
> > > I
> > > > > get a Undeliverable message like the following:
> > > > >
> > > > >
> > > > >
> > > > > Your message did not reach some or all of the intended recipients.
> > > > >
> > > > >
> > > > >
> > > > >       Subject:
> > > > >
> > > > >       Sent:                 4/7/2004 6:14 AM
> > > > >
> > > > >
> > > > >
> > > > > The following recipient(s) could not be reached:
> > > > >
> > > > >
> > > > >
> > > > >       Bart Kniess on 4/7/2004 6:14 AM
> > > > >
> > > > >             A required directory operation was unsuccessful
> > > > >
> > > > >                 The MTS-ID of the original message is: c=US;a=
> > > > > ;p=WHI;l=EMAILSERVER
> > > > >
> > > > >
> > > > >
> > > > > One more question when I get this working properly are the
mailboxes
> > > > > content supposed to be synced between the exchange 5.5 server and
> the
> > > > > exchange 2003 server? For example if I send an email to a user who
I
> > > have
> > > > > already moved a mailbox will the message show up in both the
> Exchange
> > > 5.5
> > > > > server mail and the Exchange 2003 server mailbox?
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: Email Question - multiple reading same box at once?
    ... just to find out what Exchange 2003 is really made of. ... If you have acces to the server, it is easier to configure it on the ... In Server Management, go to Users, Exchange Advanced, Mailbox ... Rights and give additional users rights to the mailboxes, ...
    (microsoft.public.windows.server.sbs)
  • Re: Migrate to 2008 Doamin
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... Exchange 2000 is not aware of linked value replication which becomes ... "Meinolf Weber" wrote: ... only add additional objects for server 2008 DC. ...
    (microsoft.public.windows.server.migration)
  • Re: Calendar issue after moving mailbox
    ... Wizard, so I suspect Andy David is right, your users have excessive rights ... MVP - Exchange ... "Protecting the world from PSTs and brick backups!" ... with SP2 server to another ...
    (microsoft.public.exchange.admin)
  • Re: Calendar issue after moving mailbox
    ... The folder rights should move with the mailboxes when using the Move Mailbox ... MVP - Exchange ... with SP2 server to another ... and I am moving over folders. ...
    (microsoft.public.exchange.admin)
  • Server error: Cannot create file "pagename"
    ... When trying to publish to our intraweb, the users with author privledges are ... We have a Win2000 server running ... reassigning rights through AD instead of Local rights. ... The authors rights on the new accounts are the same as their ...
    (microsoft.public.win2000.advanced_server)