[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now


sbs 2011 migration tool fails

Posted on 2011-10-28
Medium Priority
Last Modified: 2013-12-02
We are in the midst of a migration from SBS 2003 to SBS 2011. The Migration Preparation Tool when run on the SBS 2003 box completes the forest upgrade, schema upgrade, licensing, configure exchange for migration, etc... but FAILS on the MBCA scan and will not continue.

The problem in the log states that "Required registry access is not allowed" from the BPAEngine. When trying to run the MBCA on its own, it gives the same error in an alert box and cannot procede.

What has been done so far...
- ALL prerequisites have been installed (Powershell 2.0, MBCA, etc.)
- SBS 2003 is completely up to date with service packs and windows updates
- Remote Registry and WS-Management services are started
- This is NOT the prerequisite problem described here http://support.microsoft.com/kb/2542156

Help is much appreciated...we are dead in the water at this point. No KB articles appear to be found that match this exactly.
Question by:rick-businesspchelp
LVL 60

Expert Comment

by:Cliff Galiher
ID: 37048287
And you are running the prep tool as a user that is a member of all the required Administrators groups (Enterprise admins, domain admins, etc)?


Author Comment

ID: 37048654
@cliff - Yes indeed. It is the original administrator account.
LVL 13

Expert Comment

ID: 37048671
I agree with cliff the first place to start is look at the user account plivilages.
I just finished my second SBS 2011 migration and must say they can be a bugger. For many years now we only use the swing migration method as it has saved our bacon many times. After the last migration, which took three tries due to issues on the original DC, I would recommend you look into this method. With this method you do most of the migration offline so the original machine is running until you have a good migration and are ready to move exchange and data files over. If it blows up you just start over. Nothing lost.

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

LVL 15

Accepted Solution

jrhelgeson earned 2000 total points
ID: 37048913
Download the Sysinternals suite:

You'll need the PROCMON utility...
Run procmon while you are running the MBCA tool. - This tool will show you every single registry and disk access/read/write.

Stop the capture once you get your error message, then work back in the logs to see the registry setting where the result is "Access Denied"

Then launch the registry editor, and browse to that registry setting, then grant administrator full access rights to those registry settings.

Author Comment

ID: 37064112
@jrhelgeson - This worked perfect! Turns out there was a single registry keep for MBCA that it didn't have access to... HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\BaselineConfigurationAnalyzer

Ironically, it was its own key that it didn't have permission to. Thanks!

@murgroup - I looked at swing migration back when SBS 2008 was released and didn't do much with it. I think I shall revisit though given the troubles you've experienced. Thanks for the feedback.
LVL 15

Expert Comment

ID: 37065781
Awesome!  Glad I could help.

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A quick step-by-step overview of installing and configuring Carbonite Server Backup.
Know what services you can and cannot, should and should not combine on your server.
We’ve all felt that sense of false security before—locking down external access to a database or component and feeling like we’ve done all we need to do to secure company data. But that feeling is fleeting. Attacks these days can happen in many w…
Is your data getting by on basic protection measures? In today’s climate of debilitating malware and ransomware—like WannaCry—that may not be enough. You need to establish more than basics, like a recovery plan that protects both data and endpoints.…

873 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question