NT4->2003 Computer Account Migration Problem

We have been using ADMT to bring group and user accounts over from our NT4
domain to our new 2003 domain with no problems. However when trying to bring
over computer accounts we have run into problems. The computer account is
successfuly created in the AD, and the computer name is changed, but the
computer is not joined to the domain. When I log in using my account in the
2003 domain, I do not have admin rights on the computer, so I can't join the
computer to the domain.

So it's probably related to security rights, but I'm not sure how. In the NT
domain, my account is a member of the domain admins group, which has admin
rights on the PC. In the 2003 domain, my account is a member of a group
which has full rights to the computer accounts within our OU.

So I guess the short question is where do you give a user account the rights
to join a computer to a domain. Building from that, does missing those
rights sound like the source of our problem?

Thanks
Brian


.

Relevant Pages

  • Re: Lost admin access to ADAM
    ... Firewall may be doing harm here. ... SDE, DS Admin eXperience ... This posting is provided "AS IS" with no warranties, and confers no rights. ... User account: NETWORK SERVICE ...
    (microsoft.public.windows.server.active_directory)
  • Re: Lost admin access to ADAM
    ... admins) as ADAM admin principal, as opposed to a specific user. ... use your domain account to connect (provided this account is a member of ... This posting is provided "AS IS" with no warranties, and confers no rights. ... If I install with my account (which has has local ...
    (microsoft.public.windows.server.active_directory)
  • Re: Lost admin access to ADAM
    ... User account: NETWORK SERVICE ... admins) as ADAM admin principal, as opposed to a specific user. ... This posting is provided "AS IS" with no warranties, and confers no rights. ... If I install with my account (which has has local ...
    (microsoft.public.windows.server.active_directory)
  • Re: Prevent changes to Administrator password
    ... What I am trying to do is give Taz1972 some options to minimize the risk or make it harder for a lower-level DA to reset the password for the EA account. ... * This posting is provided "AS IS" with no warranties and confers no rights! ... > By adding the Deny Write Permissions ACE, ... > permission to modify the ACL on AdminSDHolder. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Windows 2003 Users vs Software
    ... You need to have both an admin and a limited account ... >> as a limited user, to effect, "the software has not been installed ... The users do not have rights to install programs. ...
    (microsoft.public.security)
Loading