domain migration 2003>2008 admt error could not verify auditing ....

I have to migrate accounts (users and computer) between an old domain (old)
, one w2k3 server to a new forest (new) one w2k8 server
Following admt guide I:
create a two way trust and tranfer dns zone each other
on new create a new OU
on old:
create a user res_migrator, member of domain admin and delegate permission
on the new ou on the target
create a local group old$$$
added key TcpipClientSupport, dregword 1
add auditing to the w2k8 destination server
enabled Allow cryptography algorithms compatible with Windows NT 4.0 with a
policy on the target server

Afer this I've installed admt and try to tranfer a user group with sid
I always get this error
could not
verify auditing and tcpipclientsupport on damains. will not be able to
migrate sid's. Account is denied.

From the destination server , I can access the old server share, but not c$
(always ask for username and password)
Any idea?
Thank you
Alessandro