Re: Active Directory Migration Tool /User rights




Have you found anybody to answer this question. I am having the same
problem?
dsmith@xxxxxxxxxxxxx



Al wrote:
> *Hi
>
> I would appeciate anyone's help on this...
> I have 2 domains running Exchange 2000 Ent with Windows
> Advanced Server. I would like to give the domain admin
> from domain A the rights to be able to use ADMT to move
> users into Domain B.
>
> I tried delegating rights on the destination container but
> that does not work. I know that the process works because
> I can do it using the Enteprise Admin account.
>
> When I try with the domain admin account I get the
> following:
>
> Active Directory Migration Tool, Starting...
> Starting Account Replicator.
> Account MigrationWriteChanges:No Ca Ma CopyUsers:Yes
> CopyGlobalGroups:Yes CopyLocalGroups:Yes CopyComputers:No
> StrongPwd:All
> Moved LDAP://ca.corp.johnson.com/CN=test1,OU=ca
> Users,DC=ca,DC=corp,DC=johnson,DC=com to
> LDAP://ma.corp.johnson.com/CN=test1,ou=users,ou=ma,dc=ma,dc
> =corp,dc=johnson,dc=com
> ERR2:7228 Error updating user rights for CN=test1, rc=-
> 2147024891 Access is denied.
> Operation completed.
>
> Where in Domain B would I need to delegate rights to make
> this work? Any help Would be very much appreciated --al *



--
dsmith411
------------------------------------------------------------------------
Posted via http://www.mcse.ms
------------------------------------------------------------------------
View this thread: http://www.mcse.ms/message166746.html

.



Relevant Pages

  • Re: VB.Net WMI Windows Server 2003
    ... The domain admin account should be able to perform this action. ... NotFound management exception indicates that the management object you are ... Please do not send e-mail directly to this alias. ...
    (microsoft.public.dotnet.languages.vb)
  • Re: VB.Net WMI Windows Server 2003
    ... The domain admin account should be able to perform this action. ... NotFound management exception indicates that the management object you are ... Please do not send e-mail directly to this alias. ...
    (microsoft.public.win32.programmer.wmi)
  • Re: Profile Problem
    ... I rebooted and logged in as a different domain admin account, ... I did reboot and am signed in another domain admin. ... My problem is the domain admin profile is corrupt or something becuase it ...
    (microsoft.public.windows.server.general)
  • Re: W2k3 - Recover from lost Domain Admin passwords
    ... > microsoft.public.windows.server.security, Ulf B. Simon-Weidner ... >> your passwords are more easily compromised if you leave this whole open. ... Don't use the domain admin account, but create admin accounts which are ... Treat the service accounts like your domain admin account. ...
    (microsoft.public.windows.server.security)
  • Re: Event viewer access Denied
    ... > member server. ... if I use a local admin account (run as or log with ... The domain admin is inside the local admin group ...
    (microsoft.public.windows.server.security)

Loading