Active directory users and groups migration

I am trying to migrate users from a server 2003 domain to a second 2003
domain. Can any one tell me how I can do it. The new domain is an exchange
domain and the old is not, so do I have to run forest prep first. I tryed to
creat a trust and run admt, but it comes up with access denied. Can some one
help me.

"Malik" <> wrote in message
news:36400136-B6A7-4D9E-AAC0-...
>I am trying to migrate users from a server 2003 domain to a second 2003
> domain. Can any one tell me how I can do it.

Are you using ADMT? (version 3?)

If not, what are you doing to "try to migrate"?

> The new domain is an exchange
> domain and the old is not, so do I have to run forest prep first. I tryed
> to
> creat a trust and run admt, but it comes up with access denied. Can some
> one
> help me.

Trusts external to the forest are usually dependent on
NetBIOS.

Does the trust exist? (Or did it fail at the time you tried
to create the trust?)

Are you on one or multiple subnets? NetBIOS has a practical
requirement for WINS Server if there are multiple subnets
involved.

If you use WINS Server (or add it), are ALL of the DCs in
both domains setup as WINS "Clients" (on their NIC properties)?


--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

Thank you for reply.

I have checked every thing you said. I am using ADMT 3.0, both domains are
on the same subnet. Wins is working as well. The trust did not fail when I
tryed to creat it. I have tested the trust as it is working fine. when I run
ADMT it comes back with either access denied or DC not found after I have
selected source and destination domain and DC. I think it dont even try to
find the DC as it takes les then a micro second to return the error.

Are these domains in the same forest or different forests?

Can the sevrer running ADMT resolve the fqdn of the DC's in both the source
and destination domains?

Is the account running ADMT a member of the domain admins group in both the
source and destination domains?

--
/kj
"Malik" <> wrote in message
news:64A94C05-E2C3-4288-AC1B-...
> Thank you for reply.
>
> I have checked every thing you said. I am using ADMT 3.0, both domains are
> on the same subnet. Wins is working as well. The trust did not fail when I
> tryed to creat it. I have tested the trust as it is working fine. when I
> run
> ADMT it comes back with either access denied or DC not found after I have
> selected source and destination domain and DC. I think it dont even try to
> find the DC as it takes les then a micro second to return the error.

"Malik" <> wrote in message
news:64A94C05-E2C3-4288-AC1B-...
> Thank you for reply.
>
> I have checked every thing you said. I am using ADMT 3.0, both domains are
> on the same subnet. Wins is working as well. The trust did not fail when I
> tryed to creat it. I have tested the trust as it is working fine. when I
> run
> ADMT it comes back with either access denied or DC not found after I have
> selected source and destination domain and DC. I think it dont even try to
> find the DC as it takes les then a micro second to return the error.

[Read KJ's response too.]

Are all DCs WINS Clients?

Which WAY did you create the external trust? (This is an
external trust right from domain in one forest to domain in
a different forest?)

Trust should go FROM Source TO Target. Current->New domain.

Admin running ADMT in NEW needs to be included in Domain
Admins of SOURCE domain.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

well the domains are in different forests. one is Windows 2K3 Ent and other
is W2K3 R-2 Std. I am running ADMT from Enterprise admin and the trust is two
way in and out.

"Herb Martin" wrote:

> "Malik" <> wrote in message
> news:64A94C05-E2C3-4288-AC1B-...
> > Thank you for reply.
> >
> > I have checked every thing you said. I am using ADMT 3.0, both domains are
> > on the same subnet. Wins is working as well. The trust did not fail when I
> > tryed to creat it. I have tested the trust as it is working fine. when I
> > run
> > ADMT it comes back with either access denied or DC not found after I have
> > selected source and destination domain and DC. I think it dont even try to
> > find the DC as it takes les then a micro second to return the error.
>
> [Read KJ's response too.]
>
> Are all DCs WINS Clients?
>
> Which WAY did you create the external trust? (This is an
> external trust right from domain in one forest to domain in
> a different forest?)
>
> Trust should go FROM Source TO Target. Current->New domain.
>
> Admin running ADMT in NEW needs to be included in Domain
> Admins of SOURCE domain.
>
> --
> Herb Martin, MCSE, MVP
> Accelerated MCSE
> http://www.LearnQuick.Com
> [phone number on web site]
>
>
>

Trusts are dependent upon netbios name resolution (WINS) but locating DC's
GC's require DNS.
It sounds like your ADMT server is unable to locate a DC in the source
domain. Since your doing inter-forest, the DC's in the target domain should
either have their DNS services hosting a secondary zone of the source domain
or have a stub zone for the source. ( either work fine - your preference).

--
/kj
"Malik" <> wrote in message
news:BFFFB7A0-201A-4F97-BFEC-...
> well the domains are in different forests. one is Windows 2K3 Ent and
> other
> is W2K3 R-2 Std. I am running ADMT from Enterprise admin and the trust is
> two
> way in and out.
>
> "Herb Martin" wrote:
>
>> "Malik" <> wrote in message
>> news:64A94C05-E2C3-4288-AC1B-...
>> > Thank you for reply.
>> >
>> > I have checked every thing you said. I am using ADMT 3.0, both domains
>> > are
>> > on the same subnet. Wins is working as well. The trust did not fail
>> > when I
>> > tryed to creat it. I have tested the trust as it is working fine. when
>> > I
>> > run
>> > ADMT it comes back with either access denied or DC not found after I
>> > have
>> > selected source and destination domain and DC. I think it dont even try
>> > to
>> > find the DC as it takes les then a micro second to return the error.
>>
>> [Read KJ's response too.]
>>
>> Are all DCs WINS Clients?
>>
>> Which WAY did you create the external trust? (This is an
>> external trust right from domain in one forest to domain in
>> a different forest?)
>>
>> Trust should go FROM Source TO Target. Current->New domain.
>>
>> Admin running ADMT in NEW needs to be included in Domain
>> Admins of SOURCE domain.
>>
>> --
>> Herb Martin, MCSE, MVP
>> Accelerated MCSE
>> http://www.LearnQuick.Com
>> [phone number on web site]
>>
>>
>>