RE: ADMT Help

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Joe Wu [MSFT] (joewu_at_online.microsoft.com)
Date: 02/23/04


Date: Mon, 23 Feb 2004 06:34:20 GMT

Hello Jonathan,

Thank you for your post.

We can use ADMT to migrate the client computers. During the computer
migration, ADMT dispatches an agent to the client computer to change the
domain membership and perform translation operations for security objects
(for example, Files and Folders, Local Groups, Printers, Registry, Shares,
User Profiles, User Rights).

The following are some requirements or tips for ADMT - Computer Migration.

1. The account that runs ADMT must have local administrator permissions on
the client computers, to successfully execute the agent. A good idea is to
logon on install ADMT on the target domain's PDC Emulator, assign the
source domain's administrator account with target domain's administrator
privileges, logon the server where ADMT is installed as the source domain's
Administrator, and then perform the migration.

2. The client machines, should also be online during the migration.

Based on the current status, please check the following:

1. Please ensure that the source domain's administrator has full control
permission on both domains and on the client to be migrated. You can
manually add it to the client computer's local administrators group and
check if the problem still persists.

2. The client machine is available.

Regarding the second question, yes, we can manually join the client
computer to the new domain (however, this could be a time-consuming job if
there are a large number of clients). After that, you do not run the
Computer Migration Wizard. Instead, you can run the Security Translation
Wizard on the migrated computer to translate the user profiles and
permissions.

Please let me know if anything is unclear. Thanks and have a nice day!

Regards,
Joe Wu
Product Support Services
Microsoft Corporation

Get Secure! - www.microsoft.com/security

====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
|Content-Class: urn:content-classes:message
|From: "Jonathan Hay" <anonymous@discussions.microsoft.com>
|Sender: "Jonathan Hay" <anonymous@discussions.microsoft.com>
|Subject: ADMT Help
|Date: Fri, 20 Feb 2004 11:19:29 -0800
|Lines: 11
|Message-ID: <13f9001c3f7e6$76385d50$a401280a@phx.gbl>
|MIME-Version: 1.0
|Content-Type: text/plain;
| charset="iso-8859-1"
|Content-Transfer-Encoding: 7bit
|X-Newsreader: Microsoft CDO for Windows 2000
|Thread-Index: AcP35nYuTyRgqwzVTCCgFeHTBajbQQ==
|X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
|Newsgroups: microsoft.public.windows.server.migration
|Path: cpmsftngxa07.phx.gbl
|Xref: cpmsftngxa07.phx.gbl microsoft.public.windows.server.migration:8040
|NNTP-Posting-Host: tk2msftngxa12.phx.gbl 10.40.1.164
|X-Tomcat-NG: microsoft.public.windows.server.migration
|
|Hello,
|
|I am planning a clean install of Server 2003 and migrating
|over my NT4 accounts. I have all of my users migrated over
|and the groups but am having problems with my computer
|accounts. When I run ADMT it fails with the error: Access
|is denied. I have the Server 2003 book from Mark Minasi
|and it says you need to login as the old NT4 domain
|administrator on the new 2003 server and run the migration
|tool and I have tried that and it still gives me the
|access denied error. Any suggestions?
|



Relevant Pages

  • Re: NT4 to 2003 migration
    ... > I did this as the Administrator with domain and enterprise admin ... > have done all the requirements for ADMT. ... > 326480 How to Use Active Directory Migration Tool Version 2 to ... verified trust relationship between the new server and the PDC. ...
    (microsoft.public.windows.server.migration)
  • RE: ADMT Permissions Error?
    ... Could you please inform me if you add administrator of target ... I list the permissions that ADMT requires to run ... target domain, with the extended right to migrate SID history on the user OU ... ADMT v3 Migration Guide ...
    (microsoft.public.windows.server.migration)
  • RE: ADMT Errors ERR2:7816 and ERR2:7301
    ... The account that runs ADMT must have administrator ... How do I create an account that is mamber of both domains? ... We recommend that the ADMT should be installed on the target domain ... Group Account Migration Wizard ...
    (microsoft.public.windows.server.migration)
  • Re: From NTDomain to new Win2K Domain
    ... You can do a Migration using ADMT which is a supported tool by ... with their settings like Passwords, ... It also does this great job in unjoining all of your client ... ADMT is available for Download from the Microsofts website. ...
    (microsoft.public.win2000.active_directory)
  • Re: From NTDomain to new Win2K Domain
    ... I've already printed the migration cookbook which goes along with ADMT. ... > with their settings like Passwords, Profile Settings etc intact ... > It also does this great job in unjoining all of your client ...
    (microsoft.public.win2000.active_directory)