Windows Server

Guest

Hi,

We are currently testing version 3.0 of the ADMT. When migrating user
accounts we are getting errors with the message "The Array Bounds Are
Invalid". If we do not use the option to "Update User Rights" the
problem does not occur.

I have tried creating a brand new user in the NT4 domain and migrating
that, to simplyfy things. The same problem occurs.

Has anyone else seen this problem? Please see log attached:

[Settings Section]
Task: User Migration (37)
ADMT Console
User: acmeDNS\administrator
Computer: WPOT0101.acmedns.com (WPOT0101)
Domain: acmedns.com (acmeDNS)
OS: Microsoft Windows Server 2003 5.2 (3790) Service
Pack 1
Source Domain
Name: HLMD1
DC: WPKB0101
OS: Windows NT 4.0
Target Domain
Name: acmedns.com (acmeDNS)
DC: WPOT0101.acmedns.com (WPOT0101)
OS: Windows Server 2003 5.2 (3790) Service Pack 1
OU:
LDAP://acmedns.com/OU=Migrated,OU=acme_Users,DC=acmedns,DC=com
Intra-Forest: No
Password Option: Copy passwords, only for new objects = No
Password Export Server: wpkb0101
Migrate Security Identifiers: Yes
Update Rights: Yes
Translate Roaming Profiles: Yes
Fix group membership: Yes
Conflict Option: Merge, rights = No, members = No, move objects = Yes
Source Disable Option: Disable source account
Source Expiration: Do not expire source account
Target Disable Option: Enable target account
Migrate groups: No
Migrate service accounts: Yes

[Object Migration Section]
2005-10-31 11:10:30 Starting Account Replicator.
2005-10-31 11:10:33 CN=hh04371 - Merged.
2005-10-31 11:10:33 Did not try to copy the password for CN=hh04371,
since the source password has not been changed since the last migration
of this user.
2005-10-31 11:10:33 hh04371 - Source account disabled.
2005-10-31 11:10:34 SID for HLMD1\hh04371 added to the SID History of
acmeDNS\hh04371
2005-10-31 11:10:34 WRN1:7372 ADMT does not process BUILTIN accounts or
change the membership of BUILTIN groups (Administrators, etc.).
Skipping Domain Users
2005-10-31 11:10:34 WRN1:7372 ADMT does not process BUILTIN accounts or
change the membership of BUILTIN groups (Administrators, etc.).
Skipping Domain Admins
2005-10-31 11:10:34
LDAP://WPOT0101.acmedns.com/CN=hh04371,OU=Migrated,OU=acme_Users,DC=acmedns,DC=com
already in CN=G_BASIC_HD
2005-10-31 11:10:34
LDAP://WPOT0101.acmedns.com/CN=hh04371,OU=Migrated,OU=acme_Users,DC=acmedns,DC=com
already in CN=G_EC_1
2005-10-31 11:10:34
LDAP://WPOT0101.acmedns.com/CN=hh04371,OU=Migrated,OU=acme_Users,DC=acmedns,DC=com
already in CN=G_F5_Tech
2005-10-31 11:10:34
LDAP://WPOT0101.acmedns.com/CN=hh04371,OU=Migrated,OU=acme_Users,DC=acmedns,DC=com
already in CN=G_HIS_ALL
2005-10-31 11:10:34
LDAP://WPOT0101.acmedns.com/CN=hh04371,OU=Migrated,OU=acme_Users,DC=acmedns,DC=com
already in CN=G_HIS_EPOS
2005-10-31 11:10:34
LDAP://WPOT0101.acmedns.com/CN=hh04371,OU=Migrated,OU=acme_Users,DC=acmedns,DC=com
already in CN=G_HIS_EPOS_Admins
2005-10-31 11:10:34
LDAP://WPOT0101.acmedns.com/CN=hh04371,OU=Migrated,OU=acme_Users,DC=acmedns,DC=com
already in CN=G_HIS_EPOS_SECURITY
2005-10-31 11:10:34
LDAP://WPOT0101.acmedns.com/CN=hh04371,OU=Migrated,OU=acme_Users,DC=acmedns,DC=com
already in CN=G_HIS_PCLAN
2005-10-31 11:10:34
LDAP://WPOT0101.acmedns.com/CN=hh04371,OU=Migrated,OU=acme_Users,DC=acmedns,DC=com
already in CN=G_HIS-OST_SYSADMIN
2005-10-31 11:10:34
LDAP://WPOT0101.acmedns.com/CN=hh04371,OU=Migrated,OU=acme_Users,DC=acmedns,DC=com
already in CN=G_LEVEL_TEST_POL
2005-10-31 11:10:34
LDAP://WPOT0101.acmedns.com/CN=hh04371,OU=Migrated,OU=acme_Users,DC=acmedns,DC=com
already in CN=G_LEVEL0_XP_POL
2005-10-31 11:10:34
LDAP://WPOT0101.acmedns.com/CN=hh04371,OU=Migrated,OU=acme_Users,DC=acmedns,DC=com
already in CN=G_NTservices
2005-10-31 11:10:34
LDAP://WPOT0101.acmedns.com/CN=hh04371,OU=Migrated,OU=acme_Users,DC=acmedns,DC=com
already in CN=G_SAS_EXPLORER_USERS
2005-10-31 11:10:34
LDAP://WPOT0101.acmedns.com/CN=hh04371,OU=Migrated,OU=acme_Users,DC=acmedns,DC=com
already in CN=G_SMSv2_NTservices
2005-10-31 11:10:34
LDAP://WPOT0101.acmedns.com/CN=hh04371,OU=Migrated,OU=acme_Users,DC=acmedns,DC=com
already in CN=Ost_exchange_Admin
2005-10-31 11:10:34 ERR2:7228 Error updating user rights for
CN=hh04371, rc=-2147023162 The array bounds are invalid.
2005-10-31 11:10:34 Operation completed.

