ADMT v3 Access is Denied

Hi Guys.

I'm testing an AD Migration from a domain in one forest to another domain in
another forest. We have been taken over by another company and i have to
migrate our users/PCs etc from our domain into the new companies domain.

I have a test setup using Active Directory Migration Tool v3.0 between out
main domain and a test domain we already have.

I have installed the Password Export Server Service, set up DNS replication
both ways and set up an External 2 way trust. I'm not given the option to
set up a Forest Trust for some reason. This may be the problem, as I cannot
enter the admin accounts from the source domain into the domain admins group
in the target domain or vice versa.

When I try to migrate a user using ADMT on the Souce domain, I can go all
the way through the Migrate Users wizard but the migration fails with an
Access Denied error. If I try to run the wizard on the Target DC, the Wizard
fails on the "Password Options" screen with an arror:

Unable to establish a session with the password export server. Access is
denied

Is the access denied error caused by the type of trust I have created? If
so, why does the Trust Wizard not give me the option for a Forest type
Trust?

Thanks

John


.

Relevant Pages

  • Re: Separation : Who to separate a child domain from a root domain
    ... If this is a parent child relationship that implies that they're part of the ... same forest and therefore already have a trust. ... etc. than an inter-forest migration. ...
    (microsoft.public.windows.server.active_directory)
  • RE: Server migration - 2k to 2k3
    ... > it is recommended to be migrated using FSMT (File Server Migration Toolkit). ... > the trust between them since the trust cannot identify the machines with ... > forest, and then click Next. ...
    (microsoft.public.windows.server.migration)
  • Re: ADMT v3 Access is Denied
    ... I discovered that the Forest functional level on the test domain needed ... > replication both ways and set up an External 2 way trust. ... If I try to run the wizard on the Target DC, ...
    (microsoft.public.win2000.active_directory)
  • Re: sidHistory and DomainUsers
    ... It looks like a SID filtering issue but SID filtering is off. ... TRUST: 'smt711.paworld.net' trusts 'PAWORLD.NET' ... migrated users from one domain in one forest to a domain in the other ... Also you should know that the migration take place ...
    (microsoft.public.windows.server.active_directory)
  • Re: Mailbox Migration or Mailbox Move?
    ... New forest means you have to perform a migration. ... The built in mailbox move wizard. ... A new domain in a new forest was created, and an external trust ...
    (microsoft.public.exchange.admin)