migration >> ADMT v3 ERR3:7585 The account replicator is unable to continue

by QW5kcmV3IERvZGQ » Wed, 29 Apr 2009 20:59:01 GMT

Hi Meinolf,

The source domain admins account is running the ADMT as a runas

I get the same result if I log onto the target DC with the source admin
account

Using USRMGR I can administor the source domain when running under the
target domain admin account

I can manually create computer objects with the source domain admin when
logged onto the target dc

The domain trust is set to domain wide authentication and is working correctly

Andrew

"Meinolf Weber [MVP-DS]" wrote:

> Hello Andrew,
>
> Also make sure you can verify the trust:
> http://technet.microsoft.com/en-us/library/cc753821.aspx
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Dear All,
> >
> > I am in the middle of an office migration and I have hit a brick wall
> > and I really need all your help...
> >
> > Source domain NT4
> > Target domain w2k3r2
> > The source account is in the target domains Built in Administrators
> > group so
> > should have total rights over the target domain.
> > When running the ADMT wizard it completes but doesn't create the
> > computer object. As the account is in the Administrators group I
> > haven't needed to delegrate the permissions to the OU.
> >
> > [Settings Section]
> > Task: Computer Migration (29)
> > ADMT Console
> > User: CBEASG\GADMBRYAN
> > Computer: cbegbrasgdc01.c (CBEGBRASGDC01)
> > Domain: cb.winadroot.com (CB)
> > OS: Microsoft Windows Server 2003 R2 5.2 (3790)
> > Service Pack 2
> > Source Domain
> > Name: CBEASG
> > DC: CBUKHX01
> > OS: Windows NT 4.0
> > Target Domain
> > Name: cb.wi.... (CB)
> > DC: cbegbrasgdc01 (CBEGBRASGDC01)
> > OS: Windows Server 2003 5.2 (3790) Service Pack 2
> > OU: LDAP://cb.winadroot.com/OU=Workstations,OU=EMEA-G...
> > Intra-Forest: No
> > Translate Option: Add
> > Translate Files: Yes
> > Translate Local Groups: Yes
> > Translate Printers: Yes
> > Translate Registry: Yes
> > Translate Rights: Yes
> > Translate Shares: Yes
> > Translate User Profiles: Yes
> > Conflict Option: Ignore
> > Perform Pre-check Only: No
> > [Object Migration Section]
> > 2009-04-29 11:18:15 Starting Account Replicator.
> > 2009-04-29 11:18:35 ERR3:7585 The account replicator is unable to
> > continue.
> > Access is denied.
> > 2009-04-29 11:18:35 Operation completed.
> > [Agent Dispatch Section]
> >
>
>
>

Similar Threads

1. ADMT v3 ERR3:7585 The account replicator is unable to continue.

2. ADMT v3 ERR2:7697 & ERR2:7585 During Group Acct Migration

3. ADMT v3 error message ERR3:7330 during profile migration

4. ADMT v3.0 ERR3: 7438 no NTUser.DAT file for "user" was found

I am doing an interforest migration and trying to migrate a user from
domain a (source domain) --> domain b (target domain).  We are
currently housing profiles using DFS (on a Windows Server 2003 R2
server) on a box named File01 which is in domain a.
When ADMT v3 is ran(translate roaming profile option selected) for a
test user we receive an error like the one below in the log.  I am
specifically concerned about is "ERR3: 7438 no NTUser.DAT file for
testuser was found.  The roaming profile cannot be migrated"



[Settings Section]
Task: User Migration (9)
ADMT Console
User: NEWDOMAIN\administrator
Computer: domctl2.newdomain.local (DOMCTL2)
Domain: newdomain.local (NEWDOMAIN)
OS: Microsoft Windows Server 2003 5.2 (3790) Service Pack 2
Source Domain
Name: olddomain (olddomain)
DC: sc-domctl1.olddomain (SC-DOMCTL1)
OS: Windows 2000 Server 5.0 (2195) Service Pack 4
OU:
Target Domain
Name: newdomain.local (NEWDOMAIN)
DC: domctl2.newdomain.local (DOMCTL2)
OS: Windows Server 2003 5.2 (3790) Service Pack 2
OU: LDAP://newdomain.local/OU=newdomainUsers,DC=newdomain,DC=local
Intra-Forest: No
Password Option: Generate passwords, only for new objects = Yes
Password File: 'C:\WINDOWS\ADMT\Logs\passwords.txt'
Migrate Security Identifiers: No
Update Rights: Yes
Translate Roaming Profiles: Yes
Fix group membership: Yes
Conflict Option: Ignore
Source Disable Option: Leave source account
Source Expiration: Do not expire source account
Target Disable Option: Enable target account
Migrate groups: No
Migrate service accounts: Yes

[Object Migration Section]
2007-05-24 10:45:17 Starting Account Replicator.
2007-05-24 10:45:18 CN=Test User - Created
2007-05-24 10:45:18 CN=Test User - Strong password generated.
2007-05-24 10:45:18 WRN1:7874 Disabled the "password never expires"
account option for account 'CN=Test User'.
2007-05-24 10:45:18 ERR3:7438 No NTUser.DAT file for testuser was
found in \\newdomain.local\C$\DFSRoots\User\Profile\testuser. The
roaming profile cannot be migrated.
2007-05-24 10:45:18 Updated user rights for CN=Test User
2007-05-24 10:45:18 Operation completed.

