RE: Migration NT4 to W3K AD

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hi,

Please verify the following:

An empty local group exists in the source domain that is named
SourceDomName$$$
The registry key
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\TcpipClientSupport
has been set to 1 on the source PDC and it has been rebooted
Add the Domain Admins group from DomainA into the Administrators group in
DomainB and add the Domain Admins group from DomainB into the
Administrators group in DomainA and ensure you have logged off and logged
back on and try again.

Hope this helps,

Brian Delaney
Microsoft Canada
--

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
Thread-Topic: Migration NT4 to W3K AD
thread-index: Aca+VcVq6P1W2BWSSgSWH1LNOCSuNA==
X-WBNR-Posting-Host: 82.182.28.76
From: =?Utf-8?B?VHJpZ2dlcg==?= <Trigger@xxxxxxxxxxxxxxxxxxxxxxxxx>
Subject: Migration NT4 to W3K AD
Date: Sat, 12 Aug 2006 14:25:02 -0700

I have setup the 2 way trust beetween the NT4 Server and the AD with SID
history. All accordingly to the text book(as far as i know). When I am
starting to migrate (ADMT v3)the user groups to the AD i recieve this
error
message "Could not verify auditing and TcpipClientSupport on domains. Will
not be able to migrate Sid's. Access is Denied." The answer i can find is
"This error typically indicates that the user account that is used to run
ADMT does not have enough permissions to perform the migration in one or
both
of the domains." when i did the trust i used the admin user for both
servers.
I am not sure who to move on from here without loosing the SID history.
--
Capt_Trigger


.

Relevant Pages

  • RE: ADMT ver 3: ERR2:7816
    ... I was originally logging into the target server (with ADMT on it) using the ... source domain admin account, and this user account was a member of the local ... Although this source domain admin had ...
    (microsoft.public.windows.server.migration)
  • RE: ADMT Security Translation Requirements
    ... you can use ADMT with security translation for changing the ... You want to know if you can use sid mapping file to remove the sids from ... >Thread-Topic: ADMT Security Translation Requirements ... >> before you can run ADMT security translation without source domain no ...
    (microsoft.public.windows.server.migration)
  • Re: Questions about ADMT
    ... The lingering effects of ADMT are miniscual. ... In your source domain, you have ... the Domain Admin account, the Local Domain Group named yourdomain$$$, and ... > domain's admin account from the administrator group on the existing ...
    (microsoft.public.win2000.active_directory)
  • Re: problem migrating security settings via ADMT
    ... After migrating a single computer that's a member server of the ... > source domain and shutting the source domain controller down, ... > Does anybody know if this is the way ADMT works or is it a bug? ... adding them to the builtin groups on a member server, ...
    (microsoft.public.win2000.active_directory)
  • RE: ADMT v3.0 "OU does not exist on the target domain" error message
    ... Did you install ADMT v3.0 on the source domain controller or the target ... Can you resolve the target domain resource from the source domain ...
    (microsoft.public.windows.server.migration)