Using ADMT 3.0

Hi,
I need to migrate 100 user accounts between two different Windows 2003
domains.
The domains belong to two different Windows 2003 Forest.
The source domain is managed by an outsourcer and we have only some
delegated task, such as create and manage domain user accounts and some group
accounts.

First of all, I created a lab environment.
Then I create two Windows 2003 forests that have each one two domains.
I do the following task:
1) create an external trust (two-way) between the two domains;
2) install the ADMT 3.0 on one domain controller of the destination domain;
3) create few user accounts in the source domain;
4) add the new user to the membership of certain global and domain local
groups in the source
domain. These groups are authorized to access to some file server that are
member server
in the source domain;
5) launch the ADMT 3.0 console in the domain controller of the destination
domain
6) choose the user accounts that I create on the 3rd step to migrate to the
destination domain.

Here begin the problems:

7) when I choose the "Migrate passwords" option it appear the following
message:
"Unable to establish a session with the password export server. Access is
denied."
So I select the "generate complex password for these users" option, and in
the next step
I select the following selections:
- Target same as source
- Migrate user SIDs to target domain

When I make the above selections, I receive the message:
"Could not verify auditing and TcpipClientSupport on domains. Will not be
able to migrate Sids. Access denied"
8) When I confirm the message I be able to continue but without the "Migrate
user SIDs to target domain" option selected.
Now, in the User Options screen of the ADMT User account Migration wizard, I
only select the "update user rights" and
deselect the "fix user's group memberships".
9) For the last step, I accepted the default option.

Results: I migrate the user accounts without the user memberships. The user
migrated are only
domain users of the domain destination.

Other Questions:
1) Do I need to launch the "ADMT User account Migration wizard" with a user
account
that have the correct user rights in the source domain?
2) How can I migrate the user password?
3) May I have to do other configuration in both domains?
4) Can I migrate only the user accounts from the source to the destination
domain with the right
user memberships, but leaving the account groups in the source domain?

Thank you very much for the help that can you give me and sorry for my bad
english.

Fr.

Hello framm07,

In this guide for version3.1 you have troubleshooting section:
http://www.microsoft.com/downloads/d...displaylang=en

Search for you error:
Could not verify auditing and TcpipClientSupport

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Could not verify auditing and TcpipClientSupport on domains
>

Hi Meinolf,
thank you for your quickly reply.
In other words I must have a user that have Domain Admins memberships in the
source domain. In my case, I have to ask the outsourcer to add a user account
of the destination domain to the Domain Admins of the source domain.

And what about the other question, in particular:
- How can I migrate the user password?
- Can I migrate only the user accounts from the source to the destination
domain with the right user memberships, but leaving the account groups in
the source domain?

Thanks again for your help.
Fr.



"Meinolf Weber" wrote:

> Hello framm07,
>
> In this guide for version3.1 you have troubleshooting section:
> http://www.microsoft.com/downloads/d...displaylang=en
>
> Search for you error:
> Could not verify auditing and TcpipClientSupport
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Could not verify auditing and TcpipClientSupport on domains
> >
>
>
>