5. ADMT Error 7585: Access Denied when migrating users with group

6. ADMT Error 7585: Access Denied when migrating users with groups

Hi,

I am migrating Users & Groups from a 2000 domain to a new 2003 domain (new 
forest) using ADMT v.3.
I can happily migrate users and groups seperately, but when I attempt to 
update group membership of multiple groups, only the first group in the list 
is updated.  The process then halts with:
ERR3:7585 The account replicator is unable to continue.   Access is denied.

It all works fine if I migrate the groups one at a time, but there are many 
groups and this will kill me!

Here is the full log after I attempted to update memberhip of 3 groups 
(GBPB, GBS7700 and Gbusiness&Commercial) - only the first in the list was 
updated.


[Settings Section]
Task: Group Migration (20)
ADMT Console
    User:       UK-FWL\administrator
    Computer:   uk-fsws001.uk.fwl.local (UK-FSWS001)
        Domain:     uk.fwl.local (UK-FWL)
        OS:         Microsoft Windows Server 2003 5.2 (3790) Service Pack 1
Source Domain
    Name:   fwltech.com (FW-LOGISTICS)
    DC:     fwl-nt07.fwltech.com (FWL-NT07)
        OS:     Windows 2000 Server 5.0 (2195) Service Pack 4
    OU:     
Target Domain
    Name:   uk.fwl.local (UK-FWL)
    DC:     uk-fsws001.uk.fwl.local (UK-FSWS001)
        OS:     Windows Server 2003 5.2 (3790) Service Pack 1
    OU:     LDAP://uk.fwl.local/OU=Employees,DC=uk,DC=fwl,DC=local
Intra-Forest: No
Migrate Security Identifiers: Yes
Update Rights: Yes
Fix group membership: Yes
Conflict Option: Merge, rights = No, members = No, move objects = Yes
Migrate members: Yes
Password Option: Generate passwords, only for new objects = Yes
Password File:   'C:\WINDOWS\ADMT\Logs\passwords.txt'
Translate Roaming Profiles: No
Source Disable Option: Leave source account
Source Expiration: Do not expire source account
Target Disable Option: Set target same as source

[Object Migration Section]
2006-06-06 11:28:09 Starting Account Replicator.
2006-06-06 11:28:10 WRN1:7561 ADMT could not migrate some properties for 
this object type (group) due to schema mismatches.  Please refer to the 
Schema Section in the migration log for a complete listing.  The Schema 
Section will be available once object migration is complete.
2006-06-06 11:28:10 CN=GBPB              - Merged.
2006-06-06 11:28:10 SID for FW-LOGISTICS\GBPB added to the SID History of 
UK-FWL\GBPB
2006-06-06 11:28:11 CN=GBS7799           - Merged.
2006-06-06 11:28:11 SID for FW-LOGISTICS\GBS7799 added to the SID History of 
UK-FWL\GBS7799
2006-06-06 11:28:11 CN=GBusiness&Commercial - Merged.
2006-06-06 11:28:11 SID for FW-LOGISTICS\GBusiness&Commercial added to the 
SID History of UK-FWL\GBusiness&Commercial
2006-06-06 11:28:11 Processing group membership for CN=GBPB.
2006-06-06 11:28:11 LDAP://uk-fsws001.uk.fwl.local/CN=Scott\, 
Julie,OU=Staff,OU=Employees,DC=uk,DC=fwl,DC=local added.
2006-06-06 11:28:11 
LDAP://uk-fsws001.uk.fwl.local/CN=replsrv,OU=Staff,OU=Employees,DC=uk,DC=fwl,DC=local added.
2006-06-06 11:28:12 ERR3:7585 The account replicator is unable to continue.  
 Access is denied.
2006-06-06 11:28:12 Operation completed.


Thanks in advance for any help.

John

7. Importing existing ADMT v3 database to another ADMT v3 server

8. ADMT v3 Automatically disables migrated account

Hi Guys:

I am testing ADMT to perform a migration from NT to AD.

After I migrate the user and password, the user account is automatically 
disabled in the destination domain.

Any idea why this is happening?

Thanks!