| Author |
Message |
TagaR
Guest
|
Posted:
Mon Jan 10, 2005 11:57 am Post subject:
Password Migration Problem |
|
|
I tried password migration with an export server following KB 832221. I also
follow the KB 322981 except the line;
-Read permissions on the Pre-Windows 2000 Compatible Access group should be
set to CN=Server,CN=System,DC={targetdom},DC={tld}.
I don't know how to do this.
My error is : Unable to establish a session with password export server.
Access is denied
Thanks
TagaR |
|
| Back to top |
|
 |
Rebecca Chen [MSFT]
Guest
|
Posted:
Mon Jan 10, 2005 7:36 pm Post subject:
RE: Password Migration Problem |
|
|
Hi Taga,
"-Read permissions on the Pre-Windows 2000 Compatible Access group should
be
set to CN=Server,CN=System,DC={targetdom},DC={tld}" mean grant read
permission to Pre-Windows 2000 Compatible Access group so that Pre-Windows
2000 Compatible Access group can read system object. Please use the
following steps:
1. Opan ADUC by keying "dsa.msc" in run box.
2. Cclick View menu to choose Advanced Feature.
3. Expand System node to see if there is a node called Server. If Server
node exists, please right click Server and choose Propertes, grant Read
permission to Pre-Windows 2000 Compatible Access group; if Server node
cannot be found, please open System properties and grant read permission to
Pre-Windows 2000 Compatible Access group/
NOTE: You need to logon as domain administrator.
HTH!
Best regards,
Rebecca Chen
MCSE2000 MCDBA CCNA
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights. |
|
| Back to top |
|
 |
TagaR
Guest
|
Posted:
Tue Jan 11, 2005 7:45 am Post subject:
RE: Password Migration Problem |
|
|
Hi Rebecca,
I checked the permission and Read permission is already there and I'm still
getting the same error message. I rebooted both controllers and no effect.
Thanks
TagaR
"Rebecca Chen [MSFT]" wrote:
| Quote: | Hi Taga,
"-Read permissions on the Pre-Windows 2000 Compatible Access group should
be
set to CN=Server,CN=System,DC={targetdom},DC={tld}" mean grant read
permission to Pre-Windows 2000 Compatible Access group so that Pre-Windows
2000 Compatible Access group can read system object. Please use the
following steps:
1. Opan ADUC by keying "dsa.msc" in run box.
2. Cclick View menu to choose Advanced Feature.
3. Expand System node to see if there is a node called Server. If Server
node exists, please right click Server and choose Propertes, grant Read
permission to Pre-Windows 2000 Compatible Access group; if Server node
cannot be found, please open System properties and grant read permission to
Pre-Windows 2000 Compatible Access group/
NOTE: You need to logon as domain administrator.
HTH!
Best regards,
Rebecca Chen
MCSE2000 MCDBA CCNA
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
|
|
|
| Back to top |
|
 |
TagaR
Guest
|
Posted:
Tue Jan 11, 2005 8:19 am Post subject:
RE: Password Migration Problem |
|
|
I resolved the problem. I added the Domain Admins group of the target domain
to the Administrators local group of the source domain.
TagaR
"TagaR" wrote:
| Quote: | Hi Rebecca,
I checked the permission and Read permission is already there and I'm still
getting the same error message. I rebooted both controllers and no effect.
Thanks
TagaR
"Rebecca Chen [MSFT]" wrote:
Hi Taga,
"-Read permissions on the Pre-Windows 2000 Compatible Access group should
be
set to CN=Server,CN=System,DC={targetdom},DC={tld}" mean grant read
permission to Pre-Windows 2000 Compatible Access group so that Pre-Windows
2000 Compatible Access group can read system object. Please use the
following steps:
1. Opan ADUC by keying "dsa.msc" in run box.
2. Cclick View menu to choose Advanced Feature.
3. Expand System node to see if there is a node called Server. If Server
node exists, please right click Server and choose Propertes, grant Read
permission to Pre-Windows 2000 Compatible Access group; if Server node
cannot be found, please open System properties and grant read permission to
Pre-Windows 2000 Compatible Access group/
NOTE: You need to logon as domain administrator.
HTH!
Best regards,
Rebecca Chen
MCSE2000 MCDBA CCNA
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
|
|
|
| Back to top |
|
 |
Rebecca Chen [MSFT]
Guest
|
Posted:
Tue Jan 11, 2005 3:31 pm Post subject:
RE: Password Migration Problem |
|
|
That is great! :)
Best regards,
Rebecca Chen
MCSE2000 MCDBA CCNA
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights. |
|
| Back to top |
|
 |
|
|
|
|