Windows Server

masland · Guest

I am getting ERR3:7075 Failed to change domain affiliation, hr=800706fb
when I am doing a live Migration from an NT4 to Win2k3. I am not doing
a TEST. I have redone the trust and I'm grasping for straws. I
actually translate the profile and everything except actually join the
domain. I think its a replication issue. Because on the DC i'm
running ADMT I see the computer account, but on one of our other DCs in
the 2k3 AD I don't see the computer account.

Here is the log:

2005-10-11 15:06:54
2005-10-11 15:06:54 Active Directory Migration Tool, Starting...
2005-10-11 15:06:54 Starting Security Translator.
2005-10-11 15:06:54 Agent is running in local mode.
2005-10-11 15:06:54 Read 7 accounts from C:\Program
Files\OnePointDomainAgent\DCTCache.013
2005-10-11 15:06:54 SecurityTranslation Files:Yes LGroups:Yes
UserRights:Yes Profiles:Yes RecycleBin:Yes TranslationMode:Replace
MASLAND.DOM dixienet.thedixiegroup.net
2005-10-11 15:06:54 Starting
2005-10-11 15:06:54 Translating local machine.
2005-10-11 15:06:55 Skipping A:\, rc=21 The device is not ready.
2005-10-11 15:06:55 Processing C:\
2005-10-11 15:07:46 Processing recycle bin files and folders on C:\.
2005-10-11 15:07:46 Examining:
S-1-5-21-2030847913-1492075011-1848903544-2994
2005-10-11 15:07:46 Renamed recycle bin directory from
C:\\RECYCLER\S-1-5-21-2030847913-1492075011-1848903544-2994 to
C:\\RECYCLER\S-1-5-21-3836299595-2580382227-4221705463-2616
2005-10-11 15:07:46 Skipping D:\. D:\ is a CD-ROM drive.
2005-10-11 15:07:46 Translating local groups.
2005-10-11 15:07:47 Translating user rights.
2005-10-11 15:07:47 ADMT only performs user rights translation in
Append mode.
2005-10-11 15:07:47 This profile translation automatically switches
from replace mode to add mode if the user is currently logged on or if
the profile is in use for other reasons. In order to disable the
switching, you need to set the registry
HKLM\Software\Microsoft\ADMT\DisallowFallbackToAddInProfileTranslation
(REG_DWORD) to 1 on the ADMT machine.
2005-10-11 15:07:49 Translating user profile for JerniganJo
2005-10-11 15:07:52 SecurityTranslation Files:Yes
TranslationMode:Replace
2005-10-11 15:07:52 Starting
2005-10-11 15:07:58 Removed profile entry for JerniganJo,
2005-10-11 15:07:58 Translated any Microsoft Installer related registry
keys from 'S-1-5-21-2030847913-1492075011-1848903544-2994' to
'S-1-5-21-3836299595-2580382227-4221705463-2616'.
2005-10-11 15:07:58 ------Account Detail---------
2005-10-11 15:07:58 The account detail section uses the following
format: AccountName(OwnerChanges, GroupChanges, DaclChanges,
SaclChanges).
2005-10-11 15:07:58 JerniganJo (434, 0, 9180, 0)
2005-10-11 15:07:58 -----------------------------
2005-10-11 15:07:58 7 users, 0 groups
2005-10-11 15:07:58 7 accounts selected. 7 resolved, 0 unresolved.
2005-10-11 15:07:58 Examined Changed Unchanged
2005-10-11 15:07:58 Files 19182 5351 13831
2005-10-11 15:07:58 Dirs 1245 271 974
2005-10-11 15:07:58 Shares 0 0 0
2005-10-11 15:07:58 Members 11 1 10
2005-10-11 15:07:58 User Rights 44 0 44
2005-10-11 15:07:58 Exchange Objects 0 0
0
2005-10-11 15:07:58 Containers 0 0 0
2005-10-11 15:07:58 DACLs 22078 7264 14814
2005-10-11 15:07:58 SACLs 0 0 0
2005-10-11 15:07:58 Examined Changed No Target
Not Selected Unknown
2005-10-11 15:07:58 Owners 22081 434 21647
0 0
2005-10-11 15:07:58 Groups 22081 0 22081
0 0
2005-10-11 15:07:58 DACEs 89912 9179 80733
80733 0
2005-10-11 15:07:58 SACEs 0 0 0
0 0
2005-10-11 15:08:02 ERR3:7075 Failed to change domain affiliation,
hr=800706fb The security database on the server does not have a
computer account for this workstation trust relationship.
2005-10-11 15:08:02 Wrote result file C:\Program
Files\OnePointDomainAgent\SP-JERNIGANJO709067203.result
2005-10-11 15:08:02 Operation completed.

