?
Solved

Importing AD objects into Lab Domain Controller -Windows 2003 Standard server

Posted on 2005-03-31
6
Medium Priority
?
1,145 Views
Last Modified: 2009-12-16
Hi,

I have created a Windows 2003 Standard server domain controller in our Lab environment to mirror our Windows 2003 Standard server Production environment.  I created the domain controller from scratch using the similar steps and procedures for Production.  So, I'm trying to use the CSVDE utility to export all of the AD objects from the Production server and using CSVDE, import them into my Lab environment.  However, I'm getting the following error message on Line 3 which contains our OU and DC names:

Add error on line 3: Unwilling To Perform
The server side error is "Illegal modify operation. Some aspect of the modification is not permitted."

I've tried LDIFDE, checking the format of the .csv, changing the registry to allow schema updates, etc.  with no luck.  As an FYI, the servers are completely different.

Thanks in advance for your help.
0
Comment
Question by:timboc
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 18

Expert Comment

by:luv2smile
ID: 13672223
Have you thought about using the ADMT (active directory migration tool)?

http://www.microsoft.com/downloads/details.aspx?FamilyID=788975b1-5849-4707-9817-8c9773c25c6c&displaylang=en
0
 

Author Comment

by:timboc
ID: 13672563
Hi luv2smile,

Thanks for the quick response.  The Lab environment is not on the same network.  It is completely isolated.  Is there a safe way to create a backup domain controller, take it offline and place it in the Lab environment.  Then rename it using the same Production server name.

Ultimately, all I'm trying to accomplish is the exact same setup for both the Production and Lab environments even though the servers are different models on different networks.

Thanks.
0
 
LVL 18

Expert Comment

by:luv2smile
ID: 13673170
Can you create a temporary trust between the two domains and then you could use the ADMT?
0
Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

 

Author Comment

by:timboc
ID: 13673471
Hi luv2smile,

I really do not want to interfere with Production at all.  This is a DRA type situation where the existing Production server may not be available.

Thanks.
0
 
LVL 18

Accepted Solution

by:
luv2smile earned 1000 total points
ID: 13674937
Can you post the commands you're using for csvde?
0
 

Author Comment

by:timboc
ID: 13675121
For Exporting:

E:\>csvde -f ad.csv

For Importing:

E:\>csvde -i -v -k -j e:\ -f ad.csv

And the error I'm getting on Line 3  which contains our OU and DC names:

Add error on line 3: Unwilling To Perform
The server side error is "Illegal modify operation. Some aspect of the modification is not permitted."

Thanks.


0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question