locked
ADMT error RRS feed

  • 問題

  • Hello

    I'm testing ADMT in two Windows 2003 R2 (one is primary domain and one is child domain), when use ADMT to migrate user in child domain has following error:

    2010-05-23 07:19:31
    2010-05-23 07:19:31 Active Directory Migration Tool, Starting...
    2010-05-23 07:19:31 Starting Account Replicator.
    2010-05-23 07:19:31 Account MigrationWriteChanges:No TEST ABC CopyUsers:Yes CopyGlobalGroups:Yes CopyLocalGroups:Yes CopyComputers:No StrongPwd:All
    2010-05-23 07:19:31 ERR2:7422 Failed to move object CN=pri01, hr=80070005  Access is denied.
    2010-05-23 07:19:31 ERR2:7422 Failed to move object CN=pri, hr=80070005  Access is denied.
    2010-05-23 07:19:31 Operation completed.

    Thanks !

    2010年5月23日 上午 04:06

所有回覆

  • The following error message from ADMT 3.0:


    [Settings Section]
    Task: User Migration (3)
    ADMT Console
        User:       ABC\Administrator
        Computer:   secondary.abc.test.local (SECONDARY)
            Domain:     abc.test.local (ABC)
            OS:         Microsoft Windows Server 2003 5.2 (3790) Service Pack 2
    Source Domain
        Name:   test.local (TEST)
        DC:     primary.test.local (PRIMARY)
            OS:     Windows Server 2003 5.2 (3790) Service Pack 2
        OU:    
    Target Domain
        Name:   abc.test.local (ABC)
        DC:     secondary.abc.test.local (SECONDARY)
            OS:     Windows Server 2003 5.2 (3790) Service Pack 2
        OU:     LDAP://abc.test.local/OU=test,DC=abc,DC=test,DC=local
    Intra-Forest: Yes
    Update Rights: Yes
    Translate Roaming Profiles: No
    Fix group membership: Yes
    Conflict Option: Ignore
    Source Disable Option: Leave source account
    Source Expiration: Do not expire source account
    Target Disable Option: Set target same as source
    Migrate groups: Yes
    Update Migrated Objects: Yes
    Migrate service accounts: Yes

    [Object Migration Section]
    2010-05-23 11:55:50 Starting Account Replicator.
    2010-05-23 11:55:50 Removing CN=pri01 (LDAP://primary.test.local/CN=pri01,OU=pri,DC=test,DC=local) from the global groups it is a member of :
    2010-05-23 11:55:50 ERR2:7424  Failed to remove LDAP://primary.test.local/CN=pri01,OU=pri,DC=test,DC=local from LDAP://primary.test.local/CN=pri,OU=pri,DC=test,DC=local, hr=77bd8ef2  Access is denied.
    2010-05-23 11:55:50 ERR2:7422 Failed to move source object 'CN=pri01'. hr=0x80070005  Access is denied.
    2010-05-23 11:55:50 Updated user rights for CN=pri01
    2010-05-23 11:55:50 Removing CN=pri (LDAP://primary.test.local/CN=pri,OU=pri,DC=test,DC=local) from the global groups it is a member of :
    2010-05-23 11:55:50 ERR2:7414 Failed to change group type for pri to a universal group. rc = 80070005  Access is denied.
    2010-05-23 11:55:50 ERR2:7418 Could not change group type for  from Universal back to its original type. It may still contain members that are outside of the target domain. rc = 80070005  Access is denied.
    2010-05-23 11:55:50 Operation completed.

    2010年5月23日 上午 05:34