Using ADMT to migrate computers

Dan · 01-12-2004

Am am trying to test the migration of pc's to a new ad domain I am using the
ADMT snap in to do it.

I keep getting errors access denied but I can't see where i am supossed to
add the correct security settings for each domain in order for the process to
complete: follows is the dispatch log from the ADMT tool.

2004-12-01 12:00:47 Created account input file for remote agents: DCTCache.001
2004-12-01 12:00:47 Installing agent on 1 servers
2004-12-01 12:00:47 The Active Directory Migration Tool Agent will be
installed on \\TEST-DAN01
2004-12-01 12:00:47 WRN1:7290 Processor architecture for machine
\\TEST-DAN01 is unknown, Error accessing registry key
SYSTEM\CurrentControlSet\Control\Session Manager\Environment rc=5
Access is denied.
2004-12-01 12:00:47 ERR2:7006 Failed to install agent on \\TEST-DAN01, rc=5
Access is denied.
2004-12-01 12:00:47 ERR2:7005 Failed to launch agent on \\TEST-DAN01,
hr=80070005 Access is denied.
2004-12-01 12:00:48 All agents are installed. The dispatcher is finished.
2004-12-01 16:30:22 Created account input file for remote agents: DCTCache.002
2004-12-01 16:30:22 Installing agent on 1 servers
2004-12-01 16:30:22 The Active Directory Migration Tool Agent will be
installed on \\test-dan01
2004-12-01 16:30:22 WRN1:7290 Processor architecture for machine
\\test-dan01 is unknown, Error accessing registry key
SYSTEM\CurrentControlSet\Control\Session Manager\Environment rc=5
Access is denied.
2004-12-01 16:30:22 ERR2:7006 Failed to install agent on \\test-dan01, rc=5
Access is denied.
2004-12-01 16:30:22 ERR2:7005 Failed to launch agent on \\test-dan01,
hr=80070005 Access is denied.
2004-12-01 16:30:23 All agents are installed. The dispatcher is finished.

Anyone help????

Chriss3 [MVP] · 01-12-2004

You have to modify some registry settings to allow the agents to works, read
the ADMT help and look for this keys.

--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services

No email replies please - reply in the newsgroup
------------------------------------------------
http://www.chrisse.se - Active Directory Tips

"Dan" <Dan@discussions.microsoft.com> skrev i meddelandet
news:205C1727-FF71-4D91-BC1C-7F2D52B19E5C@microsoft.com...
> Am am trying to test the migration of pc's to a new ad domain I am using
> the
> ADMT snap in to do it.
>
> I keep getting errors access denied but I can't see where i am supossed to
> add the correct security settings for each domain in order for the process
> to
> complete: follows is the dispatch log from the ADMT tool.
>
> 2004-12-01 12:00:47 Created account input file for remote agents:
> DCTCache.001
> 2004-12-01 12:00:47 Installing agent on 1 servers
> 2004-12-01 12:00:47 The Active Directory Migration Tool Agent will be
> installed on \\TEST-DAN01
> 2004-12-01 12:00:47 WRN1:7290 Processor architecture for machine
> \\TEST-DAN01 is unknown, Error accessing registry key
> SYSTEM\CurrentControlSet\Control\Session Manager\Environment rc=5
> Access is denied.
> 2004-12-01 12:00:47 ERR2:7006 Failed to install agent on \\TEST-DAN01,
> rc=5
> Access is denied.
> 2004-12-01 12:00:47 ERR2:7005 Failed to launch agent on \\TEST-DAN01,
> hr=80070005 Access is denied.
> 2004-12-01 12:00:48 All agents are installed. The dispatcher is finished.
> 2004-12-01 16:30:22 Created account input file for remote agents:
> DCTCache.002
> 2004-12-01 16:30:22 Installing agent on 1 servers
> 2004-12-01 16:30:22 The Active Directory Migration Tool Agent will be
> installed on \\test-dan01
> 2004-12-01 16:30:22 WRN1:7290 Processor architecture for machine
> \\test-dan01 is unknown, Error accessing registry key
> SYSTEM\CurrentControlSet\Control\Session Manager\Environment rc=5
> Access is denied.
> 2004-12-01 16:30:22 ERR2:7006 Failed to install agent on \\test-dan01,
> rc=5
> Access is denied.
> 2004-12-01 16:30:22 ERR2:7005 Failed to launch agent on \\test-dan01,
> hr=80070005 Access is denied.
> 2004-12-01 16:30:23 All agents are installed. The dispatcher is finished.
>
> Anyone help????
>

