Go Back   TechArena Community > Technical Support > Computer Help > Windows Server > Windows Server Help
ADMT 3.0 Computer mig - Failed to change domain affiliation when changing computer name via include file ADMT 3.0 Computer mig - Failed to change domain affiliation when changing computer name via include file
Become a Member!
Forgot your username/password?
Register Tags Active Topics RSS Search Mark Forums Read SiteMap

Tags: , , ,

Sponsored Links



ADMT 3.0 Computer mig - Failed to change domain affiliation when changing computer name via include file

Windows Server Help


Reply
 
Thread Tools Search this Thread
  #1  
Old 23-06-2006
Ignaurus13
 
Posts: n/a
ADMT 3.0 Computer mig - Failed to change domain affiliation when changing computer name via include file
Hello,

I am not able to change domain affiliation when I perform ADMT v3 computer
migration using an include file that has a comuter name change. If I dont
use an include file and dont change the computer name, it works fine


Here are the events from the agen log:
2006-06-23 03:25:47 Changed computer name to MIG-XP-CLIENT
2006-06-23 03:25:48 ERR3:7075 Failed to change domain affiliation,
hr=800708ad The user name could not be found.
2006-06-23 03:25:48 Changed computer name to XP-CLIENT
2006-06-23 03:25:48 Wrote result file
C:\WINDOWS\OnePointDomainAgent\000013_XP-CLIENT.result


Here is my include csv
SourceName,TargetRDN,TargetSAM
XP-CLIENT,"CN=MIG-XP-CLIENT",MIG-XP-CLIENT

Any Suggestions?

Thanks,
Iggy


Reply With Quote
  #2  
Old 23-06-2006
Vincent Xu [MSFT]
 
Posts: n/a
RE: ADMT 3.0 Computer mig - Failed to change domain affiliation when changing computer name via include file
Hi,

Would you please attach the entire admt log?

Thanks.


Best regards,

Vincent Xu
Microsoft Online Partner Support

======================================================
Get Secure! - www.microsoft.com/security
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties,and confers no rights.
======================================================



--------------------
>>Reply-To: "Ignaurus13" <ignaurus13@netscape.net>
>>From: "Ignaurus13" <ignaurus13@netscape.net>
>>Subject: ADMT 3.0 Computer mig - Failed to change domain affiliation
when changing computer name via include file
>>Date: Fri, 23 Jun 2006 03:31:41 -0400
>>Lines: 26
>>X-Priority: 3
>>X-MSMail-Priority: Normal
>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2869
>>X-RFC2646: Format=Flowed; Original
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
>>Message-ID: <euOHXcplGHA.4196@TK2MSFTNGP03.phx.gbl>
>>Newsgroups: microsoft.public.windows.server.migration
>>NNTP-Posting-Host: 227-35.35-65.tampabay.res.rr.com 65.35.35.227
>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
>>Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.migration:24198
>>X-Tomcat-NG: microsoft.public.windows.server.migration
>>
>>Hello,
>>
>>I am not able to change domain affiliation when I perform ADMT v3
computer
>>migration using an include file that has a comuter name change. If I dont
>>use an include file and dont change the computer name, it works fine
>>
>>
>>Here are the events from the agen log:
>>2006-06-23 03:25:47 Changed computer name to MIG-XP-CLIENT
>>2006-06-23 03:25:48 ERR3:7075 Failed to change domain affiliation,
>>hr=800708ad The user name could not be found.
>>2006-06-23 03:25:48 Changed computer name to XP-CLIENT
>>2006-06-23 03:25:48 Wrote result file
>>C:\WINDOWS\OnePointDomainAgent\000013_XP-CLIENT.result
>>
>>
>>Here is my include csv
>>SourceName,TargetRDN,TargetSAM
>>XP-CLIENT,"CN=MIG-XP-CLIENT",MIG-XP-CLIENT
>>
>>Any Suggestions?
>>
>>Thanks,
>>Iggy
>>
>>
>>

Reply With Quote
  #3  
Old 23-06-2006
Ignaurus13
 
Posts: n/a
Re: ADMT 3.0 Computer mig - Failed to change domain affiliation when changing computer name via include file
Attached is the ADMT log.
Sometimes I get:
hr=800708ad The user name could not be found.

others I get:
hr=800706fb The security database on the server does not have a computer
account for this workstation trust relationship.


The lab consists of one subnet and no firewalls. T was originally trying it
in a lap that was a replica of production with the same results.


Are their any other ADMT v3 logs on the client I should be looking for? Is
there a DTCLOG.TXT? The ADMT log on mentions
C:\WINDOWS\OnePointDomainAgent\000013_XP-CLIENT.result, but I can't find it.

Also, read a lot of the newgroups entries and it blames either DNS sever
used or ADMT v2 in test mode. ADMT V3 has not test mode, right?


Also I have a one way trust that allows me to migrate users and leverage
SIDHistory. There isnt an prerequisite for a 2way trust in the ADMT
documentation. Also, the documentation troubleshooting section states to
manually add the workstation to the domain if ADMT fails.


[Settings Section]
Task: Computer Migration (13)
ADMT Console
User: ADTARGET01\Administrator
Computer: ADT01-MIG01.ADTARGET01.TEST (ADT01-MIG01)
Domain: ADTARGET01.TEST (ADTARGET01)
OS: Microsoft Windows Server 2003 5.2 (3790) Service Pack 1
Source Domain
Name: ADSOURCE01.TEST (ADSOURCE01)
DC: ADS01-DC01.ADSOURCE01.TEST (ADS01-DC01)
OS: Windows Server 2003 5.2 (3790) Service Pack 1
OU:
Target Domain
Name: ADTARGET01.TEST (ADTARGET01)
DC: ADT01-DC01.ADTARGET01.TEST (ADT01-DC01)
OS: Windows Server 2003 5.2 (3790) Service Pack 1
OU: LDAP://ADTARGET01.TEST/CN=Computers,DC=ADTARGET01,DC=TEST
Intra-Forest: No
Translate Option: Replace
Translate Files: Yes
Translate Local Groups: Yes
Translate Printers: Yes
Translate Registry: Yes
Translate Rights: Yes
Translate Shares: Yes
Translate User Profiles: Yes
Conflict Option: Ignore
Perform Pre-check Only: No

[Object Migration Section]
2006-06-23 03:19:03 Starting Account Replicator.
2006-06-23 03:19:05 CN=MIG-XP-CLIENT - Created
2006-06-23 03:19:09 - Set password for CN=MIG-XP-CLIENT.
2006-06-23 03:19:09 Operation completed.

[Agent Dispatch Section]
2006-06-23 03:19:37 Read 3 accounts from the database that were previously
migrated from the domain 'ADSOURCE01.TEST' to the domain 'ADTARGET01.TEST'.
2006-06-23 03:19:38 Created account input file for remote agents:
Accounts000013.txt
2006-06-23 03:19:38 Installing agent on 1 servers

2006-06-23 03:19:38 The Active Directory Migration Tool Agent will be
installed on XP-Client.ADSOURCE01.TEST
2006-06-23 03:20:45 ERR2:7863 Could not determine whether you have
administrator privileges on the computer 'XP-Client.ADSOURCE01.TEST'. The
remote procedure call failed and did not execute. (0x800706bf)
2006-06-23 03:24:05 Started job: XP-Client.ADSOURCE01.TEST 000013_XP-CLIENT
{DEDF5D84-D6EF-4F48-AA0A-DC5C775F56FD}


[Agent Summary Section]
***** Start of Pre-check Summary *****
Machine Name Status Message
XP-Client.ADSOURCE01.TEST Passed
***** End of Pre-check Summary *****
***** Start of Agent Operation Summary *****
For more information about operations that completed with warnings or
errors, refer to the Agent Details section.
Machine Name Status Message
XP-Client.ADSOURCE01.TEST Completed with Errors
***** End of Agent Operation Summary *****
***** Start of Post-check Summary *****
Machine Name Status Message
XP-Client.ADSOURCE01.TEST Not Started
***** End of Post-check Summary *****

[Agent Details Section]