Guest

In addition to this, I have tried the following:

De-/Re-installed the ADMT v3.0 on the Domain Controller, rebooting it
Performed more user testing, it occurs if there is an account in AD or
not (i.e. if the "Merge" options are selected never mind if there is a
conflict of accounts between NT4 and AD). Seems like a bug?

Vincent Xu [MSFT] · Guest

Hi Hutton,

I'm sorry I am not able to provide any information after I performed some
research. However, I have post your issue in our interl discussion group.
I'll let you know if there are any updates ASAP.

Thanks for understanding.

Best regards,

Vincent Xu
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

Sam Smith · Guest

I get the same error, but it hasen't affected the migration of users. I have
migrated 2000 users and 2500 groups with it already with no problems.

Vincent Xu [MSFT] · Guest

Hi Sam,

I am still working on this problem, did you mean you got the same error
message but the migration still successed?

Best regards,

Vincent Xu
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

Guest

Hi,

I am interested to hear Sam's response? I have checked our AD and the
user accounts are created but the error message states that there is an
error "updating user rights". Of course permissions are complex to
track down - how can you be sure that all relevant permissions have
been copied for the user?

Also is it wise to migrate a production system with these results? As
the ADMT is reporting a failure for each user??

We still havr the ADMT v2 installed on a DC, therefore I planned to use
that DC to migrate the users and the DC running v3 to migrate the
workstations. The reason for this is that the pre-test of v3 for
workstations is invaluable.

Can anyone see an issue of using both versions for migration?

Hutton

Vincent Xu [MSFT] · Guest

Hi Hutton,

Here is some research on your issue:

The problem arises when we enumerate user's rights on a NT4 DC.The RPC
response from the NT4 DC triggers the RPC runtime error.So,it is the NT4 DC
that needs to be debugged.

Unfortunately we cannot help you debug such issue in newsgroup.To trouble
shoot this problem efficiently, I suggest that you speak directly with a
Microsoft Customer Service and Support (CSS)

For a complete list of Microsoft Customer Service and Support (CSS) phone
numbers and information about support costs, please go to the following
address on the World Wide Web:

<http://support.microsoft.com/directory/overview.asp>

Hope it helps.

Best regards,

Vincent Xu
Microsoft Online Partner Support

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
Business-Critical Phone Support (BCPS) provides you with technical phone
support at no charge during critical LAN outages or "business down"
situations. This benefit is available 24 hours a day, 7 days a week to all
Microsoft technology partners in the United States and Canada.

This and other support options are available here:
BCPS:
https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
Others: https://partner.microsoft.com/US/technicalsupport/supportoverview/

If you are outside the United States, please visit our International
Support page: http://support.microsoft.com/common/international.aspx.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

	Windows Server Forum Index -> Migration	All times are GMT
Page 1 of 1