asked on

Password Migration encryption key

I am trying to do an AD migration to another domain. I am trying to create the encryption key for the password migration. I am using ADMT v3. Here is what I have typed that keeps getting errors.

at command line:

admt key /option:create/sourcedomain:a.local/keyfile:c:\\migration/keypassword:xxxxx

can someone please tell me why this is not working and what I need to do to correct this problem?

debuggerau

need more info:

What is your domain 2000, 2003 or 2008?
Have you installed the PE service yet?
Have you checked that ADMT 3 is the correct version for your domain?
What do you find in the event logs, but more importantly, what is the error your experiencing?

Alex Bolla

ASKER

it is a 2003 domain...I am trying to install the PE service, but I can't create the encryption key...yes v3 is what I need...never gets to the event logs b/c I cant get the key set. I get an error in the command line that says the syntax is wrong, but I am doing it exactly like the microsoft manual says...

ASKER CERTIFIED SOLUTION

debuggerau

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

imjohnwu

Install the ADMT v3.1 on a member server on the Target Domain. After running the command, copy the encryption key file to a Domain Controller on the Source Domain and where the PES program called "pwdmig" is executed from.

Note the spaces are replace with "^"

C:\Windows\system32>admt^key^/option:create^/sourcedomain:lc^/keyfile:"c:\key\pes_encryption_key"^/keypassword:Pa$$w0rd

The password export server encryption key for domain 'lc' was successfully creat
ed and saved to 'c:\key\pes_encryption_key.pes'.