none
“ERR3:7585” error occured when I'm trying to migrate from 2003 AD to 2008 R2 AD with admt 3.2 help me…

    Question

  • the environment is as follow...
    source domain:
    - 2003 dc
    - 2003 domain/forest functional level
    - child domain
    - install PES server on pdc role in source domain
    - create local domain group as named source_domain_netbios_name$$$
    - enable account management policy
    target domain
    - 2008 R2 dc
    - 2003 domain/forest functional level
    - enable account management policy
    admt client:
    - admt 3.2
    - installed on win 2008 r2 member in target domain
    - installed sql 2008 express sp2
    trust relationship:
    - two way
    - sidfiltering featues are disabled on both relationship with netdom trust /quarantine:no option
    etc configuration:
    - add administrator account in partner domain to administrators in each domain(src/tgt)

    when i try to migration account from src to tgt domain, the error, ERR3:7585, was occured.

    help me and thanks
    Monday, November 07, 2011 7:40 AM

All replies

  • The error can be due to firewall or dns issue. I have seen this error in the past due to DNS issue. Verify the firewall ports and dns name resolution is working correctly.

    http://awinish.wordpress.com/2010/12/24/intraforest-interforest-migration/

     

    Regards


    Awinish Vishwakarma

    MY BLOG:  awinish.wordpress.com


    This posting is provided AS-IS with no warranties/guarantees and confers no rights.
    Monday, November 07, 2011 9:01 AM
    Moderator
  • Please post the complete error message here.


    Santhosh Sivarajan | MCTS, MCSE (W2K3/W2K/NT4), MCSA (W2K3/W2K/MSG), CCNA, Network+| Houston, TX
    Blogs - http://blogs.sivarajan.com/

    FaceBook Twitter LinkedIn SS Tech Forum

    This posting is provided AS IS with no warranties,and confers no rights.
    Monday, November 07, 2011 1:07 PM
  • Hi,

     

    In addition to disable firewall, you may try the following troubleshooting suggestions:

     

    1.    Add the target administrator to the local Administrators group.

    2.    Reset the Secure Channel to check the result. For the detailed steps, please refer to the following Microsoft KB article:

     

    Resetting Domain Member Secure Channel

    http://support.microsoft.com/kb/175024

     

    For similar issue, please also refer to the following threads:

     

    ADMT 3.2 User Migration Issue 

    http://social.technet.microsoft.com/Forums/en-SG/winserverDS/thread/d0590963-e53e-4a12-a98c-aaf53f3cfbf9

     

    Issues with ADMT 3.1 

    http://social.technet.microsoft.com/Forums/en/winserverMigration/thread/907a722a-16dc-4b6f-ae78-0343976696d1

     

    Regards,

     

    Forum Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
     tnmff@microsoft.com . 


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Tuesday, November 08, 2011 7:27 AM
    Moderator
  • thanks your mention.....

    firewall is disabled on source DC(pdc) and target DCs in target domain and uninstalled symantec endpoint protect.

    but one DC isn't uninstalled symantec endpoint protect in the source domain.

    source domain:

    dc01 - firewall disabled, uninstalled symantec endpoint

    dc02 - firewall disabled, running symantec endpoint.

    target domain:

    All DCs - firewall disabled, uninstalled symantec endpoint.

    and......

    I added the stub zone for other side domain in DCs for boths domain.

     

     

    Thursday, November 10, 2011 12:30 AM
  • um......

    error message is the below.....

    ERR3:7585 The
    account replicator is unable to continue.   
    
    The system
    detected a possible attempt to compromise security. Please ensure that you can
    contact the server that authenticated you.
    thanks

    Thursday, November 10, 2011 12:32 AM
  • Try the suggestions in my following blog:

    http://portal.sivarajan.com/2010/03/migration-system-detected-possible.html


    Santhosh Sivarajan | MCTS, MCSE (W2K3/W2K/NT4), MCSA (W2K3/W2K/MSG), CCNA, Network+| Houston, TX
    Blogs - http://blogs.sivarajan.com/

    FaceBook Twitter LinkedIn SS Tech Forum

    This posting is provided AS IS with no warranties,and confers no rights.
    Thursday, November 10, 2011 12:36 AM
  • Hi,

     

    I would like to confirm what is the current situation? If there is anything that I can do for you, please do not hesitate to let me know, and I will be happy to help.

     

    Regards,

     

    Arthur Li

    Forum Support

    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contacttnmff@microsoft.com.


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Monday, November 14, 2011 3:12 AM
    Moderator