ADMT Computer Migration Failures

please bear longevity; wanted give many details possible.  my goal interforest migration working in test environment.  source.com domain has windows server 2003 dc , windows 2008 member server exchange 2007.  target.com domain has windows server 2008 dc (2003 functional level) , windows 2008 member server exchange 2007.  my trust between 2 forests validates , servers , workstations involved can ping each other.  initially had dc in target.com domain windows server 2003 dc , using admt v3.0 moved on 2008 , admt v3.1 in hopes solve computer migration problem.

 

in both scenarios have been able migrate users , groups move mailboxes between 2 exchange servers.  my hang has continually been migrating computers.  all workstations running vista.  in 2003 2003 admt v3.0 environment process way through running agent on computer in source domain running post check , automatically rebooting computer.  after reboot login screen have old domain choosing switch user default new domain.  the problem login attempts greeted red x , “the security database on server not have computer account workstation trust relationship.”  logging in locally, leaving domain , rejoining worked wasn't solution.  i couldn’t figure out moved on , upgraded dc server 2008 in target.com domain , installed admt v3.1.

 

users , groups still migrate computer migration failing during agent part.  when agent operation performed comes “completed errors” message , post-check not attempted.  at bottom of agent log get:

 

err3:7075 failed change domain affiliation, hr=80070005   access denied.

 

my permissions follows:  i running admt on target dc , logging in user source domain (i have tried domain admin in target domain equivalent permissions same results).  the source user domain admin.  there redundancy here local administrator group on source workstation has domain admin group source , target domains, , domain admin users have been using both domains.  the builtin administrators group on source dc , target dc have same setup, domain admin group both domains , 2 domain admin users.

 

one step not clear delegating permission source user on target domain’s ou’s.  i have been choosing “create custom task delegate” , full control checks boxes permissions.  i have had multiple ways @ point have ip address on workstation manually set dns ips of dc’s in each domain.

 

please let me know if can provide more details , appreciate can offer.

 

thanks,

 

matt

 

hi,

 

do have other dcs in target domain? if so, please ensure modify group policy on them. in addition, group policy setting reflected in following registry on target domain dcs:

 

hklm\system\currentcontrolset\services\lanmanserver\parameters\nullsessionpipes"

 

please open 'regedit' on target dcs, navigate registry , make sure value includes following items:

 
"comnap, comnode, sql\query, spoolss, llsrpc, browser, netlogon, lsarpc, samr".

 

after doing these, if issue still continues, please send error log of computer migration me via tfwst@microsoft.com following 2 lines in email body:

 

admt computer migration failures

morgan

 

thanks.

 

Windows Server  >  Migration