You guys are right, it wasn't password complexity. I just switched
complex passwords back on to see if I could reproduce. No dice,
passwords still copy over fine when migrating an account. I'm
positive that is the only thing I changed. I'm scratching my head
here.
List info :
, Willem
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier, Guido
Sent: Sunday, September 19, 2004 12:42 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] ADMT v2 PES question
I second Tony's point: you shouldn't need to change the policy for PW
allows
you to run it with special credentials = thus anonymous access is no
longer allowed.
/Guido
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray
Sent: Friday, September 17, 2004 5:15 PM
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] ADMT v2 PES
and places it in a file in the ADMT\logs directory.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jordan Arendt
Sent: September 15, 2004 6:11 PM
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] ADMT v2 PES question
1. Yes. Can ping both ways
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] ADMT v2 PES question
Jordan
You might want to first double-check David's statement below. My
understanding is that ADMT 2.0 doesn't enforce complexity in any way for
exported passwords. It doesn't actually export the password, only the hash.
In other
experience
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray
Sent: September 17, 2004 7:48 AM
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] ADMT v2 PES question
Jordan
You might want to first double-check David's statement below. My
understanding
As soon as I modified my domain security policy on the w2k3 domain I
was importing into the password migrated accross no problem. That is
the only change I made (changed password must meet complexity
requirments to disabled).
On Fri, 17 Sep 2004 07:48:21 -0400, Tony Murray [EMAIL PROTECTED]
first hand
experience
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray
Sent: September 17, 2004 7:48 AM
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] ADMT v2 PES question
Jordan
You might want to first double-check David's statement
: September 17, 2004 7:48 AM
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] ADMT v2 PES question
Jordan
You might want to first double-check David's statement below. My
understanding is that ADMT 2.0 doesn't enforce complexity in any way for
exported passwords. It doesn't actually export
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] ADMT v2 PES question
1. Yes. Can ping both ways from each machine. Wins servers are entered
correctly.
2. Yes the Pre-Windows 2000 Compatible Access group has the following
members:
Anonymous Logon
Authenticated Users
Everyone
On Wed
Ensure that whatever user you are logged in as and running ADMTv2 with
has Administrator privileges to the NT4 domain.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jordan Arendt
Sent: Wednesday, September 15, 2004 1:53 PM
To: [EMAIL PROTECTED]
Subject:
Jordan,
1) Did you verify that both DNS _and_ WINS resolution are functioning
properly ? You will need both of these to function properly for the
migration to work.
2) Did you add both the Anonymous Logon group as the Everyone group to the
Pre-Windows 2000 Compatible Access group ?
Regards,
I'm using Administrator of the destination Domain (2K3). I've added
Domain admins of destination domain to Administrators of source NT
domain.
On Wed, 15 Sep 2004 17:06:50 -0400, Bernard, Aric [EMAIL PROTECTED] wrote:
Ensure that whatever user you are logged in as and running ADMTv2 with
has
1. Yes. Can ping both ways from each machine. Wins servers are
entered correctly.
2. Yes the Pre-Windows 2000 Compatible Access group has the following members:
Anonymous Logon
Authenticated Users
Everyone
On Wed, 15 Sep 2004 23:18:41 +0200, Paul van Geldrop [EMAIL PROTECTED] wrote:
Jordan,
] On Behalf Of Jordan Arendt
Sent: September 15, 2004 6:11 PM
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] ADMT v2 PES question
1. Yes. Can ping both ways from each machine. Wins servers are entered
correctly.
2. Yes the Pre-Windows 2000 Compatible Access group has the following
members
Jonthan
I shouldn't think the name of the group should cause any problems anyway, as ADMT
would use the SID. The Admins du Domaine group should have a SID in the format:
SID: S-1-5-domain-512
Can you confirm your Admins du Domaine has this value?
Tony
-- Original Message
ActiveDir
Pour :[EMAIL PROTECTED]
cc :
Objet :Re: [ActiveDir] ADMT v2 : Problem with Domain Admins Group
Jonthan
I shouldn't think the name of the group should cause any problems anyway, as ADMT would use the SID. The Admins du Domaine group should have a SID
Just to Clarify,
Is the problem that the group will not migrate or that the migration fails and doesn't take any of the group members?
I know that the built in groups are not supposed to migrate but the accounts should be able to continue without issue. The group should just throw an error in
the users into the appropriate groups (if you
really want this).
