RE: admt v2 migration problems

From: Frances [MSFT] (v-franhe_at_microsoft.com)
Date: 01/21/05 

Date: Fri, 21 Jan 2005 05:33:49 GMT

Hello Garth,

Thanks for your post.

According to the log file, I suspect that the problem is related to the
account permissions on the problematic machine.

To clarify the two domains, let us name the source domain Domain1, and the
target domain Domain2. We are now migrating computers from Ddmain1 to
Domain2.

Generally speaking, we must log on to the computer on which we run ADMT
with an account that has the following rights:

- A member of the Administrators group in Domain2.
- A member of the Administrators group in Domain1.
- Administrator rights on each computer you are about to migrate (You need
to be in the local Admin group on the local workstations).

I recommend that you refer to the following article to check if you have
done all the requirements for ADMT.

326480 How to Use Active Directory Migration Tool Version 2 to Migrate from

http://support.microsoft.com/?id=326480

Therefore, I suggest that we perform the following test:

1. Please check the Administrator account of Domain1 (source domain) to
ensure it is a member of the following groups:

Domain1\Builtin\Administrators
Domain2\Builtin\Administrators
Domain1\Users\Domain Admins
Domain1\Users\Entriprise Admins

Also add the Administrator account of Domain2 (target domain) to the
Domain1\Builtin\Administrators group.

2. Please then go to the problematic system and specifically add both the
Domain1 and Domain2 domains'administrator account into the client machine's
local Administrators group.

3. The problem may also occur if the file system or registry permissions
have been changed so that the remote ADMT agent cannot be installed.
Therefore, I would like to suggest that we give the administrators' group
full control permissions on the files and registry keys.

Now try to migrate the computer again and have a check. Does it work? If
the problem persists, please don't hesitate to get in touch!

Best regards,

Frances He

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Relevant Pages

  • Re: installing games so other users can access and save their game
    ... Okay here's what I've found in the registry looking at the permissions in the ... " or "OWNER" or my account (which is actually the Owner ... Hit a few times and exited the registry and the rebooted. ... below labeled "Change owner to:" it listed 2 names, "Administrators ...
    (microsoft.public.games)
  • Re: Cant Remember How to Setup User Accounts
    ... When you create a user account by default ... > Then you can use NTFS folder permissions to manage what users on your ... > administrators, system, and your user account with full permission. ... > EFS file encryption built in. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: questions about the Security tab for a folders properties
    ... Administrators and Everyone are easy enough to figure out - they ... affect the permissions of all Administrative users and all users, ... Every account on the system gets the permissions of the Everyone ... I assume CREATOR OWNER affects the permissions of whomever created the ...
    (microsoft.public.windowsxp.general)
  • Re: Is complete access in a win 2003 domain a possibility?
    ... other group, like Domain Admins, that account will have ... is an Administrators member that does not mean that they ... in Domain Admins; ... Setting via AdsiEdit permissions on AD objects may not ...
    (microsoft.public.security)
  • Re: generate a detailed list of account permissions
    ... Use of the account to grant permissions on C:\? ... > locate that log file. ... or can someone recommend a third party tool? ...
    (microsoft.public.win2000.security)