Re: ADMT2, cannot migrate computers, access denied

From: tomppa (tofors99_at_hotmail.com)
Date: 02/14/04


Date: Sat, 14 Feb 2004 19:32:53 +0200

Hi!

Maybe I am off base here, but we had the a simular "access denied" error
with ADMT. If I remember right, we had to enabe WINS on the 2003 server.

Tomppa

"W2K3Newbie" <anonymous@discussions.microsoft.com> wrote in message
news:eee001c3f0dc$4b85ff10$a501280a@phx.gbl...
> Damon,
>
> I have already done the steps #1 and #2 exactly as you
> detailed below and STILL get the same access denied
> errors. The only thing I've been able to find that works
> is to visit each and every workstation in the old domain
> and manually place the new domain's administrator and
> domain admins group into the local administrators group on
> the workstation. Only then does the computer migration
> wizard of ADMT2 run to sucessful completion. When it does
> run to completion, it works great however, but I'm afraid
> we're simply just resigned to the fate of having to touch
> each and every workstation by hand to prepare it before
> the migration wizard will work.
>
> >-----Original Message-----
> >Hi ,
> >
> >Thank you for posting!
> >
> >According to your post, I understand that you cannot
> migrate computers from
> >the Winodws NT 4.0 domain to Windows 2003 domain.
> >
> >Since you get the "access denied" error, it should be a
> permission issue.
> >In addition, the domain admins group is a global group
> which can only
> >contain the users and groups in the local domain.
> Therefore, you cannot add
> >users and groups in external trusted domain into this
> group. To solve the
> >problem, we may perform the steps below:
> >1. On Windows 2003 DC, add the Domain Admins global group
> from the Windows
> >NT 4.0 domain to the Administrators local group in
> Windows 2003 domain.
> >2. On Windows 2003 domain controller, log on by using the
> Administrator
> >account from Windows Nt 4.0 domain.
> >3. Run ADMT tool to migrate the computers from Windows NT
> 4.0 domain to
> >Windows 2003 domain.
> >
>



Relevant Pages

  • Re: URGENT! Computer Name Change = No Admin Login
    ... Kerry ... > Windows may cause problems and should only be used as a last resort. ... > Another thing to try is to have the administrator use the Active Directory ... > Users and Computers snap in to add the new computer name to the ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Workstation Adm.-rights Domain
    ... > We have 200 computers driving Windows XP. ... All connected in a Windows ... I'd say it's a bad idea to grant any user any admin rights whatsoever. ... > member og the Local Administrator Group. ...
    (microsoft.public.windowsupdate)
  • Re: new user with different privileges
    ... include groups that the user is a member of on the computers that they ... Make sure that the user is not a local administrator if you do not want them ... user a local administrator, restrictive ntfs permissions, and Group Policy ... Windows 2000 and there is another similar GP setting for run "only" allowed ...
    (microsoft.public.windows.server.security)
  • RE: Question about ADMT
    ... Use ADMT tool, you can move the computers from the Windows 2003 domain to ... ADMT supports the migration of user profile. ...
    (microsoft.public.windows.server.migration)
  • Re: Domain Migration Questions
    ... 2000 domain unless you have some prexisting problem. ... ADMT will migrate ... users and computers to the new domain. ... I want to start a new Windows 2003 AD ...
    (microsoft.public.win2000.active_directory)