The following error message from ADMT 3.0:
[Settings Section]
Task: User Migration (3)
ADMT Console
User: ABC\Administrator
Computer: secondary.abc.test.local (SECONDARY)
Domain: abc.test.local (ABC)
OS: Microsoft Windows Server 2003 5.2 (3790) Service Pack 2
Source Domain
Name: test.local (TEST)
DC: primary.test.local (PRIMARY)
OS: Windows Server 2003 5.2 (3790) Service Pack 2
OU:
Target Domain
Name: abc.test.local (ABC)
DC: secondary.abc.test.local (SECONDARY)
OS: Windows Server 2003 5.2 (3790) Service Pack 2
OU: LDAP://abc.test.local/OU=test,DC=abc,DC=test,DC=local
Intra-Forest: Yes
Update Rights: Yes
Translate Roaming Profiles: No
Fix group membership: Yes
Conflict Option: Ignore
Source Disable Option: Leave source account
Source Expiration: Do not expire source account
Target Disable Option: Set target same as source
Migrate groups: Yes
Update Migrated Objects: Yes
Migrate service accounts: Yes
[Object Migration Section]
2010-05-23 11:55:50 Starting Account Replicator.
2010-05-23 11:55:50 Removing CN=pri01 (LDAP://primary.test.local/CN=pri01,OU=pri,DC=test,DC=local) from the global groups it is a member of :
2010-05-23 11:55:50 ERR2:7424 Failed to remove LDAP://primary.test.local/CN=pri01,OU=pri,DC=test,DC=local from
LDAP://primary.test.local/CN=pri,OU=pri,DC=test,DC=local, hr=77bd8ef2 Access is denied.
2010-05-23 11:55:50 ERR2:7422 Failed to move source object 'CN=pri01'. hr=0x80070005 Access is denied.
2010-05-23 11:55:50 Updated user rights for CN=pri01
2010-05-23 11:55:50 Removing CN=pri (LDAP://primary.test.local/CN=pri,OU=pri,DC=test,DC=local) from the global groups it is a member of :
2010-05-23 11:55:50 ERR2:7414 Failed to change group type for pri to a universal group. rc = 80070005 Access is denied.
2010-05-23 11:55:50 ERR2:7418 Could not change group type for from Universal back to its original type. It may still contain members that are outside of the target domain. rc = 80070005 Access is denied.
2010-05-23 11:55:50 Operation completed.