Details for XP-Client.ADSOURCE01.TEST
?Local Machine
Computer: xp-client.ADSOURCE01.TEST (XP-CLIENT)
Domain: ADSOURCE01.TEST (ADSOURCE01)
OS: Microsoft Windows XP 5.1 (2600) Service Pack 2
2006-06-23 03:24:03 Starting Security Translator.
2006-06-23 03:24:03 Agent is running in local mode.
2006-06-23 03:24:03 Read 3 accounts from
C:\WINDOWS\OnePointDomainAgent\Accounts000013.txt
2006-06-23 03:24:03 SecurityTranslation Files:Yes Shares:Yes LGroups:Yes
UserRights:Yes Printers:Yes Profiles:Yes RecycleBin:Yes
TranslationMode:Replace ADSOURCE01.TEST ADTARGET01.TEST
2006-06-23 03:24:03 Starting
2006-06-23 03:24:03 Translating local machine.
2006-06-23 03:24:04 Skipping A:\, rc=21 The device is not ready.
2006-06-23 03:24:04 Processing C:\
2006-06-23 03:24:41 Processing recycle bin files and folders on C:\.
2006-06-23 03:24:41 Examining: S-1-5-21-1409082233-492894223-842925246-500
2006-06-23 03:24:41 Examining: S-1-5-21-3161335116-2213386633-3635169926-500
2006-06-23 03:24:41 Skipping D:\. D:\ is a CD-ROM drive.
2006-06-23 03:24:41 Processing shares on local machine.
2006-06-23 03:24:41 Processing printer security...
2006-06-23 03:24:41 Translating local groups.
2006-06-23 03:24:41 Translating user rights.
2006-06-23 03:24:41 ADMT only performs user rights translation in Append
mode.
2006-06-23 03:24:41 Translating security on registry keys.
2006-06-23 03:25:38 ERR3:7330 Failed to open registry key
HKEY_USERS\S-1-5-21-110014542-4250238548-2683485846-500\Software\Classes,
rc=87 The parameter is incorrect.
2006-06-23 03:25:38 This profile translation automatically switches from
replace mode to add mode if the user is currently logged on or if the
profile is in use for other reasons. In order to disable the switching, you
need to set the registry
HKLM\Software\Microsoft\ADMT\DisallowFallbackToAddInProfileTranslation
(REG_DWORD) to 1 on the ADMT machine.
2006-06-23 03:25:38 Translating user profile, source account='UserNo1',
target account='UserNo1'
2006-06-23 03:25:47 WRN1:7644 Unable to translate Microsoft Installer
related registry keys from 'S-1-5-21-2750958425-3276501084-2773286462-1109'
to 'S-1-5-21-2507220796-3330475737-2179702394-1113'. rc=3 The system cannot
find the path specified.
2006-06-23 03:25:47 ------Account Detail---------
2006-06-23 03:25:47 The account detail section uses the following format:
AccountName(OwnerChanges, GroupChanges, DaclChanges, SaclChanges).
2006-06-23 03:25:47 UserNo1 (0, 0, 30, 0)
2006-06-23 03:25:47 -----------------------------
2006-06-23 03:25:47 2 users, 1 groups
2006-06-23 03:25:47 3 accounts selected. 3 resolved, 0 unresolved.
2006-06-23 03:25:47 Examined Changed Unchanged
2006-06-23 03:25:47 Files 24690 0 24690
2006-06-23 03:25:47 Dirs 1729 0 1729
2006-06-23 03:25:47 Shares 0 0 0
2006-06-23 03:25:47 Members 9 0 9
2006-06-23 03:25:47 User Rights 67 0 67
2006-06-23 03:25:47 Exchange Objects 0 0 0
2006-06-23 03:25:47 Containers 0 0 0
2006-06-23 03:25:47 DACLs 179702 15 179687
2006-06-23 03:25:47 SACLs 0 0 0
2006-06-23 03:25:47 Examined Changed No Target Not
Selected Unknown
2006-06-23 03:25:47 Owners 179705 0 179705
0 0
2006-06-23 03:25:47 Groups 179705 0 179705
0 0
2006-06-23 03:25:47 DACEs 1464726 30 1464696
1464696 0
2006-06-23 03:25:47 SACEs 0 0 0
0 0
2006-06-23 03:25:47 Changed computer name to MIG-XP-CLIENT
2006-06-23 03:25:48 ERR3:7075 Failed to change domain affiliation,
hr=800708ad The user name could not be found.
2006-06-23 03:25:48 Changed computer name to XP-CLIENT
2006-06-23 03:25:48 Wrote result file
C:\WINDOWS\OnePointDomainAgent\000013_XP-CLIENT.result
2006-06-23 03:25:48 Operation completed.



"Vincent Xu [MSFT]" <v-xuwen@online.microsoft.com> wrote in message
news:YaF5xVqlGHA.4164@TK2MSFTNGXA01.phx.gbl...
> Hi,
>
> Would you please attach the entire admt log?
>
> Thanks.
>
>
> Best regards,
>
> Vincent Xu
> Microsoft Online Partner Support
>
> ======================================================
> Get Secure! - www.microsoft.com/security
> ======================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others
> may learn and benefit from this issue.
> ======================================================
> This posting is provided "AS IS" with no warranties,and confers no rights.
> ======================================================
>
>
>
> --------------------
>>>Reply-To: "Ignaurus13" <ignaurus13@netscape.net>
>>>From: "Ignaurus13" <ignaurus13@netscape.net>
>>>Subject: ADMT 3.0 Computer mig - Failed to change domain affiliation
> when changing computer name via include file
>>>Date: Fri, 23 Jun 2006 03:31:41 -0400
>>>Lines: 26
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2869
>>>X-RFC2646: Format=Flowed; Original
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
>>>Message-ID: <euOHXcplGHA.4196@TK2MSFTNGP03.phx.gbl>
>>>Newsgroups: microsoft.public.windows.server.migration
>>>NNTP-Posting-Host: 227-35.35-65.tampabay.res.rr.com 65.35.35.227
>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
>>>Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.windows.server.migration:24198
>>>X-Tomcat-NG: microsoft.public.windows.server.migration
>>>
>>>Hello,
>>>
>>>I am not able to change domain affiliation when I perform ADMT v3
> computer
>>>migration using an include file that has a comuter name change. If I dont
>>>use an include file and dont change the computer name, it works fine
>>>
>>>
>>>Here are the events from the agen log:
>>>2006-06-23 03:25:47 Changed computer name to MIG-XP-CLIENT
>>>2006-06-23 03:25:48 ERR3:7075 Failed to change domain affiliation,
>>>hr=800708ad The user name could not be found.
>>>2006-06-23 03:25:48 Changed computer name to XP-CLIENT
>>>2006-06-23 03:25:48 Wrote result file
>>>C:\WINDOWS\OnePointDomainAgent\000013_XP-CLIENT.result
>>>
>>>
>>>Here is my include csv
>>>SourceName,TargetRDN,TargetSAM
>>>XP-CLIENT,"CN=MIG-XP-CLIENT",MIG-XP-CLIENT
>>>
>>>Any Suggestions?
>>>
>>>Thanks,
>>>Iggy
>>>
>>>
>>>
>


Reply With Quote
  #4  
Old 26-06-2006
Vincent Xu [MSFT]
 
Posts: n/a
Re: ADMT 3.0 Computer mig - Failed to change domain affiliation when changing computer name via include file
Hi,

I have following suggestions:

1. Make sure the "NTLM security support provider" service is started -

2. Check if the RPC service is started. If not, start it and then test
the problem again.
3. Verify
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\SecurityService]"68"="netlogon.dl
l"
4. Make sure that the Client for Microsoft Networks and "File and Printer
sharing for Microsoft Networks" are installed and enabled.
5. If that all checks out remove and reinstall "Client for Microsoft
Networks"

Thanks.