Vincent Xu [MSFT] · Guest

Hi Simon,

I'm not sure very much of this "I actually translate the profile and
everything except actually join the domain". Please explain it in detail.

From the log, it seems to related to a computer account and it seems that
you didn't migrate the computer account. I suggest you migrate it first to
see the efforts.

During the migration, did you ever changed the computer name?

This error happens when you perform a computer migration or security
migration? Please migration computer account first.

Did you add the Administrators Group from his NT Domain to the
Administrators Group in the 2k3 Domain?

Best regards,

Vincent Xu
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

--------------------
[quote]From: "masland" <simondsj@maslandcarpets.com
Newsgroups: microsoft.public.windows.server.migration
Subject: ERR3:7075 Failed to change domain affiliation, hr=800706fb
Date: 11 Oct 2005 13:10:39 -0700
Organization: http://groups.google.com
Lines: 84
Message-ID: <1129061439.873250.177300@z14g2000cwz.googlegroups.com
NNTP-Posting-Host: 65.213.153.101
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
X-Trace: posting.google.com 1129061445 19173 127.0.0.1 (11 Oct 2005
20:10:45 GMT)
X-Complaints-To: groups-abuse@google.com
NNTP-Posting-Date: Tue, 11 Oct 2005 20:10:45 +0000 (UTC)
User-Agent: G2/0.2
X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;
.NET CLR 1.1.4322),gzip(gfe),gzip(gfe)
X-HTTP-Via: 1.0 TDG-SA-ISA
Complaints-To: groups-abuse@google.com
Injection-Info: z14g2000cwz.googlegroups.com; posting-host=65.213.153.101;
posting-account=kEbRZw0AAADZgggTB9EJZ_lj4LDcHo-0
Path:
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.[/quote]
sul.t-online.de!t-online.de!border2.nntp.dca.giganews.com!nntp.giganews.com!
postnews.google.com!z14g2000cwz.googlegroups.com!not-for-mail
[quote]Xref: TK2MSFTNGXA02.phx.gbl
microsoft.public.windows.server.migration:20985
X-Tomcat-NG: microsoft.public.windows.server.migration

I am getting ERR3:7075 Failed to change domain affiliation, hr=800706fb
when I am doing a live Migration from an NT4 to Win2k3. I am not doing
a TEST. I have redone the trust and I'm grasping for straws. I
actually translate the profile and everything except actually join the
domain. I think its a replication issue. Because on the DC i'm
running ADMT I see the computer account, but on one of our other DCs in
the 2k3 AD I don't see the computer account.

