asked on

Importing AD objects into Lab Domain Controller -Windows 2003 Standard server

Hi,

I have created a Windows 2003 Standard server domain controller in our Lab environment to mirror our Windows 2003 Standard server Production environment. I created the domain controller from scratch using the similar steps and procedures for Production. So, I'm trying to use the CSVDE utility to export all of the AD objects from the Production server and using CSVDE, import them into my Lab environment. However, I'm getting the following error message on Line 3 which contains our OU and DC names:

Add error on line 3: Unwilling To Perform
The server side error is "Illegal modify operation. Some aspect of the modification is not permitted."

I've tried LDIFDE, checking the format of the .csv, changing the registry to allow schema updates, etc. with no luck. As an FYI, the servers are completely different.

Thanks in advance for your help.

luv2smile

Have you thought about using the ADMT (active directory migration tool)?

http://www.microsoft.com/downloads/details.aspx?FamilyID=788975b1-5849-4707-9817-8c9773c25c6c&displaylang=en

timboc

ASKER

Hi luv2smile,

Thanks for the quick response. The Lab environment is not on the same network. It is completely isolated. Is there a safe way to create a backup domain controller, take it offline and place it in the Lab environment. Then rename it using the same Production server name.

Ultimately, all I'm trying to accomplish is the exact same setup for both the Production and Lab environments even though the servers are different models on different networks.

Thanks.

luv2smile

Can you create a temporary trust between the two domains and then you could use the ADMT?

timboc

ASKER

Hi luv2smile,

I really do not want to interfere with Production at all. This is a DRA type situation where the existing Production server may not be available.

Thanks.

ASKER CERTIFIED SOLUTION

luv2smile

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

timboc

ASKER

For Exporting:

E:\>csvde -f ad.csv

For Importing:

E:\>csvde -i -v -k -j e:\ -f ad.csv

And the error I'm getting on Line 3 which contains our OU and DC names:

Add error on line 3: Unwilling To Perform
The server side error is "Illegal modify operation. Some aspect of the modification is not permitted."

Thanks.