RE: Server 2000 - 2003 Migration

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

I'm past that problem now. I had to change some of the DNS settings for the
Source Domain. ADMT is working now however, I can't get the passwords to
migrate. PES is installed with the key generated from the Target DC. The
Source DC was rebooted after installing the PES. Whenever I try to migrate
the passwords I get the error:
"Unable to establish a session with the password export server. Either the
currently logged on user does not have sufficient permissions to call the
Password Export Server or the account that the Password Export Server Service
is running under does not have sufficient permissions on the target domain
controller. Verify that the logged on user is a member of the Administrator
group in the source domain and that the Password Export Service account can
change password of user accounts in the target domain."
The account on the Source domain is the Domain admin for the source domain.
On the Target domain the account running the ADMT is the Domain admin for the
target domain. I'm trying to change the password on the Target domain to be
the same password as the Source domain but I keep getting the message that it
doesn't match the complexity requirements even though I've turned down the
complexity requirements to match the password. Also I can't find anyway to
add the account from the source domain to the Target domain's administrator's
group.

Dave

"Meinolf Weber" wrote:

Hello Dave C.,

How did you confiugure DNS for the trust on both domains?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Yeah, I've decided that ADMT is better for what we want since there
are a large number of users. However. When trying to use it I keep
getting a 1355 error that the source domain doesn't exist. I've
created a two-way trust between the domains and both machines can ping
each other.

Dave

"Meinolf Weber" wrote:

Hello Dave C.,

If you only need the same names and OU's etc. then you can do it this
way. And if you have not so much users password reset after creating
the accounts will be easier and faster then using ADMT.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
The new domain isn't a replacement for the other one. It just needs
to have the same users. It won't have the same workstations at all.
Would it better to use the ADMT to get all the passwords as well?

Dave

"Meinolf Weber" wrote:

Hello Dave C.,

You user settings, password for example, will not be imported to
the new domain. Also machine accounts not. So you have to rejoin
all domain computers and member servers. All your user will need
new passwords and they get new profiles on the computers where they
work. The old profiles on there computers will still exist but i am
not sure if they will be accessible for normal user accounts, only
admins can access them and then copy them to the new created
profile.

If you except all this limitations.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties,
and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
KB237677




.

Relevant Pages

  • RE: ADMT ver 3: ERR2:7816
    ... I was originally logging into the target server (with ADMT on it) using the ... source domain admin account, and this user account was a member of the local ... Although this source domain admin had ...
    (microsoft.public.windows.server.migration)
  • RE: ADMT Permissions
    ... You need Domain Admin rights in the Source domain. ... with the permissions in the Target domain. ... Granting the migration account Full Control of the OU to where you will ... This is why if you run it on a DC it must be a Domain Admin. ...
    (microsoft.public.windows.server.active_directory)
  • No access to some shared resources in the source domain
    ... i want to migrate all from a windows 2000 domain to windows server 2003 SP2. ... it's not easy to follow admt guide. ... i configure WINS on the target domain as a replication partner with WINS ... this account is local administrator of all computer or server in the ...
    (microsoft.public.windows.server.migration)
  • No Access to shared Resources - Domain Rustructuration With ADMT 3
    ... i want to migrate all from a windows 2000 domain to windows server 2003 SP2. ... it's not easy to follow admt guide. ... i configure WINS on the target domain as a replication partner with WINS ... this account is local administrator of all computer or server in the ...
    (microsoft.public.windows.server.migration)
  • ADMT v3 Error
    ... "ERR3:7585 The account replicator is unable to continue. ... Setting up ADMT v3 to use for an interforest migration. ... is Windows 2003, target domain is Windows ...
    (microsoft.public.windows.server.migration)