RE: Password Migration - Access Denied
- From: v-jasont@xxxxxxxxxxxxxxxxxxxx (Jason Tan (MSFT))
- Date: Mon, 16 May 2005 08:42:01 GMT
Hi Scott,
Thanks for posting!
Based on my research, I would like to suggest you remove the NoLMHASH key
from the W2K3 Domain Controller and rebooted the DC.
For detail information, please refer to the following information:
NoLMHash
http://www.microsoft.com/resources/documentation/Windows/2000/server/reskit/
en-us/Default.asp?url=/resources/documentation/Windows/2000/server/reskit/en
-us/regentry/96415.asp
For more information, please refer to the following information:
299656 How to prevent Windows from storing a LAN manager hash of your
password
http://support.microsoft.com/?id=299656
Hope the information helps. If there is anything that is unclear, please
feel free to let me know.
Thanks & Regards,
Jason Tan
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Reply-To: "CTC" <toto@xxxxxxxx>
| From: "CTC" <toto@xxxxxxxx>
| Subject: Password Migration - Access Denied
| Date: Sat, 14 May 2005 11:07:24 -0400
| Lines: 22
| Organization: CTC
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
| X-RFC2646: Format=Flowed; Original
| Message-ID: <euXhkaJWFHA.2448@xxxxxxxxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.migration
| NNTP-Posting-Host: fl-65-40-43-165.sta.sprint-hsd.net 65.40.43.165
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP12.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.migration:10176
| X-Tomcat-NG: microsoft.public.windows.server.migration
|
| I am trying to use ADMT to migrate from NT 4.0 PDC to Win2k3 DC. I ran a
| test run of user migration and the log looked good. But every time I run
| the actual migration process it doesn't migrate the passwords. I have
| followed the troubleshooting steps in this KB article 322981, and the
only
| thing I don't understand is this:
|
| Read permissions on the Pre-Windows 2000 Compatible Access group should
be
| set to CN=Server,CN=System,DC={targetdom},DC={tld}.
|
| Where do I check this? Here is the exact error message I get for every
| user:
|
| WRN1:7557 Failed to copy the password for {user.} A strong password has
been
| generated instead. Unable to copy password. Access is denied.
|
| It does however store the password hashes in a passwords.txt file. Any
help
| would be greatly appreciated. I still have a lot of work ahead of me.
| Thanks.
|
| -Scott
|
|
|
.
- References:
- Password Migration - Access Denied
- From: CTC
- Password Migration - Access Denied
- Prev by Date: RE: Reference..
- Next by Date: RE: 2 x DC, 2 sites and NT4 servers same domain HELP
- Previous by thread: Password Migration - Access Denied
- Next by thread: Upgrade from NT4 to Win Server 2003 hangs - Dr Watson
- Index(es):
Relevant Pages
|