Best regards,

Vincent Xu
Microsoft Online Partner Support

======================================================
Get Secure! - www.microsoft.com/security
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties,and confers no rights.
======================================================



--------------------
>>Reply-To: "Ignaurus13" <ignaurus13@netscape.net>
>>From: "Ignaurus13" <ignaurus13@netscape.net>
>>References: <euOHXcplGHA.4196@TK2MSFTNGP03.phx.gbl>
<YaF5xVqlGHA.4164@TK2MSFTNGXA01.phx.gbl>
>>Subject: Re: ADMT 3.0 Computer mig - Failed to change domain affiliation
when changing computer name via include file
>>Date: Fri, 23 Jun 2006 10:18:34 -0400
>>Lines: 252
>>X-Priority: 3
>>X-MSMail-Priority: Normal
>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2869
>>X-RFC2646: Format=Flowed; Original
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
>>Message-ID: <#r7nv$slGHA.1208@TK2MSFTNGP02.phx.gbl>
>>Newsgroups: microsoft.public.windows.server.migration
>>NNTP-Posting-Host: 227-35.35-65.tampabay.res.rr.com 65.35.35.227
>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl
>>Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.migration:24205
>>X-Tomcat-NG: microsoft.public.windows.server.migration
>>
>>Attached is the ADMT log.
>>Sometimes I get:
>>hr=800708ad The user name could not be found.
>>
>>others I get:
>>hr=800706fb The security database on the server does not have a
computer
>>account for this workstation trust relationship.
>>
>>
>>The lab consists of one subnet and no firewalls. T was originally trying
it
>>in a lap that was a replica of production with the same results.
>>
>>
>>Are their any other ADMT v3 logs on the client I should be looking for?
Is
>>there a DTCLOG.TXT? The ADMT log on mentions
>>C:\WINDOWS\OnePointDomainAgent\000013_XP-CLIENT.result, but I can't find
it.
>>
>>Also, read a lot of the newgroups entries and it blames either DNS sever
>>used or ADMT v2 in test mode. ADMT V3 has not test mode, right?
>>
>>
>>Also I have a one way trust that allows me to migrate users and leverage
>>SIDHistory. There isnt an prerequisite for a 2way trust in the ADMT
>>documentation. Also, the documentation troubleshooting section states to
>>manually add the workstation to the domain if ADMT fails.
>>
>>
>>[Settings Section]
>>Task: Computer Migration (13)
>>ADMT Console
>> User: ADTARGET01\Administrator
>> Computer: ADT01-MIG01.ADTARGET01.TEST (ADT01-MIG01)
>> Domain: ADTARGET01.TEST (ADTARGET01)
>> OS: Microsoft Windows Server 2003 5.2 (3790) Service Pack
1
>>Source Domain
>> Name: ADSOURCE01.TEST (ADSOURCE01)
>> DC: ADS01-DC01.ADSOURCE01.TEST (ADS01-DC01)
>> OS: Windows Server 2003 5.2 (3790) Service Pack 1
>> OU:
>>Target Domain
>> Name: ADTARGET01.TEST (ADTARGET01)
>> DC: ADT01-DC01.ADTARGET01.TEST (ADT01-DC01)
>> OS: Windows Server 2003 5.2 (3790) Service Pack 1
>> OU: LDAP://ADTARGET01.TEST/CN=Computers,DC=ADTARGET01,DC=TEST
>>Intra-Forest: No
>>Translate Option: Replace
>>Translate Files: Yes
>>Translate Local Groups: Yes
>>Translate Printers: Yes
>>Translate Registry: Yes
>>Translate Rights: Yes
>>Translate Shares: Yes
>>Translate User Profiles: Yes
>>Conflict Option: Ignore
>>Perform Pre-check Only: No
>>
>>[Object Migration Section]
>>2006-06-23 03:19:03 Starting Account Replicator.
>>2006-06-23 03:19:05 CN=MIG-XP-CLIENT - Created
>>2006-06-23 03:19:09 - Set password for CN=MIG-XP-CLIENT.
>>2006-06-23 03:19:09 Operation completed.
>>
>>[Agent Dispatch Section]
>>2006-06-23 03:19:37 Read 3 accounts from the database that were
previously
>>migrated from the domain 'ADSOURCE01.TEST' to the domain
'ADTARGET01.TEST'.
>>2006-06-23 03:19:38 Created account input file for remote agents:
>>Accounts000013.txt
>>2006-06-23 03:19:38 Installing agent on 1 servers
>>
>>2006-06-23 03:19:38 The Active Directory Migration Tool Agent will be
>>installed on XP-Client.ADSOURCE01.TEST
>>2006-06-23 03:20:45 ERR2:7863 Could not determine whether you have
>>administrator privileges on the computer 'XP-Client.ADSOURCE01.TEST'. The
>>remote procedure call failed and did not execute. (0x800706bf)
>>2006-06-23 03:24:05 Started job: XP-Client.ADSOURCE01.TEST
000013_XP-CLIENT
>>{DEDF5D84-D6EF-4F48-AA0A-DC5C775F56FD}
>>
>>
>>[Agent Summary Section]
>>***** Start of Pre-check Summary *****
>>Machine Name Status Message
>>XP-Client.ADSOURCE01.TEST Passed
>>***** End of Pre-check Summary *****
>>***** Start of Agent Operation Summary *****
>>For more information about operations that completed with warnings or
>>errors, refer to the Agent Details section.
>>Machine Name Status Message
>>XP-Client.ADSOURCE01.TEST Completed with Errors
>>***** End of Agent Operation Summary *****
>>***** Start of Post-check Summary *****
>>Machine Name Status Message
>>XP-Client.ADSOURCE01.TEST Not Started
>>***** End of Post-check Summary *****
>>
>>[Agent Details Section]
>>
>>Details for XP-Client.ADSOURCE01.TEST
>>?Local Machine
>> Computer: xp-client.ADSOURCE01.TEST (XP-CLIENT)
>> Domain: ADSOURCE01.TEST (ADSOURCE01)
>> OS: Microsoft Windows XP 5.1 (2600) Service Pack 2
>>2006-06-23 03:24:03 Starting Security Translator.
>>2006-06-23 03:24:03 Agent is running in local mode.
>>2006-06-23 03:24:03 Read 3 accounts from
>>C:\WINDOWS\OnePointDomainAgent\Accounts000013.txt
>>2006-06-23 03:24:03 SecurityTranslation Files:Yes Shares:Yes LGroups:Yes
>>UserRights:Yes Printers:Yes Profiles:Yes RecycleBin:Yes
>>TranslationMode:Replace ADSOURCE01.TEST ADTARGET01.TEST
>>2006-06-23 03:24:03 Starting
>>2006-06-23 03:24:03 Translating local machine.
>>2006-06-23 03:24:04 Skipping A:\, rc=21 The device is not ready.