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray
Sent: Mittwoch, 10. März 2004 12:58
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] ADMT v2 : Problem with Domain Admins Group
Jonthan
I
Harbinger and Extricity
Atlanta, GA
-Original Message-
From: Salandra, Justin A. [mailto:jasalandra;chcsnet.org]
Sent: Friday, October 25, 2002 9:24 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] ADMT v2
Is there any migration tool that doesn't require the target
be in native
]
Subject: RE: [ActiveDir] ADMT v2
Yea, it meets all those. It's actually an AD to AD migration. We
re-ran
some tests today and the accounts came across with passwords intact and
SIDhistory. Way cool. GO figure why the other tests didn't work. I
guess
we were too impatient when we tried
Is there any migration tool that doesn't require the target be in native
mode.
-Original Message-
From: Rick Kingslan [mailto:rkingsla;cox.net]
Sent: Thursday, October 24, 2002 6:54 PM
To: [EMAIL PROTECTED]
Subject:RE: [ActiveDir] ADMT v2
erADMT requires
-Original Message-
From: Rick Kingslan [mailto:rkingsla;cox.net]
Sent: Thursday, October 24, 2002 6:54 PM
To: [EMAIL PROTECTED]
Subject:RE: [ActiveDir] ADMT v2
ADMT requires that the target be native, too.
-Original Message-
From: [EMAIL PROTECTED
http://www.aelita.com/products/DMW.htm
For a few grand this does everything, 'nuff said.
-Original Message-
From: Salandra, Justin A. [mailto:jasalandra;chcsnet.org]
Sent: Friday, October 25, 2002 9:24 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] ADMT v2
Is there any migration
Aelita Domain Migration Wizard... (For one)
-Original Message-
From: Salandra, Justin A. [mailto:jasalandra;chcsnet.org]
Sent: Friday, October 25, 2002 9:24 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] ADMT v2
Is there any migration tool that doesn't require the target
Does it use SID History for the migration?
-Original Message-
From: Sullivan, Kevin [mailto:KSullivan;aelita.com]
Sent: Friday, October 25, 2002 6:50 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] ADMT v2
Aelita Domain Migration Wizard... (For one)
-Original Message-
From
Sure does, aeltia does everything. ;p
-Original Message-
From: Stuart Kwan [mailto:skwan;windows.microsoft.com]
Sent: Friday, October 25, 2002 11:01 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] ADMT v2
Does it use SID History for the migration?
-Original Message-
From
Replied via email... (If anyone else is interested let me know and I
will post the response)
-Original Message-
From: Stuart Kwan [mailto:skwan;windows.microsoft.com]
Sent: Friday, October 25, 2002 11:01 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] ADMT v2
Does it use SID History
Is it free?
-Original Message-
From: Sullivan, Kevin [mailto:KSullivan;aelita.com]
Sent: Friday, October 25, 2002 9:50 AM
To: [EMAIL PROTECTED]
Subject:RE: [ActiveDir] ADMT v2
Aelita Domain Migration Wizard... (For one)
-Original Message-
From: Salandra, Justin
Nope...
-Original Message-
From: Salandra, Justin A. [mailto:jasalandra;chcsnet.org]
Sent: Friday, October 25, 2002 11:36 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] ADMT v2
Is it free?
-Original Message-
From: Sullivan, Kevin [mailto:KSullivan;aelita.com]
Sent
: [EMAIL PROTECTED]
[mailto:ActiveDir-owner;mail.activedir.org] On Behalf Of
Sullivan, Kevin
Sent: Friday, October 25, 2002 10:32 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] ADMT v2
Replied via email... (If anyone else is interested let me
know and I will post the response
details...
Kevin,
-Original Message-
From: Rick Kingslan [mailto:rkingsla;cox.net]
Sent: Friday, October 25, 2002 1:43 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] ADMT v2
I'd be interested - Yes, please do post it.
Rick Kingslan - Microsoft MVP [Windows NT/2000]
Microsoft Certified
I'm interested too, if you could either post it or email it to me, that
would be great.
-gil
-Original Message-
From: Rick Kingslan [mailto:rkingsla;cox.net]
Sent: Friday, October 25, 2002 10:43 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] ADMT v2
I'd be interested - Yes, please
PROTECTED]
Subject: RE: [ActiveDir] ADMT v2
Not all that interesting but what I told Stuart was that our migration
technologies will use SID History in both Native and Mixed mode domains.
When in mixed mode, the user will only benefit from SID History if a W2k
DC does the authentication. This is done
This is fully supported by Microsoft.
-Original Message-
From: DiBias, Chip [mailto:Chip.DiBias;bindview.com]
Sent: Friday, October 25, 2002 5:30 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] ADMT v2
Kevin,
Would Microsoft provide support if something happened during
what different means here).
I will try to get more information and post it next week.
-Original Message-
From: Sullivan, Kevin
Sent: Friday, October 25, 2002 10:08 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] ADMT v2
This is fully supported by Microsoft.
