RE: Access Denied when using ADMT to migrage Computer Accounts

From: Jack Wang [MSFT] (jackwa_at_online.microsoft.com)
Date: 03/11/04


Date: Thu, 11 Mar 2004 18:29:58 GMT

Hi

Thank you for your input. By default, the Domain Admins group will be added
to the local Administrators group if the customer joins in the domain.

Also, you may use the following command to add it.

net localgroup administrators "<domain name>\domain admins" /add

Note: Please pay attention to the quatation marks.

Hope this helps!

Sincerely,
Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
Microsoft Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Content-Class: urn:content-classes:message
| From: <anonymous@discussions.microsoft.com>
| Sender: <anonymous@discussions.microsoft.com>
| References: <ObmZ9#dBEHA.1452@TK2MSFTNGP09.phx.gbl>
<bjJSMnfBEHA.3392@cpmsftngxa06.phx.gbl>
| Subject: RE: Access Denied when using ADMT to migrage Computer Accounts
| Date: Tue, 9 Mar 2004 19:13:13 -0800
| Lines: 102
| Message-ID: <9d9c01c4064d$9f81aa20$a001280a@phx.gbl>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="iso-8859-1"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
| Thread-Index: AcQGTZ98OwKsTK/kSPCoCsEIJseQhA==
| Newsgroups: microsoft.public.windows.server.migration
| Path: cpmsftngxa06.phx.gbl
| Xref: cpmsftngxa06.phx.gbl microsoft.public.windows.server.migration:8613
| NNTP-Posting-Host: tk2msftngxa08.phx.gbl 10.40.1.160
| X-Tomcat-NG: microsoft.public.windows.server.migration
|
| Hello Everyone.
| I am agreed with Jack Answer.
| Jack,
| How can we add the Domain Admins group to local
| administrator in every single machine?
| i am sure there is a command line tool
| net Localgroup administrators Domainname/domain group /add
| but this command is not working for me. How can i type the
| right command?
|
| Also you need to install WINS in 2003 AD and create a
| replication partner for NT4 WINS AND 2003 AD.
| This also resolve the issue.
| >-----Original Message-----
| >Hi
| >
| >Thank you for posting here.
| >
| >The issue may occur if the user account that you use to
| run the ADMT tool
| >doesn't have the local administrator permission of the
| Windows XP
| >computers. Please add the user account to the local
| administrators group of
| >the Windows XP computer and try again.
| >
| >Hope this helps!
| >
| >Sincerely,
| >Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
| >Microsoft Partner Support
| >
| >Get Secure! - www.microsoft.com/security
| >
| >=====================================================
| >When responding to posts, please "Reply to Group" via
| >your newsreader so that others may learn and benefit
| >from your issue.
| >=====================================================
| >
| >This posting is provided "AS IS" with no warranties, and
| confers no rights.
| >--------------------
| >| From: <c>
| >| Subject: Access Denied when using ADMT to migrage
| Computer Accounts
| >| Date: Tue, 9 Mar 2004 14:07:14 -0000
| >| Lines: 23
| >| X-Priority: 3
| >| X-MSMail-Priority: Normal
| >| X-Newsreader: Microsoft Outlook Express 6.00.3790.0
| >| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
| >| Message-ID: <ObmZ9#dBEHA.1452@TK2MSFTNGP09.phx.gbl>
| >| Newsgroups: microsoft.public.windows.server.migration
| >| NNTP-Posting-Host: host217-44-166-93.range217-
| 44.btcentralplus.com
| >217.44.166.93
| >| Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!
| TK2MSFTNGP09.phx.gbl
| >| Xref: cpmsftngxa06.phx.gbl
| microsoft.public.windows.server.migration:8598
| >| X-Tomcat-NG: microsoft.public.windows.server.migration
| >|
| >| I have successfully migrated user and group accounts
| using the ADMT tool.
| >|
| >| I am using XP clients in the nt domain to migrate into
| the W2K3
| >| domain...computer account is copied ok, but the
| dispatching of the agent
| >| fails...i have only used the "test migration option"
| >| There are no duplicate machine names anywhere.
| >|
| >| below is error.
| >|
| >| Created account input file for remote agents:
| DCTCache.030
| >| Installing agent on 1 servers
| >| The Active Directory Migration Tool Agent will be
| installed on
| >\\XPCLIENT1
| >| WRN1:7290 Processor architecture for machine
| \\XPCLIENT1 is unknown,
| >Error
| >| accessing registry key
| SYSTEM\CurrentControlSet\Control\Session
| >| Manager\Environment rc=5 Access is denied.
| >| ERR2:7006 Failed to install agent on \\XPCLIENT1,
| rc=5 Access is
| >denied.
| >| ERR2:7005 Failed to launch agent on \\XPCLIENT1,
| hr=80070005 Access is
| >| denied.
| >| All agents are installed. The dispatcher is finished.
| >|
| >| Cheers Ray
| >|
| >|
| >|
| >
| >.
| >
|



Relevant Pages

  • Re: NT 4.0/Exchange 5.5 to Windows/Exchange 2003
    ... > migration does not require any special domain configuration. ... The account must have permission to create computer ... > of the local Administrators group on each computer to be migrated. ... Add Win2k3Dom Domain admins group to NT Domain admins group and ...
    (microsoft.public.windows.server.migration)
  • Re: Trouble with admin access after creating trust.
    ... domain group called Administrators, which is a local built in group. ... added the domain admins group from the 2003 domain to it (on the 2000 ... This posting is provided "AS IS" with no warranties, and confers no rights. ... I did add my domain 2003 admin account ...
    (microsoft.public.windows.server.active_directory)
  • RE: ADMT never sucesess of migrating computer account :(
    ... The account you use to run ADMT must have enough permission to complete the ... of the local Administrators group on each computer to be migrated. ... Add Win2k3Dom Domain admins group to win2k Domain admins group and ...
    (microsoft.public.windows.server.migration)
  • Re: How do I create a Computer Administrator Group?
    ... accounts are members of the local Administrators group. ... says, "these are the member of the group in question, no more, no less." ... The startup script can simply add an account to the local ...
    (microsoft.public.windows.server.general)
  • Re: Local Administrator Account or Domain Administrator Account?
    ... non-Admin domain user accounts and add it to local Administrators group on ... target computers (this can be easily accomplished using Restricted Groups ... account in situations where a computer loses a connection to the domain... ...
    (microsoft.public.windows.server.general)

Loading