>>2006-06-23 03:24:04 Processing C:\
>>2006-06-23 03:24:41 Processing recycle bin files and folders on C:\.
>>2006-06-23 03:24:41 Examining: S-1-5-21-1409082233-492894223-842925246-500
>>2006-06-23 03:24:41 Examining:
S-1-5-21-3161335116-2213386633-3635169926-500
>>2006-06-23 03:24:41 Skipping D:\. D:\ is a CD-ROM drive.
>>2006-06-23 03:24:41 Processing shares on local machine.
>>2006-06-23 03:24:41 Processing printer security...
>>2006-06-23 03:24:41 Translating local groups.
>>2006-06-23 03:24:41 Translating user rights.
>>2006-06-23 03:24:41 ADMT only performs user rights translation in Append
>>mode.
>>2006-06-23 03:24:41 Translating security on registry keys.
>>2006-06-23 03:25:38 ERR3:7330 Failed to open registry key
>>HKEY_USERS\S-1-5-21-110014542-4250238548-2683485846-500\Software\Classes,
>>rc=87 The parameter is incorrect.
>>2006-06-23 03:25:38 This profile translation automatically switches from
>>replace mode to add mode if the user is currently logged on or if the
>>profile is in use for other reasons. In order to disable the switching,
you
>>need to set the registry
>>HKLM\Software\Microsoft\ADMT\DisallowFallbackToAddInProfileTranslation
>>(REG_DWORD) to 1 on the ADMT machine.
>>2006-06-23 03:25:38 Translating user profile, source account='UserNo1',
>>target account='UserNo1'
>>2006-06-23 03:25:47 WRN1:7644 Unable to translate Microsoft Installer
>>related registry keys from
'S-1-5-21-2750958425-3276501084-2773286462-1109'
>>to 'S-1-5-21-2507220796-3330475737-2179702394-1113'. rc=3 The system
cannot
>>find the path specified.
>>2006-06-23 03:25:47 ------Account Detail---------
>>2006-06-23 03:25:47 The account detail section uses the following format:
>>AccountName(OwnerChanges, GroupChanges, DaclChanges, SaclChanges).
>>2006-06-23 03:25:47 UserNo1 (0, 0, 30, 0)
>>2006-06-23 03:25:47 -----------------------------
>>2006-06-23 03:25:47 2 users, 1 groups
>>2006-06-23 03:25:47 3 accounts selected. 3 resolved, 0 unresolved.
>>2006-06-23 03:25:47 Examined Changed Unchanged
>>2006-06-23 03:25:47 Files 24690 0 24690
>>2006-06-23 03:25:47 Dirs 1729 0 1729
>>2006-06-23 03:25:47 Shares 0 0 0
>>2006-06-23 03:25:47 Members 9 0 9
>>2006-06-23 03:25:47 User Rights 67 0 67
>>2006-06-23 03:25:47 Exchange Objects 0 0
0
>>2006-06-23 03:25:47 Containers 0 0 0
>>2006-06-23 03:25:47 DACLs 179702 15 179687
>>2006-06-23 03:25:47 SACLs 0 0 0
>>2006-06-23 03:25:47 Examined Changed No Target
Not
>>Selected Unknown
>>2006-06-23 03:25:47 Owners 179705 0 179705
>>0 0
>>2006-06-23 03:25:47 Groups 179705 0 179705
>>0 0
>>2006-06-23 03:25:47 DACEs 1464726 30 1464696
>>1464696 0
>>2006-06-23 03:25:47 SACEs 0 0 0
>>0 0
>>2006-06-23 03:25:47 Changed computer name to MIG-XP-CLIENT
>>2006-06-23 03:25:48 ERR3:7075 Failed to change domain affiliation,
>>hr=800708ad The user name could not be found.
>>2006-06-23 03:25:48 Changed computer name to XP-CLIENT
>>2006-06-23 03:25:48 Wrote result file
>>C:\WINDOWS\OnePointDomainAgent\000013_XP-CLIENT.result
>>2006-06-23 03:25:48 Operation completed.
>>
>>
>>
>>"Vincent Xu [MSFT]" <v-xuwen@online.microsoft.com> wrote in message
>>news:YaF5xVqlGHA.4164@TK2MSFTNGXA01.phx.gbl...
>>> Hi,
>>>
>>> Would you please attach the entire admt log?
>>>
>>> Thanks.
>>>
>>>
>>> Best regards,
>>>
>>> Vincent Xu
>>> Microsoft Online Partner Support
>>>
>>> ======================================================
>>> Get Secure! - www.microsoft.com/security
>>> ======================================================
>>> When responding to posts, please "Reply to Group" via your newsreader so
>>> that others
>>> may learn and benefit from this issue.
>>> ======================================================
>>> This posting is provided "AS IS" with no warranties,and confers no
rights.
>>> ======================================================
>>>
>>>
>>>
>>> --------------------
>>>>>Reply-To: "Ignaurus13" <ignaurus13@netscape.net>
>>>>>From: "Ignaurus13" <ignaurus13@netscape.net>
>>>>>Subject: ADMT 3.0 Computer mig - Failed to change domain affiliation
>>> when changing computer name via include file
>>>>>Date: Fri, 23 Jun 2006 03:31:41 -0400
>>>>>Lines: 26
>>>>>X-Priority: 3
>>>>>X-MSMail-Priority: Normal
>>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2869
>>>>>X-RFC2646: Format=Flowed; Original
>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
>>>>>Message-ID: <euOHXcplGHA.4196@TK2MSFTNGP03.phx.gbl>
>>>>>Newsgroups: microsoft.public.windows.server.migration
>>>>>NNTP-Posting-Host: 227-35.35-65.tampabay.res.rr.com 65.35.35.227
>>>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
>>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>> microsoft.public.windows.server.migration:24198
>>>>>X-Tomcat-NG: microsoft.public.windows.server.migration
>>>>>
>>>>>Hello,
>>>>>
>>>>>I am not able to change domain affiliation when I perform ADMT v3
>>> computer
>>>>>migration using an include file that has a comuter name change. If I
dont
>>>>>use an include file and dont change the computer name, it works fine
>>>>>
>>>>>
>>>>>Here are the events from the agen log:
>>>>>2006-06-23 03:25:47 Changed computer name to MIG-XP-CLIENT
>>>>>2006-06-23 03:25:48 ERR3:7075 Failed to change domain affiliation,
>>>>>hr=800708ad The user name could not be found.
>>>>>2006-06-23 03:25:48 Changed computer name to XP-CLIENT
>>>>>2006-06-23 03:25:48 Wrote result file
>>>>>C:\WINDOWS\OnePointDomainAgent\000013_XP-CLIENT.result
>>>>>
>>>>>
>>>>>Here is my include csv
>>>>>SourceName,TargetRDN,TargetSAM
>>>>>XP-CLIENT,"CN=MIG-XP-CLIENT",MIG-XP-CLIENT
>>>>>
>>>>>Any Suggestions?
>>>>>
>>>>>Thanks,
>>>>>Iggy
>>>>>
>>>>>
>>>>>
>>>
>>
>>
>>

