ADMT v3 password migration Unable to establish a session with the password server. Either ther currently logged on user...
Posted on 2007-11-28
Trying to configure SID migration from the source AD 2000 DC (Child Domain) to the target AD 2003 DC (Root Domain)
- I have setup the trusts and I'm able to verify the trusts bothways
-I can ping the DC's eachway with the NETBios name and FQDN
-I installed PES on the Source 2000 DC
-I was able to create the PES key using "admt key /option:create /sourcedomain: SourceDomain
During the User account Migration Wizard I get this error..
Unable to establish a session with the password export server. Either the currently logged on user does not have sufficient permissions to call the Password Export Server or the account that the Password Export Server Service is runing under (PES is using the admin account from the Target domain) does not have sufficent permissions on the target domain controller. Verify that the logged on user is a member of the Administrator group in the source domain and that the Password Export Service account can change password of user accounts in the target domain.
So, how does one make an admin account in the Target Domain a member of the Domain Admins group of the source domain or vise versa? I don't see an option of adding accounts from these two trusted domains. Is it possibly due to the source domain being a child of a root forest? Does the trusts have to be between the two root domains?