RE: ERR3:7075 Failed to change domain affiliation, hr=800706fb

Hi Simon,

I'm not sure very much of this "I actually translate the profile and
everything except actually join the domain". Please explain it in detail.

>From the log, it seems to related to a computer account and it seems that
you didn't migrate the computer account. I suggest you migrate it first to
see the efforts.

During the migration, did you ever changed the computer name?

This error happens when you perform a computer migration or security
migration? Please migration computer account first.

Did you add the Administrators Group from his NT Domain to the
Administrators Group in the 2k3 Domain?

Best regards,

Vincent Xu
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security


--------------------
>>From: "masland" <simondsj@xxxxxxxxxxxxxxxxxx>
>>Newsgroups: microsoft.public.windows.server.migration
>>Subject: ERR3:7075 Failed to change domain affiliation, hr=800706fb
>>Date: 11 Oct 2005 13:10:39 -0700
>>Organization: http://groups.google.com
>>Lines: 84
>>Message-ID: <1129061439.873250.177300@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
>>NNTP-Posting-Host: 65.213.153.101
>>Mime-Version: 1.0
>>Content-Type: text/plain; charset="iso-8859-1"
>>X-Trace: posting.google.com 1129061445 19173 127.0.0.1 (11 Oct 2005
20:10:45 GMT)
>>X-Complaints-To: groups-abuse@xxxxxxxxxx
>>NNTP-Posting-Date: Tue, 11 Oct 2005 20:10:45 +0000 (UTC)
>>User-Agent: G2/0.2
>>X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;
NET CLR 1.1.4322),gzip(gfe),gzip(gfe)
>>X-HTTP-Via: 1.0 TDG-SA-ISA
>>Complaints-To: groups-abuse@xxxxxxxxxx
>>Injection-Info: z14g2000cwz.googlegroups.com; posting-host=65.213.153.101;
>> posting-account=kEbRZw0AAADZgggTB9EJZ_lj4LDcHo-0
>>Path:
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.
sul.t-online.de!t-online.de!border2.nntp.dca.giganews.com!nntp.giganews.com!
postnews.google.com!z14g2000cwz.googlegroups.com!not-for-mail
>>Xref: TK2MSFTNGXA02.phx.gbl
microsoft.public.windows.server.migration:20985
>>X-Tomcat-NG: microsoft.public.windows.server.migration
>>
>>I am getting ERR3:7075 Failed to change domain affiliation, hr=800706fb
>>when I am doing a live Migration from an NT4 to Win2k3. I am not doing
>>a TEST. I have redone the trust and I'm grasping for straws. I
>>actually translate the profile and everything except actually join the
>>domain. I think its a replication issue. Because on the DC i'm
>>running ADMT I see the computer account, but on one of our other DCs in
>>the 2k3 AD I don't see the computer account.
>>
>>Here is the log:
>>
>>2005-10-11 15:06:54
>>2005-10-11 15:06:54 Active Directory Migration Tool, Starting...
>>2005-10-11 15:06:54 Starting Security Translator.
>>2005-10-11 15:06:54 Agent is running in local mode.
>>2005-10-11 15:06:54 Read 7 accounts from C:\Program
>>Files\OnePointDomainAgent\DCTCache.013
>>2005-10-11 15:06:54 SecurityTranslation Files:Yes LGroups:Yes
>>UserRights:Yes Profiles:Yes RecycleBin:Yes TranslationMode:Replace
>>MASLAND.DOM dixienet.thedixiegroup.net
>>2005-10-11 15:06:54 Starting
>>2005-10-11 15:06:54 Translating local machine.
>>2005-10-11 15:06:55 Skipping A:\, rc=21 The device is not ready.
>>2005-10-11 15:06:55 Processing C:\
>>2005-10-11 15:07:46 Processing recycle bin files and folders on C:\.
>>2005-10-11 15:07:46 Examining:
>>S-1-5-21-2030847913-1492075011-1848903544-2994
>>2005-10-11 15:07:46 Renamed recycle bin directory from
>>C:\\RECYCLER\S-1-5-21-2030847913-1492075011-1848903544-2994 to
>>C:\\RECYCLER\S-1-5-21-3836299595-2580382227-4221705463-2616
>>2005-10-11 15:07:46 Skipping D:\. D:\ is a CD-ROM drive.
>>2005-10-11 15:07:46 Translating local groups.
>>2005-10-11 15:07:47 Translating user rights.
>>2005-10-11 15:07:47 ADMT only performs user rights translation in
>>Append mode.
>>2005-10-11 15:07:47 This profile translation automatically switches
>>from replace mode to add mode if the user is currently logged on or if
>>the profile is in use for other reasons. In order to disable the
>>switching, you need to set the registry
>>HKLM\Software\Microsoft\ADMT\DisallowFallbackToAddInProfileTranslation
>>(REG_DWORD) to 1 on the ADMT machine.
>>2005-10-11 15:07:49 Translating user profile for JerniganJo
>>2005-10-11 15:07:52 SecurityTranslation Files:Yes
>>TranslationMode:Replace
>>2005-10-11 15:07:52 Starting
>>2005-10-11 15:07:58 Removed profile entry for JerniganJo,
>>2005-10-11 15:07:58 Translated any Microsoft Installer related registry
>>keys from 'S-1-5-21-2030847913-1492075011-1848903544-2994' to
>>'S-1-5-21-3836299595-2580382227-4221705463-2616'.
>>2005-10-11 15:07:58 ------Account Detail---------
>>2005-10-11 15:07:58 The account detail section uses the following
>>format: AccountName(OwnerChanges, GroupChanges, DaclChanges,
>>SaclChanges).
>>2005-10-11 15:07:58 JerniganJo (434, 0, 9180, 0)
>>2005-10-11 15:07:58 -----------------------------
>>2005-10-11 15:07:58 7 users, 0 groups
>>2005-10-11 15:07:58 7 accounts selected. 7 resolved, 0 unresolved.
>>2005-10-11 15:07:58 Examined Changed Unchanged
>>2005-10-11 15:07:58 Files 19182 5351 13831
>>2005-10-11 15:07:58 Dirs 1245 271 974
>>2005-10-11 15:07:58 Shares 0 0 0
>>2005-10-11 15:07:58 Members 11 1 10
>>2005-10-11 15:07:58 User Rights 44 0 44
>>2005-10-11 15:07:58 Exchange Objects 0 0
>> 0
>>2005-10-11 15:07:58 Containers 0 0 0
>>2005-10-11 15:07:58 DACLs 22078 7264 14814
>>2005-10-11 15:07:58 SACLs 0 0 0
>>2005-10-11 15:07:58 Examined Changed No Target
>>Not Selected Unknown
>>2005-10-11 15:07:58 Owners 22081 434 21647
>> 0 0
>>2005-10-11 15:07:58 Groups 22081 0 22081
>> 0 0
>>2005-10-11 15:07:58 DACEs 89912 9179 80733
>> 80733 0
>>2005-10-11 15:07:58 SACEs 0 0 0
>> 0 0
>>2005-10-11 15:08:02 ERR3:7075 Failed to change domain affiliation,
>>hr=800706fb The security database on the server does not have a
>>computer account for this workstation trust relationship.
>>2005-10-11 15:08:02 Wrote result file C:\Program
>>Files\OnePointDomainAgent\SP-JERNIGANJO709067203.result
>>2005-10-11 15:08:02 Operation completed.
>>
>>

.

Loading