Reply With Quote
  #5  
Old 27-06-2006
Ignaurus13
 
Posts: n/a
Re: ADMT 3.0 Computer mig - Failed to change domain affiliation when changing computer name via include file
It was the include file,....targetsam for computers needed the $

Thanks for your help.

"Vincent Xu [MSFT]" <v-xuwen@online.microsoft.com> wrote in message
news:WOYVBZPmGHA.4948@TK2MSFTNGXA01.phx.gbl...
> Hi,
>
> I have following suggestions:
>
> 1. Make sure the "NTLM security support provider" service is started -
>
> 2. Check if the RPC service is started. If not, start it and then test
> the problem again.
> 3. Verify
> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\SecurityService]"68"="netlogon.dl
> l"
> 4. Make sure that the Client for Microsoft Networks and "File and Printer
> sharing for Microsoft Networks" are installed and enabled.
> 5. If that all checks out remove and reinstall "Client for Microsoft
> Networks"
>
> Thanks.
>
> Best regards,
>
> Vincent Xu
> Microsoft Online Partner Support
>
> ======================================================
> Get Secure! - www.microsoft.com/security
> ======================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others
> may learn and benefit from this issue.
> ======================================================
> This posting is provided "AS IS" with no warranties,and confers no rights.
> ======================================================
>
>
>
> --------------------
>>>Reply-To: "Ignaurus13" <ignaurus13@netscape.net>
>>>From: "Ignaurus13" <ignaurus13@netscape.net>
>>>References: <euOHXcplGHA.4196@TK2MSFTNGP03.phx.gbl>
> <YaF5xVqlGHA.4164@TK2MSFTNGXA01.phx.gbl>
>>>Subject: Re: ADMT 3.0 Computer mig - Failed to change domain affiliation
> when changing computer name via include file
>>>Date: Fri, 23 Jun 2006 10:18:34 -0400
>>>Lines: 252
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2869
>>>X-RFC2646: Format=Flowed; Original
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
>>>Message-ID: <#r7nv$slGHA.1208@TK2MSFTNGP02.phx.gbl>
>>>Newsgroups: microsoft.public.windows.server.migration
>>>NNTP-Posting-Host: 227-35.35-65.tampabay.res.rr.com 65.35.35.227
>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl
>>>Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.windows.server.migration:24205
>>>X-Tomcat-NG: microsoft.public.windows.server.migration
>>>
>>>Attached is the ADMT log.
>>>Sometimes I get:
>>>hr=800708ad The user name could not be found.
>>>
>>>others I get:
>>>hr=800706fb The security database on the server does not have a
> computer
>>>account for this workstation trust relationship.
>>>
>>>
>>>The lab consists of one subnet and no firewalls. T was originally trying
> it
>>>in a lap that was a replica of production with the same results.
>>>
>>>
>>>Are their any other ADMT v3 logs on the client I should be looking for?
> Is
>>>there a DTCLOG.TXT? The ADMT log on mentions
>>>C:\WINDOWS\OnePointDomainAgent\000013_XP-CLIENT.result, but I can't find
> it.
>>>
>>>Also, read a lot of the newgroups entries and it blames either DNS sever
>>>used or ADMT v2 in test mode. ADMT V3 has not test mode, right?
>>>
>>>
>>>Also I have a one way trust that allows me to migrate users and leverage
>>>SIDHistory. There isnt an prerequisite for a 2way trust in the ADMT
>>>documentation. Also, the documentation troubleshooting section states to
>>>manually add the workstation to the domain if ADMT fails.
>>>
>>>
>>>[Settings Section]
>>>Task: Computer Migration (13)
>>>ADMT Console
>>> User: ADTARGET01\Administrator
>>> Computer: ADT01-MIG01.ADTARGET01.TEST (ADT01-MIG01)
>>> Domain: ADTARGET01.TEST (ADTARGET01)
>>> OS: Microsoft Windows Server 2003 5.2 (3790) Service Pack
> 1
>>>Source Domain
>>> Name: ADSOURCE01.TEST (ADSOURCE01)
>>> DC: ADS01-DC01.ADSOURCE01.TEST (ADS01-DC01)
>>> OS: Windows Server 2003 5.2 (3790) Service Pack 1
>>> OU:
>>>Target Domain
>>> Name: ADTARGET01.TEST (ADTARGET01)
>>> DC: ADT01-DC01.ADTARGET01.TEST (ADT01-DC01)
>>> OS: Windows Server 2003 5.2 (3790) Service Pack 1
>>> OU: LDAP://ADTARGET01.TEST/CN=Computers,DC=ADTARGET01,DC=TEST
>>>Intra-Forest: No
>>>Translate Option: Replace
>>>Translate Files: Yes
>>>Translate Local Groups: Yes
>>>Translate Printers: Yes
>>>Translate Registry: Yes
>>>Translate Rights: Yes
>>>Translate Shares: Yes
>>>Translate User Profiles: Yes
>>>Conflict Option: Ignore
>>>Perform Pre-check Only: No
>>>
>>>[Object Migration Section]
>>>2006-06-23 03:19:03 Starting Account Replicator.
>>>2006-06-23 03:19:05 CN=MIG-XP-CLIENT - Created
>>>2006-06-23 03:19:09 - Set password for CN=MIG-XP-CLIENT.
>>>2006-06-23 03:19:09 Operation completed.
>>>
>>>[Agent Dispatch Section]
>>>2006-06-23 03:19:37 Read 3 accounts from the database that were
> previously
>>>migrated from the domain 'ADSOURCE01.TEST' to the domain
> 'ADTARGET01.TEST'.
>>>2006-06-23 03:19:38 Created account input file for remote agents:
>>>Accounts000013.txt
>>>2006-06-23 03:19:38 Installing agent on 1 servers
>>>
>>>2006-06-23 03:19:38 The Active Directory Migration Tool Agent will be
>>>installed on XP-Client.ADSOURCE01.TEST
>>>2006-06-23 03:20:45 ERR2:7863 Could not determine whether you have
>>>administrator privileges on the computer 'XP-Client.ADSOURCE01.TEST'. The
>>>remote procedure call failed and did not execute. (0x800706bf)
>>>2006-06-23 03:24:05 Started job: XP-Client.ADSOURCE01.TEST
> 000013_XP-CLIENT
>>>{DEDF5D84-D6EF-4F48-AA0A-DC5C775F56FD}
>>>
>>>
>>>[Agent Summary Section]
>>>***** Start of Pre-check Summary *****
>>>Machine Name Status Message
>>>XP-Client.ADSOURCE01.TEST Passed
>>>***** End of Pre-check Summary *****
>>>***** Start of Agent Operation Summary *****
>>>For more information about operations that completed with warnings or
>>>errors, refer to the Agent Details section.
>>>Machine Name Status Message
>>>XP-Client.ADSOURCE01.TEST Completed with Errors
>>>***** End of Agent Operation Summary *****
>>>***** Start of Post-check Summary *****
>>>Machine Name Status Message
>>>XP-Client.ADSOURCE01.TEST Not Started
>>>***** End of Post-check Summary *****
>>>
>>>[Agent Details Section]
>>>
>>>Details for XP-Client.ADSOURCE01.TEST
>>>?Local Machine
>>> Computer: xp-client.ADSOURCE01.TEST (XP-CLIENT)
>>> Domain: ADSOURCE01.TEST (ADSOURCE01)
>>> OS: Microsoft Windows XP 5.1 (2600) Service Pack 2
>>>2006-06-23 03:24:03 Starting Security Translator.
