admt issues 3

[jdahlheimer]

I have read many posts on this forum on this issue but none of them seem to answer my question quiet right. Anyway I have a windows server 2000 box with exchange 2003 running right now. I would like to migrate all the users and there email accounts over to a server 2003 with exchange 2003 box. I have done all the trusts adding administrators of both domains to each other. I even disable sid filtering but the problem is here. With admt. I have read this article

http://support.microsoft.com/?id=328871

that says to use admt to bring users and there sid over then use exchange migration to bring over there mail over. Well here is the log for admt after it gets done.


-------------------------start log file-----------------
[Settings Section]
Task: User Migration (36)
ADMT Console
User: MASONBROS\Administrator
Computer: mbccore.masonbros.local (MBCCORE)
Domain: masonbros.local (MASONBROS)
OS: Microsoft Windows Server 2003 R2 5.2 (3790) Service Pack 1
Source Domain
Name: dommason.local (DOMMASON)
DC: dellserver.dommason.local (DELLSERVER)
OS: Windows 2000 Server 5.0 (2195) Service Pack 4
OU:
Target Domain
Name: masonbros.local (MASONBROS)
DC: mbccore.masonbros.local (MBCCORE)
OS: Windows Server 2003 5.2 (3790) Service Pack 1
OU: LDAP://masonbros.local/CN=Users,DC=masonbros,DC=local
Intra-Forest: No
Password Option: Copy passwords, only for new objects = No
Password Export Server: dellserver.dommason.local
Migrate Security Identifiers: Yes
Update Rights: Yes
Translate Roaming Profiles: No
Fix group membership: Yes
Conflict Option: Merge, rights = Yes, members = Yes, move objects = Yes
Source Disable Option: Leave source account
Source Expiration: Do not expire source account
Target Disable Option: Set target same as source
Migrate groups: Yes
Update Migrated Objects: Yes
Migrate service accounts: Yes

[Object Migration Section]
2006-03-20 14:37:39 Starting Account Replicator.
2006-03-20 14:37:40 CN=test test - Created
2006-03-20 14:37:40 SID for DOMMASON\ttest added to the SID History of MASONBROS\ttest
2006-03-20 14:37:41 WRN1:7857 Could not copy following properties for 'CN=test test'.
2006-03-20 14:37:41 homeMDB = CN=Mailbox Store (DELLSERVER),CN=First Storage Group,CN=InformationStore,CN=DELLSERVER,CN=Servers,CN=First Administrative Group,CN=Administrative Groups,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=dommason,DC=local A constraint violation occurred.
2006-03-20 14:37:41 showInAddressBook = CN=Default Global Address List,CN=All Global Address Lists,CN=Address Lists Container,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=dommason,DC=local, ... A constraint violation occurred.
2006-03-20 14:37:41 homeMTA = CN=Microsoft MTA,CN=DELLSERVER,CN=Servers,CN=First Administrative Group,CN=Administrative Groups,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=dommason,DC=local A constraint violation occurred.
2006-03-20 14:37:41 WRN1:7873 Disabled the "user cannot change password" account option for account 'CN=test test'.
2006-03-20 14:37:41 CN=test test - Password Copied.
2006-03-20 14:37:41 WRN1:7874 Disabled the "password never expires" account option for account 'CN=test test'.
2006-03-20 14:37:41 Updated user rights for CN=test test
2006-03-20 14:37:41 Operation completed.

----------------------end log file---------------------

The error 7857 looks to me like it can't copy over the exchange attributes so the account doesn't have an exchange mail box so when I try to bring over the mail with exchange migrate there is no mail box to into and it errors. I think that is my main problem. That being said below is a list of some of the things I have tried and there failed results.

Create the account with exchange migrate will not work alone because it will not bring passwords over and the account is disabled. So then I used admt to overwrite the password and settings. It would overwrite the disabled part but would not overwrite the password. Admt errored saying copy of password did not complete because the source has not changed since last migration. Well yea I have not changed the source but I still want to overwrite what exchange migration changed.

I tried using admt first then using exchange migration with the change modify selection but it overwrites the password and disables the account.

I have tried to get exmerge to work. Tried using adc but didn't dig into enough to get it working.

Thanks for taking a look and let me know if I need to clarify or go more in depth on something.

 

[jdahlheimer]

I think I figured it out. I had to change my dns settings on my computer to point to the new server. Before I had them pointing to the router. So when I changed them to point to the new server everything switched over. I don't suppose you happen to have a script to change dns of the computers on a network? Thanks for all your help.

 

[markdmac]

Why are you using static DNS? You should be pushing out DNS settings via DHCP. Then all you need to do is update the DHCP server for all machines to be updated.

I hope you find this post helpful.

Regards,

Mark

 

[jdahlheimer]

I did not set up the old server. I wish they would have set up dhcp but we are switching over that is the next thing after we get it up and running. Thanks.

 

[markdmac]

I would focus on rolling out DHCP. Only takes a few minutes to set up on the server and then you can slowly move your computers over as long as you can set your scope options to not hand out a range already given to PCs. Totally depends on your number of PCs of course but it can be done.

I hope you find this post helpful.

Regards,

Mark

 

[jdahlheimer]

I have been thinking about it for a while and it is a little more complicated than that. Number one we would like to switch our subnet from 255.255.255.0 to 255.255.0.0. And for some reason that I have not figured out our green bar printers grab a different ip when the scope is activated even though they are not set up to use dhcp. Wierd.

 

[markdmac]

Are they using BootP?

Typically you will want to configure printers with a reservation or statically assign them addresses and exclude the printers IPs from the scope.

I hope you find this post helpful.

Regards,

Mark

 

[jdahlheimer]

Your good. You picked up on that pretty quick. Is bootp the problem. I read a short article on it but it sounds like it only happens on a boot these printers did not reboot when they grabbed the new ip. Or at least no one did it they might have done it automatically or something like that. Thanks.

 

[markdmac]

Switch them to DHCP from BootP and that should resolve your issue with the printers.

I hope you find this post helpful.

Regards,

Mark

 

[jdahlheimer]

See that confuses me wouldn't I want to just have a static ip. Otherwise I log on to them via there ip. If they have dhcp I will never know there ip. Or I will at least have to go check them to figure out what there ip is. And I don't know how the as400 is going to react with a dhcp printer on it. So really could I just uncheck bootp and this would get the printer to keep its ip all the time. Thanks.

 

[markdmac]

In DHCP you can set a static reservation. All you need to know is the MAC address. You then know what the IP will always be because you set it through the DHCP reservation.

I hope you find this post helpful.

Regards,

Mark

 

[jdahlheimer]

Rock on thats what I will do. Thanks a lot.