RE: Does ADMT tool only work under Domain Admin, but not OU Admin leve

Hi Wilson,

Thanks for posting!

ADMT requires the following permissions to run properly:

o Administrator rights in the source domain.
o Administrator rights on each computer that you migrate.
o Administrator rights on each computer on which you translate security.

You must configure the source domain to trust the target domain.
Optionally, the target may be configured to trust the source domain. While
this may ease configuration, it is not required to finish the ADMT
migration.

Based on the above information, you do not need to make the migration
account as member of Domain Admin group and you may want to make this
account as member of Administrators group. Based on my test, it works fine.

Hope the information helps. If there is anything that is unclear, please
feel free to let me know.

Thanks & Regards,

Jason Tan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.








--------------------
| Thread-Topic: Does ADMT tool only work under Domain Admin, but not OU
Admin leve
| thread-index: AcWAZrI93ogPViISTPO5a0ry8PPvkQ==
| X-WBNR-Posting-Host: 202.140.234.94
| From: "=?Utf-8?B?V2lsc29uIENoZXVuZw==?="
<WilsonCheung@xxxxxxxxxxxxxxxxxxxxxxxxx>
| Subject: Does ADMT tool only work under Domain Admin, but not OU Admin
leve
| Date: Mon, 4 Jul 2005 00:05:01 -0700
| Lines: 7
| Message-ID: <942E61CD-220D-4D47-8514-23D25ACB4028@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.migration
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.migration:11051
| X-Tomcat-NG: microsoft.public.windows.server.migration
|
| I am working on a lab now and want to use ADMT tool to move all user
account
| from NT to Windows 2003 server. My account in Windows 2003 is set as a
Domain
| Users and Administrator, but not a domain admin. I am delegated to Admin
an
| OU, for example: Accounting. Shall I have to right to migrate user
account
| under OU level? Or I must have Domain Admin right to do so? Thanks!!
|
| Wilson
|

.

Relevant Pages

  • RE: ADMT ver 3: ERR2:7816
    ... I was originally logging into the target server (with ADMT on it) using the ... source domain admin account, and this user account was a member of the local ... Although this source domain admin had ...
    (microsoft.public.windows.server.migration)
  • RE: Does ADMT tool only work under Domain Admin, but not OU Admin
    ... You mean that not only "Domain-Admin" account can ... use ADMT, but also "Administrator" account in target domain can use ADMT to ... On the other hand, I am using an "Administrator" account under a OU, not ... Does ADMT tool only work under Domain Admin, ...
    (microsoft.public.windows.server.migration)
  • RE: Does ADMT tool only work under Domain Admin, but not OU Admin
    ... the "Administrator" account which I indicated means that the account is ... Can I use ADMT to migrate? ... Does ADMT tool only work under Domain Admin, ...
    (microsoft.public.windows.server.migration)
  • Re: Cluster Service Account Changes on W2K Cluster
    ... Cluster account is not to have domain admin or administrator rights on the ... Move services to formerly inactive node ...
    (microsoft.public.windows.server.clustering)
  • Re: What permissions are needed to migrate SID?
    ... The user running ADMT must have Domain Admin rights in the source domain, ... he must have administrator rights on the machine running ADMT. ... One of my customer suggests that it would be best to delegate permissions ...
    (microsoft.public.windows.server.migration)