Windows Server

sby · Guest

Hi

Can anyone help?
I have a win2k domain which I am in the process of migrating to a win2k3
domain.
I have been able to migrate users, user profiles, and data. But when I try
to run the login scripts I get access denied.

I can logon as a domain admin and it runs fine but as a domain user I get
"access denied". The user account has been migrated to the Win2k3 and I need
the users to still access the win2k domain as the the data will be still
stored there in the interim. When migrating I did not migrate the SID
history. I ahd a problem with the Security Tranlation wizard, when I ran it I
got err/msg saying that the TcpipClientSupport registry setting should be
set 1 and the PDC should then be restarted. I have done this but still get
the same message.

If I use the Sercurity Translation Wizard does it translate individual
files/folders or the whole server, as people will need to access this data
from both the Win2k and Win2k3 domains in the interim.

Can anybody help, I am quite desparate for a solution as this is holding up
the migration progress.

thanks

Steve

Frances [MSFT] · Guest

Hello Steve,

It is nice to talk to you again.

After reading the thread, it seems this issue is very urgent, if so, it is
recommended that you contact Microsoft Product Support Services (PSS) via
telephone so that a dedicated Support Professional can help you resolve
your issue in a more efficient manner. Please be advised that contacting
phone support will be a charged call.

To obtain the phone numbers for a specific technology request please take a
look at the web site listed below.
<http://support.microsoft.com/default.aspx?scid=fh;EN-US;PHONENUMBERS>

If you are outside the US please see http://support.microsoft.com for
regional support phone numbers.

Regarding you questions, I would like to answer them in sequence.

1. I had a problem with the Security Tranlation wizard, when I ran it I
got err/msg saying that the TcpipClientSupport registry setting should be
set 1 and the PDC should then be restarted. I have done this but still get
the same message.

A: To narrow down the problem, please try the steps below to have a check.

Step 1. Please set the TcpipClientSupport registry key to 1 on all DCs.
Restart the DC after the key has been changed, the key will take effect
after the restart.

Step 2. Please verify there is no other server with the same name on the
network.

Step 3. Please try Security Tranlation wizard again. What is the version of
ADMT you are using? It is recommended to use ADMT version 2.

If the same error occurs, please take a screen shot of the error message
and send it to v-franhe@microsoft.com for research. Please also compress
the folder located in \Program Files\Active Directory Migration Tool\Logs
and send it to me.

2. If I use the Sercurity Translation Wizard does it translate individual
files/folders or the whole server?

A: It will translate the files and folders in the whole server. However,
never worry that the users in windows 2000 domain will not access the
resource any longer. In the Security Translation Wizard, you will have a
chance to select the mode of translation. You can choose Add mode for your
scenario.

More information can be accessed at the article below.

http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/deploy
guide/en-us/Default.asp?url=/resources/documentation/windowsserv/2003/all/de
ployguide/en-us/dssbi_reer_kltw.asp

Hope it helps!

Best regards,

Frances He

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

	Windows Server Forum Index -> Migration	All times are GMT
Page 1 of 1