ADMT V3 access denied for pasword migration with PES. (win2k3)

Posted on 2007-08-08
Last Modified: 2008-05-31
I am trying to migrate my users from our old domain to a new one. The reason I want to do this rather then setup the new domain from scratch is time basicly. I can bring the user objects accross fine but when I try and import the passwords I get an access denied error.

I have started the PES service on the source DC and I have the two way trust in place and functioning. I have also made the required registry entries to the source DC. After serveral reboots, I am still getting the access denied message.

Much thanks in advance!
Question by:bhnmi
    LVL 8

    Accepted Solution

    I would rather migrate as well.  Is the PES service running with a source account that has admin rights on both domains?  Where are you getting the access denied in the log during the migration?
    LVL 25

    Assisted Solution

    by:Ron M
    domain password policies derived from group policy, must match from the source to destination domains.  If you have 8 character minimum on the destination domain, and your users all have 4 and 5 character passwords it won't work.  Test this by creating a user account, choosing a password that conforms to the policy on the new domain....try to migrate it.

    Also, you should be logging into the DC on the NEW domain to run admt 3,using the admt account you setup,...which should also be a member of administrators in the old domain....
    LVL 10

    Assisted Solution

    I've been testing this ready for a domain migration.  I'm running the PES service using the credentials of an account in the TARGET domain.  The account is a member of the domain admins group in the target domain, and the target domain/domain admins group is a member of the administrators group on the source domain controller.

    I've disabled the complex password requirement in the target domain, because I suspect most of the passwords in the source domain wouldn't meet the requirements, in which case the password wouldn't be migrated.
    LVL 12

    Author Comment

    I installed ADMT as the administrator on both domains, I did not asign an account to ADMT. I added the administrator from the the new domain to the admin group of the old domain and now I am getting acces. I am going to test it a couple of times.
    LVL 12

    Author Comment

    Got, I had to give the user in target domain admin rights in source. Duh!! slap myself for that one! thanks a bunch!

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Enterprise networks where VoIP phones have been deployed frequently use port configurations that allow both a computer and an IP phone to be plugged into the same switch port but use different VLANs. On Cisco equipment I'm referring to the "native V…
    We recently endured a series of broadcast storms that caused our ISP to shut us down for brief periods of time. After going through a multitude of tests, we determined that the issue was related to Intel NIC drivers on some new HP desktop computers …
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    12 Experts available now in Live!

    Get 1:1 Help Now