RE: Wrn1:7290, Err2:7006, Err2:7005

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: stephany (stephany_at_discussions.microsoft.com)
Date: 10/18/04

  • Next message: MAX: "RE: Forest configuration" 
    Date: Mon, 18 Oct 2004 12:25:34 -0700

    Yes, the Domain Administrator, Res Migrator and Domain Admins accounts are
    all part of the Local Administrator Group. As I mentioned, other
    users/computers in the same batch migrated successfully, that one did not.
    Another interesting thing on that computer is I can remotely add any accounts
    I want to the Local Admin group, but I cannot open the Event Viewer or Device
    Manager remotely - I get "Access Denied." However, if I walk to the computer
    and log on as the Domain Administrator I can open the Event Viewer, etc. Any
    Ideas?

    "JSilva" wrote:

    > Stephany,
    >
    > Make sure that the domain account you are using to migrate the client is a
    > member of the local administrators group on the client.
    >
    > It appears the ADMT agent fails to install due to lack of privileges on the
    > client
    >
    > "stephany" wrote:
    >
    > > I am trying to migrate a client (profile and computer) from an NT4 domain to
    > > a WindowsServer2003 AD domain. Other clients have migrated successfully,
    > > however this one client errors our with Access Denied. The dispatch log
    > > shows the following:
    > > 2004-10-17 17:11:44 Created account input file for remote agents: DCTCache.009
    > > 2004-10-17 17:11:44 Installing agent on 1 servers
    > > 2004-10-17 17:11:44 The Active Directory Migration Tool Agent will be
    > > installed on \\I-HALL234
    > > 2004-10-17 17:11:44 WRN1:7290 Processor architecture for machine \\I-HALL234
    > > is unknown, Error accessing registry key
    > > SYSTEM\CurrentControlSet\Control\Session Manager\Environment rc=5
    > > Access is denied.
    > > 2004-10-17 17:11:45 ERR2:7006 Failed to install agent on \\I-HALL234, rc=5
    > > Access is denied.
    > > 2004-10-17 17:11:45 ERR2:7005 Failed to launch agent on \\I-HALL234,
    > > hr=80070005 Access is denied.
    > > 2004-10-17 17:11:45 All agents are installed. The dispatcher is finished.
    > > This client was upgraded from Windows 2000 Pro to Windows XP and is running
    > > XP Service Pack 2.
    > > Any help anyone can provide would be greatly appreciated.

  • Next message: MAX: "RE: Forest configuration"

    Relevant Pages

    • Re: Outlook security
      ... If you are not certian if you have a personal certificate for such ... > a client that could support 128-bit security. ... > and review the mailboxes of accounts of personyou know that are ... I logon with domain administrator previliges but have reconfigured ...
      (microsoft.public.outlook.general)
    • Re: Domain Users to have Local Admin rights
      ... What I would like to add is a warning against using domain administrator ... accounts to logon to user computers. ... So simply put -- don't use accounts that have domain administrator ... permissions for logging on to client computers. ...
      (microsoft.public.windows.server.security)
    • Re: Admin password change
      ... Our Domain Admin acc is only used by myself when I ... require the elevated privileges that it gives. ... backup) use specific service accounts. ... > The problem with using domain accounts (specially domain administrator ...
      (microsoft.public.windows.server.security)
    • EFS Recover Agents Unable to decrypt files
      ... > Default Domain administrator and additional domain administrator have ... > Recovery Agents I performed the process described in "Encrypting File ... > home directory with one of the accounts and attempted to decrypt the file ...
      (microsoft.public.security)
    • Access is denied: Event Logs
      ... I am a domain administrator and is member of local administrator group. ... can access all three logs as a local administrator but can access only ...
      (microsoft.public.win2000.security)