• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2366
  • Last Modified:

Moving user from child domain to parent domain

We are trying to move a user from a child domain ca.domain.com to the parent domain.com.
I was using the Active directory Migration tool and it seemed pretty straight forward until we got an error.

The error we got was
2015-02-02 13:54:27 ERR2:7422 Failed to move source object 'CN=John Doe'. hr=0x8007208c  The operation cannot be performed because child objects exist. This operation can only be performed on a leaf object.

Looking online it looks like this is because the user has an active sync device connected and we need to use ADSI edit to delete this before migrating.

The question I have is if we delete this active sync object from AD will the user have to setup email on their phone again or what can we do to make this seamless to the end-user?

Thanks
0
fixitben
Asked:
fixitben
  • 3
  • 2
1 Solution
 
Mohammed KhawajaCommented:
You would need to setup email on the phone again.  Another way around this would be to use a MDM solution such as XenMobil, AirWatch, etc. where you can provision the devices remotely.
0
 
Will SzymkowskiSenior Solution ArchitectCommented:
You do not need to use ADSIEdit to remove leaf objects. Simply Open Active Direcotry Users and Computers> Click View> select User,Contact, Groups and Computers as Containers. From there find the user expand the object and remove it from there.

This would be a safer way to remove the leaf object.

Also you will have to re-add the phone once this is removed.

Will.
0
 
fixitbenAuthor Commented:
What do you mean by add the phone? Remove the account from the phone and set it up again? Would it be better to removed the account from the phone first then delete the leaf then add the account back on the phone.
0
Configuration Guide and Best Practices

Read the guide to learn how to orchestrate Data ONTAP, create application-consistent backups and enable fast recovery from NetApp storage snapshots. Version 9.5 also contains performance and scalability enhancements to meet the needs of the largest enterprise environments.

 
Will SzymkowskiSenior Solution ArchitectCommented:
Removing the account from the phone first would be the easier approach. This way you can ensure that when you remove the entry from Active Directory it will not mess up the phone and give you problems trying to remove the account, without wiping it.

Will.
0
 
fixitbenAuthor Commented:
Why can't you move the lead object?
0
 
fixitbenAuthor Commented:
Thanks for your help. I was able to remove the account from the phone then delete the leaf object and it worked great. One thing I didn't realize is you have to delete the exchange folder in AD not just the synced devices. If you removed the devices and leave the folder behind they are in it won't work.
0

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now