>>>2006-06-23 03:24:03 Agent is running in local mode.
>>>2006-06-23 03:24:03 Read 3 accounts from
>>>C:\WINDOWS\OnePointDomainAgent\Accounts000013.txt
>>>2006-06-23 03:24:03 SecurityTranslation Files:Yes Shares:Yes LGroups:Yes
>>>UserRights:Yes Printers:Yes Profiles:Yes RecycleBin:Yes
>>>TranslationMode:Replace ADSOURCE01.TEST ADTARGET01.TEST
>>>2006-06-23 03:24:03 Starting
>>>2006-06-23 03:24:03 Translating local machine.
>>>2006-06-23 03:24:04 Skipping A:\, rc=21 The device is not ready.
>>>2006-06-23 03:24:04 Processing C:\
>>>2006-06-23 03:24:41 Processing recycle bin files and folders on C:\.
>>>2006-06-23 03:24:41 Examining:
>>>S-1-5-21-1409082233-492894223-842925246-500
>>>2006-06-23 03:24:41 Examining:
> S-1-5-21-3161335116-2213386633-3635169926-500
>>>2006-06-23 03:24:41 Skipping D:\. D:\ is a CD-ROM drive.
>>>2006-06-23 03:24:41 Processing shares on local machine.
>>>2006-06-23 03:24:41 Processing printer security...
>>>2006-06-23 03:24:41 Translating local groups.
>>>2006-06-23 03:24:41 Translating user rights.
>>>2006-06-23 03:24:41 ADMT only performs user rights translation in Append
>>>mode.
>>>2006-06-23 03:24:41 Translating security on registry keys.
>>>2006-06-23 03:25:38 ERR3:7330 Failed to open registry key
>>>HKEY_USERS\S-1-5-21-110014542-4250238548-2683485846-500\Software\Classes,
>>>rc=87 The parameter is incorrect.
>>>2006-06-23 03:25:38 This profile translation automatically switches from
>>>replace mode to add mode if the user is currently logged on or if the
>>>profile is in use for other reasons. In order to disable the switching,
> you
>>>need to set the registry
>>>HKLM\Software\Microsoft\ADMT\DisallowFallbackToAddInProfileTranslation
>>>(REG_DWORD) to 1 on the ADMT machine.
>>>2006-06-23 03:25:38 Translating user profile, source account='UserNo1',
>>>target account='UserNo1'
>>>2006-06-23 03:25:47 WRN1:7644 Unable to translate Microsoft Installer
>>>related registry keys from
> 'S-1-5-21-2750958425-3276501084-2773286462-1109'
>>>to 'S-1-5-21-2507220796-3330475737-2179702394-1113'. rc=3 The system
> cannot
>>>find the path specified.
>>>2006-06-23 03:25:47 ------Account Detail---------
>>>2006-06-23 03:25:47 The account detail section uses the following format:
>>>AccountName(OwnerChanges, GroupChanges, DaclChanges, SaclChanges).
>>>2006-06-23 03:25:47 UserNo1 (0, 0, 30, 0)
>>>2006-06-23 03:25:47 -----------------------------
>>>2006-06-23 03:25:47 2 users, 1 groups
>>>2006-06-23 03:25:47 3 accounts selected. 3 resolved, 0 unresolved.
>>>2006-06-23 03:25:47 Examined Changed Unchanged
>>>2006-06-23 03:25:47 Files 24690 0 24690
>>>2006-06-23 03:25:47 Dirs 1729 0 1729
>>>2006-06-23 03:25:47 Shares 0 0 0
>>>2006-06-23 03:25:47 Members 9 0 9
>>>2006-06-23 03:25:47 User Rights 67 0 67
>>>2006-06-23 03:25:47 Exchange Objects 0 0
> 0
>>>2006-06-23 03:25:47 Containers 0 0 0
>>>2006-06-23 03:25:47 DACLs 179702 15 179687
>>>2006-06-23 03:25:47 SACLs 0 0 0
>>>2006-06-23 03:25:47 Examined Changed No Target
> Not
>>>Selected Unknown
>>>2006-06-23 03:25:47 Owners 179705 0 179705
>>>0 0
>>>2006-06-23 03:25:47 Groups 179705 0 179705
>>>0 0
>>>2006-06-23 03:25:47 DACEs 1464726 30 1464696
>>>1464696 0
>>>2006-06-23 03:25:47 SACEs 0 0 0
>>>0 0
>>>2006-06-23 03:25:47 Changed computer name to MIG-XP-CLIENT
>>>2006-06-23 03:25:48 ERR3:7075 Failed to change domain affiliation,
>>>hr=800708ad The user name could not be found.
>>>2006-06-23 03:25:48 Changed computer name to XP-CLIENT
>>>2006-06-23 03:25:48 Wrote result file
>>>C:\WINDOWS\OnePointDomainAgent\000013_XP-CLIENT.result
>>>2006-06-23 03:25:48 Operation completed.
>>>
>>>
>>>
>>>"Vincent Xu [MSFT]" <v-xuwen@online.microsoft.com> wrote in message
>>>news:YaF5xVqlGHA.4164@TK2MSFTNGXA01.phx.gbl...
>>>> Hi,
>>>>
>>>> Would you please attach the entire admt log?
>>>>
>>>> Thanks.
>>>>
>>>>
>>>> Best regards,
>>>>
>>>> Vincent Xu
>>>> Microsoft Online Partner Support
>>>>
>>>> ======================================================
>>>> Get Secure! - www.microsoft.com/security
>>>> ======================================================
>>>> When responding to posts, please "Reply to Group" via your newsreader
>>>> so
>>>> that others
>>>> may learn and benefit from this issue.
>>>> ======================================================
>>>> This posting is provided "AS IS" with no warranties,and confers no
> rights.
>>>> ======================================================
>>>>
>>>>
>>>>
>>>> --------------------
>>>>>>Reply-To: "Ignaurus13" <ignaurus13@netscape.net>
>>>>>>From: "Ignaurus13" <ignaurus13@netscape.net>
>>>>>>Subject: ADMT 3.0 Computer mig - Failed to change domain affiliation
>>>> when changing computer name via include file
>>>>>>Date: Fri, 23 Jun 2006 03:31:41 -0400
>>>>>>Lines: 26
>>>>>>X-Priority: 3
>>>>>>X-MSMail-Priority: Normal
>>>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2869
>>>>>>X-RFC2646: Format=Flowed; Original
>>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
>>>>>>Message-ID: <euOHXcplGHA.4196@TK2MSFTNGP03.phx.gbl>
>>>>>>Newsgroups: microsoft.public.windows.server.migration
>>>>>>NNTP-Posting-Host: 227-35.35-65.tampabay.res.rr.com 65.35.35.227
>>>>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
>>>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>>> microsoft.public.windows.server.migration:24198
>>>>>>X-Tomcat-NG: microsoft.public.windows.server.migration
>>>>>>
>>>>>>Hello,
>>>>>>
>>>>>>I am not able to change domain affiliation when I perform ADMT v3
>>>> computer
>>>>>>migration using an include file that has a comuter name change. If I
> dont
>>>>>>use an include file and dont change the computer name, it works fine
>>>>>>
>>>>>>
>>>>>>Here are the events from the agen log:
>>>>>>2006-06-23 03:25:47 Changed computer name to MIG-XP-CLIENT
>>>>>>2006-06-23 03:25:48 ERR3:7075 Failed to change domain affiliation,
>>>>>>hr=800708ad The user name could not be found.
>>>>>>2006-06-23 03:25:48 Changed computer name to XP-CLIENT
>>>>>>2006-06-23 03:25:48 Wrote result file
>>>>>>C:\WINDOWS\OnePointDomainAgent\000013_XP-CLIENT.result
>>>>>>
>>>>>>
>>>>>>Here is my include csv
>>>>>>SourceName,TargetRDN,TargetSAM
>>>>>>XP-CLIENT,"CN=MIG-XP-CLIENT",MIG-XP-CLIENT
>>>>>>
>>>>>>Any Suggestions?
>>>>>>
>>>>>>Thanks,
>>>>>>Iggy
>>>>>>
>>>>>>
>>>>>>
>>>>
>>>
>>>
>>>
>


