nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Migrating User Accounts Between Domains In windows Server 2008

sina2011

Hey Everyone I have abit of a problem with migrating user accounts between Domains.

Here is my setup:

I have firstly created stub zones in each domain pointing to the other domain that im migrating user accounts to,I then created a domain transitive trust between the two.
After I did all the setup that was required I followed the lab instructions but at the end I got an error which was the following:

[Settings Section]
Task: User Migration (7)
ADMT Console
User: ABC\abc
Computer: Server1.abc.com (SERVER1)
Domain: abc.com (ABC)
OS: Windows Server ® 2008 Enterprise 6.0 (6002) Service Pack 2
Source Domain
Name: abc.com (ABC)
DC: Server1.abc.com (SERVER1)
OS: Windows Server® 2008 Enterprise 6.0 (6002) Service Pack 2
OU:
Target Domain
Name: contoso.com (CONTOSO)
DC: Server2.contoso.com (SERVER2)
OS: Windows Server® 2008 Enterprise 6.0 (6002) Service Pack 2
OU: LDAP://contoso.com/OU=Marketing,DC=contoso,DC=com
Intra-Forest: No
Password Option: Generate passwords, only for new objects = No
Password File: 'cWindows\ADMT\Logs\passwords.txt'
Migrate Security Identifiers: No
Update Rights: No
Translate Roaming Profiles: No
Fix group membership: Yes
Conflict Option: Merge, rights = No, members = No, move objects = No
Source Disable Option: Leave source account
Source Expiration: Do not expire source account
Target Disable Option: Set target same as source
Migrate groups: No
Migrate service accounts: Yes

[Object Migration Section]
2011-03-31 16:54:16 Starting Account Replicator.
2011-03-31 16:54:17 ERR2:7301 Failed to migrate source object 'CN=dave' to domain 'contoso.com'. The target object could not be created. hr=0x80070005 Access is denied.
2011-03-31 16:54:17 Operation completed.

Both Domains are logged in using Enterprise domain accounts as well I have also looked on the internet trying to find the problem by the error code number I still couldnt get a solution if anybody knows where im going wrong any help would be appreciated.

Thanks.

Find more posts tagged with

SAVE $250 on Your Microsoft Boot Camp — Use Code "EXAM26"

Exclusively for TechExams members for Infosec Boot Camps starting before April 30, 2026

View Microsoft Boot Camps

Comments

spd3432

Been a while since I've done any user migration, was this a Microsoft lab? If so, can you put a link to it up and I'll try to duplicate it. Is the line with the path to the password file correct?

You have:

sina2011 wrote: »

Password File: 'cWindows\ADMT\Logs\passwords.txt'

Shouldn't that be

Password File: 'c:\Windows\ADMT\Logs\passwords.txt'

Sean

sina2011

hey sean thanks for the fast reply its a microsoft lab I have the 70-647 Sybex book its the first exercise in the book im not sure what you mean by putting a link to it up.

thanks.

spd3432

What I meant by linking to the lab -- on the Microsoft technet site, there are several learning labs running from a base configuration. If it was one of those, then a link could be made to it. This is the link for the DirectAccess lab --

Download details: Test Lab Guide: Demonstrate DirectAccess

I'll check my library, I might have the Sybex book for 647 and if so, I'll give that first lab a shot.

Sean

sina2011

hey Sean

nah I'm doing this lab at home using Vmware only problem is just cant transfer the users from 1 to domain to the other.

Thanks.

sina2011

Hey Sean just wanted to give you an update on the migration tool I have fixed what I needed to do was to create an account in (Target domain) and add it to the Domain administrators group then go to the Source domain and add the same account in the target domain I created to the builtin Administrators Group in the source domain,After that I logged off source domain and then I switched domains in the source domain and logged in as contoso\ADMT instead of abc\abc which was the enterprise admin account on the source domain.

Thanks again for helping me.