RE: Migrate NT 4 domain to 2003 server R2 x64 with ADMT v.3
- From: v-morche@xxxxxxxxxxxxxxxxxxxx (Morgan che(MSFT))
- Date: Fri, 25 Jan 2008 10:27:30 GMT
Dear Matteo,
Thanks for posting here.
Based on the error message included in your post, I suspect this issue may
be caused by inappropriate delegation. After further research, I notice
this problem occurs if the {SOURCEDOMAIN}$$$ group on the source domain was
created as a global group instead of as a local group when migrating user
accounts from a Windows NT 4.0 domain to a Windows Server domain. Please
verify this and let me know the result. Thanks.
For more information about "Could not verify auditing and
TcpipClientSupport on domains. Will not be able to migrate Sid's. Access is
Denied", please refer to the below article:
ADMT: "Could Not Verify Auditing and TcpipClientSupport on Domains" Error
Message When You Try to Migrate User Accounts
http://support.microsoft.com/kb/317846/en-us
In addition, we can verify the domain trust by "nltest" command. Please
view the following information about "nltest", please refer to:
http://support.microsoft.com/kb/158148
The below article provided you some examples about to verify the trust
statue between two domain,
Nltest Examples
http://technet2.microsoft.com/windowsserver/en/library/c199734f-1d36-439b-94
e1-449568d79d411033.mspx?mfr=true
As for " I aim to migrate groups, users and computers to allow to the
workstations to new domain and do nothing more on the single machines in
the company, am I on the right path?", we recommend the migrate sequence
should be Domain Global Group->Domain Local Group->User Account->Computer
Account.
I hope this helps. If anything is unclear, please feel free to let me know.
Have a good day!
Sincerely
Morgan Che
Microsoft Online Support
Microsoft Global Technical Support Center
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
--->From: "Potone" <mborroniNO@xxxxxxxxxxxxx>
--->Newsgroups: microsoft.public.windows.server.migration
--->Subject: Migrate NT 4 domain to 2003 server R2 x64 with ADMT v.3
--->Date: Fri, 25 Jan 2008 09:57:53 +0100
--->Organization: C.U. srl News Server
--->Lines: 39
--->Message-ID: <fnc8ad$ii0$1@xxxxxxxxxxxx>
--->NNTP-Posting-Host: 77.244.190.5
--->X-Trace: tdi.cu.mi.it 1201251469 19008 77.244.190.5 (25 Jan 2008
08:57:49 GMT)
--->X-Complaints-To: abuse@xxxxxxxxxxxxxxx
--->NNTP-Posting-Date: Fri, 25 Jan 2008 08:57:49 +0000 (UTC)
--->X-Priority: 3
--->X-MSMail-Priority: Normal
--->X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
--->X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
--->X-RFC2646: Format=Flowed; Original
--->Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!newsfeed0
0.sul.t-online.de!newsfeed01.sul.t-online.de!t-online.de!nntp.infostrada.it!
area.cu.mi.it!diesel.cu.mi.it!not-for-mail
--->Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.server.migration:2901
--->X-Tomcat-NG: microsoft.public.windows.server.migration
--->
--->Good morning everyone.
--->
--->The scenario is:
--->Migration from Windows NT4sp6 with 50 users (1 pdc)
--->to Windows server 2003 R2 x64
--->I downloaded ADMT v3 from microsoft website to perform the task and
--->following ADMT v3 migration guide (V3MigGuide.doc).
--->
--->I red previous posts about this matter but I need some more
informations.
--->
--->I did all steps reported in the guide, when I reach:
--->"Initializing ADMT:
--->Initialize ADMT by running a test migration of a global group, and
select
--->the option named Migrate Group SIDs to target domain..."
--->
--->and try to migrate the first group (I choose one global group from
source
--->nt4 domain) I receve the message:
--->"Could not verify auditing and TcpipClientSupport on domains. Will not
be
--->able to migrate Sid's. Access is Denied."
--->I found on microsoft kb: "This error typically indicates that the user
--->account that is used to run ADMT does not have enough permissions to
perform
--->the migration in one or both of the domains."
--->Dispite of this message I find the group in the OU I selected as target
and
--->the ADMT final reports no error.
--->
--->I'm running ADMB on the target 2003 domain logged as administrator and
two
--->way trust between the domain is establshed (how can I verify the
trust?).
--->
--->I aim to migrate groups, users and computers to allow to the
workstations to
--->new domain and do nothing more on the single machines in the company,
am I
--->on the right path?
--->
--->Thank you, hope to give you enough information.
--->Matteo
--->
--->--
--->.
--->
--->
--->
.
- Follow-Ups:
- RE: Migrate NT 4 domain to 2003 server R2 x64 with ADMT v.3
- From: Morgan che(MSFT)
- Re: Migrate NT 4 domain to 2003 server R2 x64 with ADMT v.3
- From: Potone
- RE: Migrate NT 4 domain to 2003 server R2 x64 with ADMT v.3
- References:
- Prev by Date: RE: MSDSS Failing on some objects with 0x8007200b
- Next by Date: RE: File Server Domain Migration
- Previous by thread: Migrate NT 4 domain to 2003 server R2 x64 with ADMT v.3
- Next by thread: Re: Migrate NT 4 domain to 2003 server R2 x64 with ADMT v.3
- Index(es):
Relevant Pages
|