Reply With Quote
  #6  
Old 27-06-2006
Vincent Xu [MSFT]
 
Posts: n/a
Re: ADMT 3.0 Computer mig - Failed to change domain affiliation when changing computer name via include file
Oops! I provided this suggestion in another thread. :)

Glad to see it works.


Best regards,

Vincent Xu
Microsoft Online Partner Support

======================================================
Get Secure! - www.microsoft.com/security
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties,and confers no rights.
======================================================



--------------------
>>Reply-To: "Ignaurus13" <ignaurus13@netscape.net>
>>From: "Ignaurus13" <ignaurus13@netscape.net>
>>References: <euOHXcplGHA.4196@TK2MSFTNGP03.phx.gbl>
<YaF5xVqlGHA.4164@TK2MSFTNGXA01.phx.gbl>
<#r7nv$slGHA.1208@TK2MSFTNGP02.phx.gbl>
<WOYVBZPmGHA.4948@TK2MSFTNGXA01.phx.gbl>
>>Subject: Re: ADMT 3.0 Computer mig - Failed to change domain affiliation
when changing computer name via include file
>>Date: Mon, 26 Jun 2006 15:07:11 -0400
>>Lines: 337
>>X-Priority: 3
>>X-MSMail-Priority: Normal
>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2869
>>X-RFC2646: Format=Flowed; Original
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
>>Message-ID: <eTQoFPVmGHA.4436@TK2MSFTNGP05.phx.gbl>
>>Newsgroups: microsoft.public.windows.server.migration
>>NNTP-Posting-Host: 227-35.35-65.tampabay.res.rr.com 65.35.35.227
>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
>>Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.migration:24241
>>X-Tomcat-NG: microsoft.public.windows.server.migration
>>
>>It was the include file,....targetsam for computers needed the $
>>
>>Thanks for your help.
>>
>>"Vincent Xu [MSFT]" <v-xuwen@online.microsoft.com> wrote in message
>>news:WOYVBZPmGHA.4948@TK2MSFTNGXA01.phx.gbl...
>>> Hi,
>>>
>>> I have following suggestions:
>>>
>>> 1. Make sure the "NTLM security support provider" service is started -
>>>
>>> 2. Check if the RPC service is started. If not, start it and then test
>>> the problem again.
>>> 3. Verify
>>>
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\SecurityService]"68"="netlogon.dl
>>> l"
>>> 4. Make sure that the Client for Microsoft Networks and "File and
Printer
>>> sharing for Microsoft Networks" are installed and enabled.
>>> 5. If that all checks out remove and reinstall "Client for Microsoft
>>> Networks"
>>>
>>> Thanks.
>>>
>>> Best regards,
>>>
>>> Vincent Xu
>>> Microsoft Online Partner Support
>>>
>>> ======================================================
>>> Get Secure! - www.microsoft.com/security
>>> ======================================================
>>> When responding to posts, please "Reply to Group" via your newsreader so
>>> that others
>>> may learn and benefit from this issue.
>>> ======================================================
>>> This posting is provided "AS IS" with no warranties,and confers no
rights.
>>> ======================================================
>>>
>>>
>>>
>>> --------------------
>>>>>Reply-To: "Ignaurus13" <ignaurus13@netscape.net>
>>>>>From: "Ignaurus13" <ignaurus13@netscape.net>
>>>>>References: <euOHXcplGHA.4196@TK2MSFTNGP03.phx.gbl>
>>> <YaF5xVqlGHA.4164@TK2MSFTNGXA01.phx.gbl>
>>>>>Subject: Re: ADMT 3.0 Computer mig - Failed to change domain
affiliation
>>> when changing computer name via include file
>>>>>Date: Fri, 23 Jun 2006 10:18:34 -0400
>>>>>Lines: 252
>>>>>X-Priority: 3
>>>>>X-MSMail-Priority: Normal
>>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2869
>>>>>X-RFC2646: Format=Flowed; Original
>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
>>>>>Message-ID: <#r7nv$slGHA.1208@TK2MSFTNGP02.phx.gbl>
>>>>>Newsgroups: microsoft.public.windows.server.migration
>>>>>NNTP-Posting-Host: 227-35.35-65.tampabay.res.rr.com 65.35.35.227
>>>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl
>>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>> microsoft.public.windows.server.migration:24205
>>>>>X-Tomcat-NG: microsoft.public.windows.server.migration
>>>>>
>>>>>Attached is the ADMT log.
>>>>>Sometimes I get:
>>>>>hr=800708ad The user name could not be found.
>>>>>
>>>>>others I get:
>>>>>hr=800706fb The security database on the server does not have a
>>> computer
>>>>>account for this workstation trust relationship.
>>>>>
>>>>>
>>>>>The lab consists of one subnet and no firewalls. T was originally
trying
>>> it
>>>>>in a lap that was a replica of production with the same results.
>>>>>
>>>>>
>>>>>Are their any other ADMT v3 logs on the client I should be looking for?
>>> Is
>>>>>there a DTCLOG.TXT? The ADMT log on mentions
>>>>>C:\WINDOWS\OnePointDomainAgent\000013_XP-CLIENT.result, but I can't
find
>>> it.
>>>>>
>>>>>Also, read a lot of the newgroups entries and it blames either DNS
sever
>>>>>used or ADMT v2 in test mode. ADMT V3 has not test mode, right?
>>>>>
>>>>>
>>>>>Also I have a one way trust that allows me to migrate users and
leverage
>>>>>SIDHistory. There isnt an prerequisite for a 2way trust in the ADMT
>>>>>documentation. Also, the documentation troubleshooting section states
to
>>>>>manually add the workstation to the domain if ADMT fails.
>>>>>
>>>>>
>>>>>[Settings Section]
>>>>>Task: Computer Migration (13)
>>>>>ADMT Console
>>>>> User: ADTARGET01\Administrator
>>>>> Computer: ADT01-MIG01.ADTARGET01.TEST (ADT01-MIG01)
>>>>> Domain: ADTARGET01.TEST (ADTARGET01)
>>>>> OS: Microsoft Windows Server 2003 5.2 (3790) Service
Pack
>>> 1
>>>>>Source Domain
>>>>> Name: ADSOURCE01.TEST (ADSOURCE01)
>>>>> DC: ADS01-DC01.ADSOURCE01.TEST (ADS01-DC01)
>>>>> OS: Windows Server 2003 5.2 (3790) Service Pack 1
>>>>> OU:
>>>>>Target Domain
>>>>> Name: ADTARGET01.TEST (ADTARGET01)
>>>>> DC: ADT01-DC01.ADTARGET01.TEST (ADT01-DC01)
>>>>> OS: Windows Server 2003 5.2 (3790) Service Pack 1
>>>>> OU: LDAP://ADTARGET01.TEST/CN=Computers,DC=ADTARGET01,DC=TEST
>>>>>Intra-Forest: No
>>>>>Translate Option: Replace
>>>>>Translate Files: Yes
>>>>>Translate Local Groups: Yes
>>>>>Translate Printers: Yes
>>>>>Translate Registry: Yes
>>>>>Translate Rights: Yes
>>>>>Translate Shares: Yes
>>>>>Translate User Profiles: Yes
>>>>>Conflict Option: Ignore
>>>>>Perform Pre-check Only: No
>>>>>
>>>>>[Object Migration Section]
>>>>>2006-06-23 03:19:03 Starting Account Replicator.
>>>>>2006-06-23 03:19:05 CN=MIG-XP-CLIENT - Created
>>>>>2006-06-23 03:19:09 - Set password for CN=MIG-XP-CLIENT.
>>>>>2006-06-23 03:19:09 Operation completed.
>>>>>
>>>>>[Agent Dispatch Section]
>>>>>2006-06-23 03:19:37 Read 3 accounts from the database that were
>>> previously
>>>>>migrated from the domain 'ADSOURCE01.TEST' to the domain
>>> 'ADTARGET01.TEST'.
>>>>>2006-06-23 03:19:38 Created account input file for remote agents:
>>>>>Accounts000013.txt
>>>>>2006-06-23 03:19:38 Installing agent on 1 servers
>>>>>
>>>>>2006-06-23 03:19:38 The Active Directory Migration Tool Agent will be
>>>>>installed on XP-Client.ADSOURCE01.TEST
>>>>>2006-06-23 03:20:45 ERR2:7863 Could not determine whether you have
>>>>>administrator privileges on the computer 'XP-Client.ADSOURCE01.TEST'.
The
>>>>>remote procedure call failed and did not execute. (0x800706bf)
>>>>>2006-06-23 03:24:05 Started job: XP-Client.ADSOURCE01.TEST
>>> 000013_XP-CLIENT
>>>>>{DEDF5D84-D6EF-4F48-AA0A-DC5C775F56FD}
>>>>>
>>>>>
>>>>>[Agent Summary Section]
>>>>>***** Start of Pre-check Summary *****
>>>>>Machine Name Status Message
>>>>>XP-Client.ADSOURCE01.TEST Passed
>>>>>***** End of Pre-check Summary *****
>>>>>***** Start of Agent Operation Summary *****
>>>>>For more information about operations that completed with warnings or
>>>>>errors, refer to the Agent Details section.
>>>>>Machine Name Status Message
>>>>>XP-Client.ADSOURCE01.TEST Completed with Errors
>>>>>***** End of Agent Operation Summary *****
>>>>>***** Start of Post-check Summary *****
>>>>>Machine Name Status Message
>>>>>XP-Client.ADSOURCE01.TEST Not Started
>>>>>***** End of Post-check Summary *****
>>>>>
>>>>>[Agent Details Section]
>>>>>
>>>>>Details for XP-Client.ADSOURCE01.TEST
