RE: Server 2000 - 2003 Migration



Hello Dave C.,

Have a look here:
http://technet.microsoft.com/en-us/library/cc755729.aspx

http://www.petri.co.il/forums/showthread.php?t=5292

Scroll to the last posting form Ada Pan:
http://forums.techarena.in/server-migration/599336.htm

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


I'm past that problem now. I had to change some of the DNS settings
for the
Source Domain. ADMT is working now however, I can't get the
passwords to
migrate. PES is installed with the key generated from the Target DC.
The
Source DC was rebooted after installing the PES. Whenever I try to
migrate
the passwords I get the error:
"Unable to establish a session with the password export server. Either
the
currently logged on user does not have sufficient permissions to call
the
Password Export Server or the account that the Password Export Server
Service
is running under does not have sufficient permissions on the target
domain
controller. Verify that the logged on user is a member of the
Administrator
group in the source domain and that the Password Export Service
account can
change password of user accounts in the target domain."
The account on the Source domain is the Domain admin for the source
domain.
On the Target domain the account running the ADMT is the Domain admin
for the
target domain. I'm trying to change the password on the Target domain
to be
the same password as the Source domain but I keep getting the message
that it
doesn't match the complexity requirements even though I've turned down
the
complexity requirements to match the password. Also I can't find
anyway to
add the account from the source domain to the Target domain's
administrator's
group.
Dave

"Meinolf Weber" wrote:

Hello Dave C.,

How did you confiugure DNS for the trust on both domains?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
Yeah, I've decided that ADMT is better for what we want since there
are a large number of users. However. When trying to use it I keep
getting a 1355 error that the source domain doesn't exist. I've
created a two-way trust between the domains and both machines can
ping each other.

Dave

"Meinolf Weber" wrote:

Hello Dave C.,

If you only need the same names and OU's etc. then you can do it
this way. And if you have not so much users password reset after
creating the accounts will be easier and faster then using ADMT.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties,
and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
The new domain isn't a replacement for the other one. It just
needs to have the same users. It won't have the same workstations
at all. Would it better to use the ADMT to get all the passwords
as well?

Dave

"Meinolf Weber" wrote:

Hello Dave C.,

You user settings, password for example, will not be imported to
the new domain. Also machine accounts not. So you have to rejoin
all domain computers and member servers. All your user will need
new passwords and they get new profiles on the computers where
they work. The old profiles on there computers will still exist
but i am not sure if they will be accessible for normal user
accounts, only admins can access them and then copy them to the
new created profile.

If you except all this limitations.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties,
and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!!
http://www.blakjak.demon.co.uk/mul_crss.htm
KB237677



.



Relevant Pages

  • Re: user account locked up frequently
    ... This posting is provided "AS IS" with no warranties, ... "Meinolf Weber" wrote: ... If you mean the flag for the locked account, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Account keep locking out
    ... Disclaimer: This posting is provided "AS IS" with no warranties, ... "Meinolf Weber" wrote: ... have a service running with there user account and have forgotten to ...
    (microsoft.public.windows.server.active_directory)
  • Re: sbs2003 to (new)server2003 user issue
    ... This posting is provided "AS IS" with no warranties, ... "Meinolf Weber" wrote: ... Even if the account in the domain and the local account on the ... account has no rights to the server shares. ...
    (microsoft.public.windows.server.active_directory)
  • Re: error 1504 event id - user account locked out automatically
    ... Meinolf Weber ... Disclaimer: This posting is provided "AS IS" with no warranties, ... the account get locked automatically and I have to go to AD ...
    (microsoft.public.windows.server.active_directory)
  • Re: Cant add computers to Domain
    ... Best regards ... Meinolf Weber ... Disclaimer: This posting is provided "AS IS" with no warranties, ...
    (microsoft.public.windows.server.dns)

Loading