Password Migration Problem
Windows Server Forum Index Windows Server
Server discussion on Windows platform.
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web winserverhelp.com
Password Migration Problem

 
Post new topic   Reply to topic    Windows Server Forum Index -> Migration
Author Message
TagaR
Guest





Posted: Mon Jan 10, 2005 11:57 am    Post subject: Password Migration Problem Reply with quote

I tried password migration with an export server following KB 832221. I also
follow the KB 322981 except the line;

-Read permissions on the Pre-Windows 2000 Compatible Access group should be
set to CN=Server,CN=System,DC={targetdom},DC={tld}.

I don't know how to do this.

My error is : Unable to establish a session with password export server.
Access is denied

Thanks
TagaR
Back to top
Rebecca Chen [MSFT]
Guest





Posted: Mon Jan 10, 2005 7:36 pm    Post subject: RE: Password Migration Problem Reply with quote

Hi Taga,

"-Read permissions on the Pre-Windows 2000 Compatible Access group should
be
set to CN=Server,CN=System,DC={targetdom},DC={tld}" mean grant read
permission to Pre-Windows 2000 Compatible Access group so that Pre-Windows
2000 Compatible Access group can read system object. Please use the
following steps:

1. Opan ADUC by keying "dsa.msc" in run box.
2. Cclick View menu to choose Advanced Feature.
3. Expand System node to see if there is a node called Server. If Server
node exists, please right click Server and choose Propertes, grant Read
permission to Pre-Windows 2000 Compatible Access group; if Server node
cannot be found, please open System properties and grant read permission to
Pre-Windows 2000 Compatible Access group/

NOTE: You need to logon as domain administrator.

HTH!




Best regards,

Rebecca Chen

MCSE2000 MCDBA CCNA


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
Back to top
TagaR
Guest





Posted: Tue Jan 11, 2005 7:45 am    Post subject: RE: Password Migration Problem Reply with quote

Hi Rebecca,

I checked the permission and Read permission is already there and I'm still
getting the same error message. I rebooted both controllers and no effect.

Thanks
TagaR

"Rebecca Chen [MSFT]" wrote:

Quote:
Hi Taga,

"-Read permissions on the Pre-Windows 2000 Compatible Access group should
be
set to CN=Server,CN=System,DC={targetdom},DC={tld}" mean grant read
permission to Pre-Windows 2000 Compatible Access group so that Pre-Windows
2000 Compatible Access group can read system object. Please use the
following steps:

1. Opan ADUC by keying "dsa.msc" in run box.
2. Cclick View menu to choose Advanced Feature.
3. Expand System node to see if there is a node called Server. If Server
node exists, please right click Server and choose Propertes, grant Read
permission to Pre-Windows 2000 Compatible Access group; if Server node
cannot be found, please open System properties and grant read permission to
Pre-Windows 2000 Compatible Access group/

NOTE: You need to logon as domain administrator.

HTH!




Best regards,

Rebecca Chen

MCSE2000 MCDBA CCNA


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Back to top
TagaR
Guest





Posted: Tue Jan 11, 2005 8:19 am    Post subject: RE: Password Migration Problem Reply with quote

I resolved the problem. I added the Domain Admins group of the target domain
to the Administrators local group of the source domain.

TagaR

"TagaR" wrote:

Quote:
Hi Rebecca,

I checked the permission and Read permission is already there and I'm still
getting the same error message. I rebooted both controllers and no effect.

Thanks
TagaR

"Rebecca Chen [MSFT]" wrote:

Hi Taga,

"-Read permissions on the Pre-Windows 2000 Compatible Access group should
be
set to CN=Server,CN=System,DC={targetdom},DC={tld}" mean grant read
permission to Pre-Windows 2000 Compatible Access group so that Pre-Windows
2000 Compatible Access group can read system object. Please use the
following steps:

1. Opan ADUC by keying "dsa.msc" in run box.
2. Cclick View menu to choose Advanced Feature.
3. Expand System node to see if there is a node called Server. If Server
node exists, please right click Server and choose Propertes, grant Read
permission to Pre-Windows 2000 Compatible Access group; if Server node
cannot be found, please open System properties and grant read permission to
Pre-Windows 2000 Compatible Access group/

NOTE: You need to logon as domain administrator.

HTH!




Best regards,

Rebecca Chen

MCSE2000 MCDBA CCNA


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Back to top
Rebecca Chen [MSFT]
Guest





Posted: Tue Jan 11, 2005 3:31 pm    Post subject: RE: Password Migration Problem Reply with quote

That is great! :)

Best regards,

Rebecca Chen

MCSE2000 MCDBA CCNA


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
Back to top
 
Post new topic   Reply to topic    Windows Server Forum Index -> Migration All times are GMT
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




New Topics Powered by phpBB