Here is the log:

2005-10-11 15:06:54
2005-10-11 15:06:54 Active Directory Migration Tool, Starting...
2005-10-11 15:06:54 Starting Security Translator.
2005-10-11 15:06:54 Agent is running in local mode.
2005-10-11 15:06:54 Read 7 accounts from C:\Program
Files\OnePointDomainAgent\DCTCache.013
2005-10-11 15:06:54 SecurityTranslation Files:Yes LGroups:Yes
UserRights:Yes Profiles:Yes RecycleBin:Yes TranslationMode:Replace
MASLAND.DOM dixienet.thedixiegroup.net
2005-10-11 15:06:54 Starting
2005-10-11 15:06:54 Translating local machine.
2005-10-11 15:06:55 Skipping A:\, rc=21 The device is not ready.
2005-10-11 15:06:55 Processing C:\
2005-10-11 15:07:46 Processing recycle bin files and folders on C:\.
2005-10-11 15:07:46 Examining:
S-1-5-21-2030847913-1492075011-1848903544-2994
2005-10-11 15:07:46 Renamed recycle bin directory from
C:\\RECYCLER\S-1-5-21-2030847913-1492075011-1848903544-2994 to
C:\\RECYCLER\S-1-5-21-3836299595-2580382227-4221705463-2616
2005-10-11 15:07:46 Skipping D:\. D:\ is a CD-ROM drive.
2005-10-11 15:07:46 Translating local groups.
2005-10-11 15:07:47 Translating user rights.
2005-10-11 15:07:47 ADMT only performs user rights translation in
Append mode.
2005-10-11 15:07:47 This profile translation automatically switches
from replace mode to add mode if the user is currently logged on or if
the profile is in use for other reasons. In order to disable the
switching, you need to set the registry
HKLM\Software\Microsoft\ADMT\DisallowFallbackToAddInProfileTranslation
(REG_DWORD) to 1 on the ADMT machine.
2005-10-11 15:07:49 Translating user profile for JerniganJo
2005-10-11 15:07:52 SecurityTranslation Files:Yes
TranslationMode:Replace
2005-10-11 15:07:52 Starting
2005-10-11 15:07:58 Removed profile entry for JerniganJo,
2005-10-11 15:07:58 Translated any Microsoft Installer related registry
keys from 'S-1-5-21-2030847913-1492075011-1848903544-2994' to
'S-1-5-21-3836299595-2580382227-4221705463-2616'.
2005-10-11 15:07:58 ------Account Detail---------
2005-10-11 15:07:58 The account detail section uses the following
format: AccountName(OwnerChanges, GroupChanges, DaclChanges,
SaclChanges).
2005-10-11 15:07:58 JerniganJo (434, 0, 9180, 0)
2005-10-11 15:07:58 -----------------------------
2005-10-11 15:07:58 7 users, 0 groups
2005-10-11 15:07:58 7 accounts selected. 7 resolved, 0 unresolved.
2005-10-11 15:07:58 Examined Changed Unchanged
2005-10-11 15:07:58 Files 19182 5351 13831
2005-10-11 15:07:58 Dirs 1245 271 974
2005-10-11 15:07:58 Shares 0 0 0
2005-10-11 15:07:58 Members 11 1 10
2005-10-11 15:07:58 User Rights 44 0 44
2005-10-11 15:07:58 Exchange Objects 0 0
0
2005-10-11 15:07:58 Containers 0 0 0
2005-10-11 15:07:58 DACLs 22078 7264 14814
2005-10-11 15:07:58 SACLs 0 0 0
2005-10-11 15:07:58 Examined Changed No Target
Not Selected Unknown
2005-10-11 15:07:58 Owners 22081 434 21647
0 0
2005-10-11 15:07:58 Groups 22081 0 22081
0 0
2005-10-11 15:07:58 DACEs 89912 9179 80733
80733 0
2005-10-11 15:07:58 SACEs 0 0 0
0 0
2005-10-11 15:08:02 ERR3:7075 Failed to change domain affiliation,
hr=800706fb The security database on the server does not have a
computer account for this workstation trust relationship.
2005-10-11 15:08:02 Wrote result file C:\Program
Files\OnePointDomainAgent\SP-JERNIGANJO709067203.result
2005-10-11 15:08:02 Operation completed.

[/quote]

	Windows Server Forum Index -> Migration	All times are GMT
Page 1 of 1