My problems seemed to have been solved by simply logging in as the
Administrator from the source domain, on the target domain.  Then I
was able to access all shares in the source domain, as well as run the
ADMT agent with no problems.

I am trying to finish up my ADMT v3.0 migration document to help
others who are running into problems.  I will let you all know when it
is ready.

Thanks for the help.

Joe


On 3/8/06, Joe Lagreca <[EMAIL PROTECTED]> wrote:
> I got ADMT running in a test environment, but now have a few problems.
>
> Problem #1
>
> When I use the wizard to migrate a computer from the source domain to
> the target, I then have the same machine account in both domains.
> Making it impossible for the target domain to access the shares of the
> workstation in the source domain.  I have experienced this problem,
> and found it documented here:
>
> http://www.jsifaq.com/SUBJ/tip4600/rh4655.htm
>
> > 4655 ยป Logon Failure error when accessing a child domain controller from 
> > the parent domain? 08-Jan-02
> >
> > When you attempt to access a child domain controller from the parent 
> > domain, you receive:
> >
> >  Logon Failure: The target account name is incorrect.
> >
> >  This error will occur if a computer in the parent domain has the same 
> > computer name as a computer in the child domain.
> >
> >  To resolve the problem, rename one of the computers.
> >
> >  NOTE: If the computer no longer exists, delete it's machine account.
>
>
> If I delete the the newly migrated computer from the target domain, I
> can then access the shares on the workstation in the source domain.
> Anyone have an idea of how I can get around this limitation?  I don't
> think it is possible to remove the workstation from the source domain
> yet, as it hasn't had the agent dispatched to it to change its domain
> ownership.
>
> Problem #2
>
> Even though I have already added the opposite Domain Admins group to
> the local Administrator group of each machine, I don't appear to have
> admin rights across the trust between domains.
>
> One example is that the target domain cannot access the Admin$ share
> of the workstation in the source domain.
>
> If I go to the source domain workstation and add the administrator of
> the target domain to the local Administrator group of the workstation,
> I can then access the Admin$ share and dispatch the ADMT agent to the
> workstation.
>
> Since this is not practical in a widespread migration, I need to
> figure out how to get administrative privileges across the trust
> between domains.
>
> Thanks.
>
> Joe
>
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to