Moveuser.exe "error 5 - access denied"

In my test environment I was able to use MOVEUSER.EXE to migrate user local
profiles from an old NT domain to a new AD (WS2003) domain.

But in the production environment I am getting the error: "Move Failed.
Error 5 Access Denied."

The syntax I've been using is typically "moveuser old-domain\user
new-domain\user /k /y"

I've tried it so many ways. I've tried it with just "/y" or with no
switches at all. I've tried it logged in as new-domain/admin, as
old-domain/admin, as XPcomputername/admin.

I've got two-way trusts between the domains. I've got Domain Admins of AD
as a member of Admins of NT, and visa versa.

What would likely be causing this "access denied" error. Permissions?
Something else??

Thanks.

-Rich



.

Relevant Pages

  • Re: Delegate control in ADUC
    ... if they only need to do this, WHY would they need to stay members of domain admins group? ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... Always test ANY suggestion in a test environment before implementing! ...
    (microsoft.public.windows.server.active_directory)
  • Re: Delegate control in ADUC
    ... Can they still remain in the domain admins group and have this restriction? ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... Always test ANY suggestion in a test environment before implementing! ...
    (microsoft.public.windows.server.active_directory)
  • Re: Trusts with external domain and Domain/Forest Functional Levels
    ... external trusts do not require any DFL/FLL. ... Forest trusts require at least FFL = w2k3 at both endpoints ... Always test ANY suggestion in a test environment before implementing! ... We are wondering if raising our forest and domain functional levels ...
    (microsoft.public.windows.server.active_directory)