Migrate users to new domain 1

[euskills]

Hello,

I am in the process of consolidating several windows 2000 domains into one windows 2003 domain. I have been testing the ADMT v2 tool avaiable from Microsoft to move both the user and computer accounts. However I seem to be having a problem with the computer account - I get an error when it tries to install the remote agent on the PC with a Access denied error message. I have used to Enterprise admin user account and ran the tool on the RID master in the target domain as instructed. I have checked the Enterprise admin account as they are a member of the Builtin Administrators group of each domain (via membership of the enterprise admins group). What other security permissions do I require?

sorry if this topic has been covered elsewhere!

many thanks in advance

Brian

 

[markdmac]

Did you add the Administrator ID from the new domain to the local Admins group for the workstations to be migrated?

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[euskills]

Hello,

I looked at the local admins group for each several workstations and no the Enterprise admin account (we will actually create an account for the migration) is not a member. Do I need to manually add this account to each workstations Local Admins group?

Many thanks

Brian.

 

[markdmac]

Yes, though you don't need to actually do it manually. You can script it or force it down via GPO Restricted Groups or use a free product called JoeWare.

It is easy enough to script as a startup script.

Use Net localgroup command to add the account then remotely force reboot.



I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[euskills]

Hello,

I've used a GPO to add the account to the local admins group and tested it on a few machines and it works fine!. cheers.

Brian.