Windows Server TechCenter > Windows Server Forums > Directory Services > Users / Password Migration Problem
Ask a questionAsk a question
 

AnswerUsers / Password Migration Problem

  • Tuesday, November 03, 2009 5:24 PMkarl_009 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hi,


    Am migrating users from an old Windows 2003 domain to a new one.

    I conducted a test run using the old domain and a test domain I setup and it worked fine.

    Now am doing the real thing I have run into some problems.

    I have found a work around to migrate users and groups on the target server but passwords seem different as they only seem to what to be migrated from the old domain to the new one not the other way round.


    Am faced with two errors the first is when I try and migrate users with there password, the second error just the password;

    User / Password
    ERR2:7839 Unable to migrate source object 'LDAP://sab.local/CN=Karl,OU=IT - Test Group,DC=sab,DC=local' as it cannot be determined whether the corresponding target object has previously been migrated to the target domain and replicated to the current target domain controller.  The server is not operational.

    Password
    WRN1:7662 Migrated user 'kla' has been deleted or moved from the target domain.

Answers

  • Thursday, November 05, 2009 10:19 AMkarl_009 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer

    Hi,

    Found out the problems...

    Because I did a test migration using the actual domain I was to migrate this is what stopped me doing the password migration.

    So I had to change the passwords of the users that where migrated during the test run and then I was able to migrate the passwords over to the new domain…

    Thanks

    • Marked As Answer bykarl_009 Thursday, November 05, 2009 10:19 AM
    •  

All Replies

  • Wednesday, November 04, 2009 8:42 AMkarl_009 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    UPDATE:

    I have been on the target domain and tried to migrate passwords over an I get this error;

    Unable to establish a session with the password export server.
    The source password export server and the target server do not have the same encryption key for the source domain.


    Here is how I have set them up, I created a key on the source domain, installed it on the source domain, then I went on the target domain mapped a network drive to the source domain where the key was and used the same key to install the target domain, but I get the above error...


    UPDATE2:

    From the soruce domain am getting this, seems like its almost there this time;

    Did not try to copy the password for CN=Karl, since the source password has not been changed since the last migration of this user.

    Help...

    Thanks
  • Thursday, November 05, 2009 6:37 AMJoson ZhouMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     

    Hi,

     

    Which version of ADMT tool are you using?

     

    You need to create the encryption key in the target domain. For detailed steps please refer to Enabling Migration of Passwords at http://technet.microsoft.com/en-us/library/cc755729(WS.10).aspx

     

    In addition, the following article could be helpful:

     

    How to Troubleshoot Inter-Forest Password Migration with ADMTv2

    http://support.microsoft.com/kb/322981


    This posting is provided "AS IS" with no warranties, and confers no rights.
  • Thursday, November 05, 2009 10:19 AMkarl_009 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer

    Hi,

    Found out the problems...

    Because I did a test migration using the actual domain I was to migrate this is what stopped me doing the password migration.

    So I had to change the passwords of the users that where migrated during the test run and then I was able to migrate the passwords over to the new domain…

    Thanks

    • Marked As Answer bykarl_009 Thursday, November 05, 2009 10:19 AM
    •