andy · 02-12-2004

"Dan" <Dan@discussions.microsoft.com> wrote in message
news:205C1727-FF71-4D91-BC1C-7F2D52B19E5C@microsoft.com...
> Am am trying to test the migration of pc's to a new ad domain I am using
the
> ADMT snap in to do it.
>
> I keep getting errors access denied but I can't see where i am supossed to
> add the correct security settings for each domain in order for the process
to
> complete: follows is the dispatch log from the ADMT tool.
>
> 2004-12-01 12:00:47 Created account input file for remote agents:
DCTCache.001
> 2004-12-01 12:00:47 Installing agent on 1 servers
> 2004-12-01 12:00:47 The Active Directory Migration Tool Agent will be
> installed on \\TEST-DAN01
> 2004-12-01 12:00:47 WRN1:7290 Processor architecture for machine
> \\TEST-DAN01 is unknown, Error accessing registry key
> SYSTEM\CurrentControlSet\Control\Session Manager\Environment rc=5
> Access is denied.
> 2004-12-01 12:00:47 ERR2:7006 Failed to install agent on \\TEST-DAN01,
rc=5
> Access is denied.
> 2004-12-01 12:00:47 ERR2:7005 Failed to launch agent on \\TEST-DAN01,
> hr=80070005 Access is denied.
> 2004-12-01 12:00:48 All agents are installed. The dispatcher is finished.
> 2004-12-01 16:30:22 Created account input file for remote agents:
DCTCache.002
> 2004-12-01 16:30:22 Installing agent on 1 servers
> 2004-12-01 16:30:22 The Active Directory Migration Tool Agent will be
> installed on \\test-dan01
> 2004-12-01 16:30:22 WRN1:7290 Processor architecture for machine
> \\test-dan01 is unknown, Error accessing registry key
> SYSTEM\CurrentControlSet\Control\Session Manager\Environment rc=5
> Access is denied.
> 2004-12-01 16:30:22 ERR2:7006 Failed to install agent on \\test-dan01,
rc=5
> Access is denied.
> 2004-12-01 16:30:22 ERR2:7005 Failed to launch agent on \\test-dan01,
> hr=80070005 Access is denied.
> 2004-12-01 16:30:23 All agents are installed. The dispatcher is finished.
>
> Anyone help????
>

Dan,

About a month ago we performed a migration to a new forest / domain using
ADMT. In all 1600 user accounts and 650 computers were migrated. Initial use
of ADMT was frustrating but here is what I found out.

ADMT user migration is fine if you set up a password server (to migrate
passwords as well as users)

ADMT computer migration hardly ever works first time. I migrated 30 stations
at a time and even then I had to retry each batch three times. This worked.
It usually failed once or twice with access denied messages.

You need a trust established between both domains or forests.

Place the domain admin account from each domain into the administrators
group on the other domain.

Make sure your clients that are to be migrated can resolve both your old and
new domain (and or forests as appropriate)

Make sure that domain admin is a member of local admin on the workstations
that you wish to migrate.

Hope this helps

Andy.

02-12-2004

You should check that LOCAL SYSTEM have full control over
this key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Secure
PipeServers\winreg

This solution solved same problem I had durnig computer
migration via ADMT.

Good luck