>>>>>?Local Machine
>>>>> Computer: xp-client.ADSOURCE01.TEST (XP-CLIENT)
>>>>> Domain: ADSOURCE01.TEST (ADSOURCE01)
>>>>> OS: Microsoft Windows XP 5.1 (2600) Service Pack 2
>>>>>2006-06-23 03:24:03 Starting Security Translator.
>>>>>2006-06-23 03:24:03 Agent is running in local mode.
>>>>>2006-06-23 03:24:03 Read 3 accounts from
>>>>>C:\WINDOWS\OnePointDomainAgent\Accounts000013.txt
>>>>>2006-06-23 03:24:03 SecurityTranslation Files:Yes Shares:Yes
LGroups:Yes
>>>>>UserRights:Yes Printers:Yes Profiles:Yes RecycleBin:Yes
>>>>>TranslationMode:Replace ADSOURCE01.TEST ADTARGET01.TEST
>>>>>2006-06-23 03:24:03 Starting
>>>>>2006-06-23 03:24:03 Translating local machine.
>>>>>2006-06-23 03:24:04 Skipping A:\, rc=21 The device is not ready.
>>>>>2006-06-23 03:24:04 Processing C:\
>>>>>2006-06-23 03:24:41 Processing recycle bin files and folders on C:\.
>>>>>2006-06-23 03:24:41 Examining:
>>>>>S-1-5-21-1409082233-492894223-842925246-500
>>>>>2006-06-23 03:24:41 Examining:
>>> S-1-5-21-3161335116-2213386633-3635169926-500
>>>>>2006-06-23 03:24:41 Skipping D:\. D:\ is a CD-ROM drive.
>>>>>2006-06-23 03:24:41 Processing shares on local machine.
>>>>>2006-06-23 03:24:41 Processing printer security...
>>>>>2006-06-23 03:24:41 Translating local groups.
>>>>>2006-06-23 03:24:41 Translating user rights.
>>>>>2006-06-23 03:24:41 ADMT only performs user rights translation in
Append
>>>>>mode.
>>>>>2006-06-23 03:24:41 Translating security on registry keys.
>>>>>2006-06-23 03:25:38 ERR3:7330 Failed to open registry key
>>>>>HKEY_USERS\S-1-5-21-110014542-4250238548-2683485846-500\Software\Classe
s,
>>>>>rc=87 The parameter is incorrect.
>>>>>2006-06-23 03:25:38 This profile translation automatically switches
from
>>>>>replace mode to add mode if the user is currently logged on or if the
>>>>>profile is in use for other reasons. In order to disable the
switching,
>>> you
>>>>>need to set the registry
>>>>>HKLM\Software\Microsoft\ADMT\DisallowFallbackToAddInProfileTranslation
>>>>>(REG_DWORD) to 1 on the ADMT machine.
>>>>>2006-06-23 03:25:38 Translating user profile, source account='UserNo1',
>>>>>target account='UserNo1'
>>>>>2006-06-23 03:25:47 WRN1:7644 Unable to translate Microsoft Installer
>>>>>related registry keys from
>>> 'S-1-5-21-2750958425-3276501084-2773286462-1109'
>>>>>to 'S-1-5-21-2507220796-3330475737-2179702394-1113'. rc=3 The system
>>> cannot
>>>>>find the path specified.
>>>>>2006-06-23 03:25:47 ------Account Detail---------
>>>>>2006-06-23 03:25:47 The account detail section uses the following
format:
>>>>>AccountName(OwnerChanges, GroupChanges, DaclChanges, SaclChanges).
>>>>>2006-06-23 03:25:47 UserNo1 (0, 0, 30, 0)
>>>>>2006-06-23 03:25:47 -----------------------------
>>>>>2006-06-23 03:25:47 2 users, 1 groups
>>>>>2006-06-23 03:25:47 3 accounts selected. 3 resolved, 0 unresolved.
>>>>>2006-06-23 03:25:47 Examined Changed Unchanged
>>>>>2006-06-23 03:25:47 Files 24690 0 24690
>>>>>2006-06-23 03:25:47 Dirs 1729 0 1729
>>>>>2006-06-23 03:25:47 Shares 0 0 0
>>>>>2006-06-23 03:25:47 Members 9 0 9
>>>>>2006-06-23 03:25:47 User Rights 67 0 67
>>>>>2006-06-23 03:25:47 Exchange Objects 0 0
>>> 0
>>>>>2006-06-23 03:25:47 Containers 0 0 0
>>>>>2006-06-23 03:25:47 DACLs 179702 15 179687
>>>>>2006-06-23 03:25:47 SACLs 0 0 0
>>>>>2006-06-23 03:25:47 Examined Changed No Target
>>> Not
>>>>>Selected Unknown
>>>>>2006-06-23 03:25:47 Owners 179705 0 179705
>>>>>0 0
>>>>>2006-06-23 03:25:47 Groups 179705 0 179705
>>>>>0 0
>>>>>2006-06-23 03:25:47 DACEs 1464726 30 1464696
>>>>>1464696 0
>>>>>2006-06-23 03:25:47 SACEs 0 0 0
>>>>>0 0
>>>>>2006-06-23 03:25:47 Changed computer name to MIG-XP-CLIENT
>>>>>2006-06-23 03:25:48 ERR3:7075 Failed to change domain affiliation,
>>>>>hr=800708ad The user name could not be found.
>>>>>2006-06-23 03:25:48 Changed computer name to XP-CLIENT
>>>>>2006-06-23 03:25:48 Wrote result file
>>>>>C:\WINDOWS\OnePointDomainAgent\000013_XP-CLIENT.result
>>>>>2006-06-23 03:25:48 Operation completed.
>>>>>
>>>>>
>>>>>
>>>>>"Vincent Xu [MSFT]" <v-xuwen@online.microsoft.com> wrote in message
>>>>>news:YaF5xVqlGHA.4164@TK2MSFTNGXA01.phx.gbl...
>>>>>> Hi,
>>>>>>
>>>>>> Would you please attach the entire admt log?
>>>>>>
>>>>>> Thanks.
>>>>>>
>>>>>>
>>>>>> Best regards,
>>>>>>
>>>>>> Vincent Xu
>>>>>> Microsoft Online Partner Support
>>>>>>
>>>>>> ======================================================
>>>>>> Get Secure! - www.microsoft.com/security
>>>>>> ======================================================
>>>>>> When responding to posts, please "Reply to Group" via your
newsreader
>>>>>> so
>>>>>> that others
>>>>>> may learn and benefit from this issue.
>>>>>> ======================================================
>>>>>> This posting is provided "AS IS" with no warranties,and confers no
>>> rights.
>>>>>> ======================================================
>>>>>>
>>>>>>
>>>>>>
>>>>>> --------------------
>>>>>>>>Reply-To: "Ignaurus13" <ignaurus13@netscape.net>
>>>>>>>>From: "Ignaurus13" <ignaurus13@netscape.net>
>>>>>>>>Subject: ADMT 3.0 Computer mig - Failed to change domain
affiliation
>>>>>> when changing computer name via include file
>>>>>>>>Date: Fri, 23 Jun 2006 03:31:41 -0400
>>>>>>>>Lines: 26
>>>>>>>>X-Priority: 3
>>>>>>>>X-MSMail-Priority: Normal
>>>>>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2869
>>>>>>>>X-RFC2646: Format=Flowed; Original
>>>>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
>>>>>>>>Message-ID: <euOHXcplGHA.4196@TK2MSFTNGP03.phx.gbl>
>>>>>>>>Newsgroups: microsoft.public.windows.server.migration
>>>>>>>>NNTP-Posting-Host: 227-35.35-65.tampabay.res.rr.com 65.35.35.227
>>>>>>>>Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
>>>>>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>>>>> microsoft.public.windows.server.migration:24198
>>>>>>>>X-Tomcat-NG: microsoft.public.windows.server.migration
>>>>>>>>
>>>>>>>>Hello,
>>>>>>>>
>>>>>>>>I am not able to change domain affiliation when I perform ADMT v3
>>>>>> computer
>>>>>>>>migration using an include file that has a comuter name change. If I
>>> dont
>>>>>>>>use an include file and dont change the computer name, it works fine
>>>>>>>>
>>>>>>>>
>>>>>>>>Here are the events from the agen log:
>>>>>>>>2006-06-23 03:25:47 Changed computer name to MIG-XP-CLIENT
>>>>>>>>2006-06-23 03:25:48 ERR3:7075 Failed to change domain affiliation,
>>>>>>>>hr=800708ad The user name could not be found.
>>>>>>>>2006-06-23 03:25:48 Changed computer name to XP-CLIENT
>>>>>>>>2006-06-23 03:25:48 Wrote result file
>>>>>>>>C:\WINDOWS\OnePointDomainAgent\000013_XP-CLIENT.result
>>>>>>>>
>>>>>>>>
>>>>>>>>Here is my include csv
>>>>>>>>SourceName,TargetRDN,TargetSAM
>>>>>>>>XP-CLIENT,"CN=MIG-XP-CLIENT",MIG-XP-CLIENT
>>>>>>>>
>>>>>>>>Any Suggestions?
>>>>>>>>
>>>>>>>>Thanks,
>>>>>>>>Iggy
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>>
>>>
>>
>>
>>

Reply With Quote
Reply

  TechArena Community > Technical Support > Computer Help > Windows Server > Windows Server Help

« Installing Print Management Console on Win2003    MSDTC Cluster deployment(request for documentation): What am I doing wrong? »

Thread Tools Search this Thread
Search this Thread:

Advanced Search


Similar Threads for: "ADMT 3.0 Computer mig - Failed to change domain affiliation when changing computer name via include file"
Thread Thread Starter Forum Replies Last Post
Change computer name field property to the mounted computer name JessGuynn Operating Systems 1 4 Weeks Ago 12:23 PM
Changing the primary domain DNS name of this computer Sawyer Active Directory 6 12-04-2011 08:51 PM
how to change default printer on domain computer Rihanna Hardware Peripherals 3 22-11-2010 10:20 PM
ADMT - Migration Profile and Computer Luiz Active Directory 4 26-08-2009 02:52 AM
ADMT 3.0 computer migration: Not working when rename with include file Franz Schenk Windows Server Help 6 26-10-2007 12:15 PM


All times are GMT +5.5. The time now is 07:40 PM.

Contact Us - TechArena - Privacy Statement -