-Original Message
So I can use ADMT v2 in a Windows 2000 AD environment to migrate between
domains? Such as parent to child?
-Original Message-
From: Rick Kingslan [mailto:rkingsla;cox.net]
Sent: Wednesday, October 23, 2002 6:50 PM
To: [EMAIL PROTECTED]
Subject:RE: [ActiveDir] ADMT v2
PROTECTED]
To:
Sent: 10/24/2002 11:19 AM
Subject: RE: [ActiveDir] ADMT v2
I believe there are prune and graft tools that will let you do a
intra-forest migration like that. I look at ADMT as an inter-forest
migration tool. I have not investigated the intra-forest tools so I
don't
have the details
:RE: [ActiveDir] ADMT v2
Version 1 was/is usable in Win2k environments as well - typically cross
forest.
From the ADMT v 2.0 README:
Scripting and command-line interface
Password migration
Migration log files
Credentials needed for migration operators
SID Mapping Files for security
A. [mailto:jasalandra;chcsnet.org]
Sent: Thursday, October 24, 2002 6:48 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] ADMT v2
So I can use ADMT v2 in a Windows 2000 AD environment to migrate between
domains? Such as parent to child?
-Original Message-
From: Rick Kingslan [mailto:rkingsla
-Original Message-
From: [EMAIL PROTECTED]
[mailto:ActiveDir-owner;mail.activedir.org] On Behalf Of
Salandra, Justin A.
Sent: Thursday, October 24, 2002 8:48 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] ADMT v2
So I can use ADMT v2 in a Windows 2000 AD environment to
migrate
]
Subject:RE: [ActiveDir] ADMT v2
Version 1 was/is usable in Win2k environments as well - typically cross
forest.
From the ADMT v 2.0 README:
Scripting and command-line interface
Password migration
Migration log files
Credentials needed for migration operators
SID Mapping Files
: Thursday, October 24, 2002 9:48 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] ADMT v2
So I can use ADMT v2 in a Windows 2000 AD environment to
migrate between
domains? Such as parent to child?
-Original Message-
From: Rick Kingslan [mailto:rkingsla;cox.net
ADMT requires that the target be native, too.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:ActiveDir-owner;mail.activedir.org] On Behalf Of
Salandra, Justin A.
Sent: Thursday, October 24, 2002 11:18 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] ADMT v2
But move
from magic.
--- Arthur C. Clarke
-Original Message-
From: [EMAIL PROTECTED]
[mailto:ActiveDir-owner;mail.activedir.org] On Behalf Of Ayers, Diane
Sent: Tuesday, October 22, 2002 9:55 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] ADMT v2
Yea, it meets all those. It's
Kingslan [mailto:rkingsla;cox.net]
Sent: Monday, October 21, 2002 1:37 PM
To: [EMAIL PROTECTED]
Subject:RE: [ActiveDir] ADMT v2
Diane,
Look under the ADMT folder in the I386 directory.
Rick Kingslan - Microsoft MVP [Windows NT/2000]
Microsoft Certified Trainer
MCSA, MCSE+I
-Original Message-
From: [EMAIL PROTECTED]
[mailto:ActiveDir-owner;mail.activedir.org] On Behalf Of
Salandra, Justin A.
Sent: Wednesday, October 23, 2002 10:44 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] ADMT v2
What is the difference between ADMT v2 and v1? Can you use
the ADMT
Sez:
DOh!
Thanks...
-Original Message-
From: Rick Kingslan [mailto:rkingsla;cox.net]
Sent: Monday, October 21, 2002 10:37 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] ADMT v2
Diane,
Look under the ADMT folder in the I386 directory.
Rick Kingslan - Microsoft MVP [Windows NT/2000
-Original Message-
From: Tony Murray [mailto:tony;mail.activedir.org]
Sent: Monday, October 21, 2002 11:46 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] ADMT v2
...and the really good news about ADMT 2.0 is that the version on the .NET
RC1 CD is fully supported by Microsoft.
Tony
;mail.activedir.org]On Behalf Of Tony Murray
Sent: Tuesday, October 22, 2002 8:32 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] ADMT v2
Yes. It's been a while since I've done a migration, but does your PES meet
the following criteria?:
Must be installed on a Domain Controller (PDC or BDC)
The Domain
As Homer Sez:
DOh!
Thanks...
-Original Message-
From: Rick Kingslan [mailto:rkingsla;cox.net]
Sent: Monday, October 21, 2002 10:37 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] ADMT v2
Diane,
Look under the ADMT folder in the I386 directory.
Rick Kingslan - Microsoft MVP
51 matches
Mail list logo
