2000 to 2003 ADMT migration cannot access file shares on source domain

Discussion in 'Server Migration' started by Mustu, Jan 24, 2006.

  1. Mustu

    Mustu Guest

    Hi

    I am in the process of migrating a 2000 AD to a 2003 server AD. I am using
    ADMT 2 to do the migration and its been working ok so far except for a
    problem related to accessing file shares on the source domain. When a
    migrated user is logged on to the target domain from a migrated workstation,
    the user is unable to access file shares that are on the source domain that
    have been explicitly shared to the user (when the user was in the source
    domain). I made sure that I enabled the SID history when migrating the
    users. I also have established a two-way non transitive trust between the
    domains which has been validated as well. What have I missed ?

    Any ideas ?

    Regards,
    -Mustu
     
    Mustu, Jan 24, 2006
    #1
    1. Advertisements

  2. Mustu

    Jason Tan Guest

    Hello,

    Thanks for posting!

    If the issue occurred on the only one migrated user account I think the
    process of the migration for user accounts is no problem. However the issue
    may occur due to the unexpected corrupt migrated user account. For
    convenience I suggest you remove the permission of this problematic user on
    the shared files on the source domain and re-grant the permissions again.
    Check to see if the issue persists. If the issue occurred on all the
    migrated users I suggest you attempt to migrate the user accounts gain
    according to the following article:

    Active Directory Migration Tool Overview
    <http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/admt
    ..asp>

    Migrating from Windows NT Server 4.0 to Windows Server 2003 Plan
    <http://www.microsoft.com/downloads/details.aspx?FamilyID=e92cf6a0-76f0-4e25
    -8de0-19544062a6e6&DisplayLang=en>

    Migrating from Windows NT Server 4.0 to Windows Server 2003
    <http://www.microsoft.com/seminar/shared/asp/view.asp?url=/Seminar/en/200303
    24TNT1-74/manifest.xml>

    Download Active Directory Migration Tool v.2.0
    <http://www.microsoft.com/downloads/details.aspx?FamilyID=788975b1-5849-4707
    -
    9817-8c9773c25c6c&DisplayLang=%20en>

    Active Directory Migration Tool v3.0
    <http://www.microsoft.com/downloads/details.aspx?FamilyID=6f86937b-533a-466d
    -a8e8-aff85ad3d212&DisplayLang=en>

    Hope the information helps.

    Best Regards,

    Jason Tan

    Microsoft Online Partner Support
    Get Secure! - www.microsoft.com/security

    =====================================================

    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.

    =====================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
    | From: "Mustu" <>
    | Subject: 2000 to 2003 ADMT migration cannot access file shares on source
    domain
    | Date: Tue, 24 Jan 2006 12:41:45 +0600
    | Lines: 18
    | X-Priority: 3
    | X-MSMail-Priority: Normal
    | X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
    | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
    | X-RFC2646: Format=Flowed; Original
    | Message-ID: <Op#>
    | Newsgroups: microsoft.public.windows.server.migration
    | NNTP-Posting-Host: 220.247.220.180
    | Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
    | Xref: TK2MSFTNGXA02.phx.gbl
    microsoft.public.windows.server.migration:22153
    | X-Tomcat-NG: microsoft.public.windows.server.migration
    |
    | Hi
    |
    | I am in the process of migrating a 2000 AD to a 2003 server AD. I am
    using
    | ADMT 2 to do the migration and its been working ok so far except for a
    | problem related to accessing file shares on the source domain. When a
    | migrated user is logged on to the target domain from a migrated
    workstation,
    | the user is unable to access file shares that are on the source domain
    that
    | have been explicitly shared to the user (when the user was in the source
    | domain). I made sure that I enabled the SID history when migrating the
    | users. I also have established a two-way non transitive trust between the
    | domains which has been validated as well. What have I missed ?
    |
    | Any ideas ?
    |
    | Regards,
    | -Mustu
    |
    |
    |
     
    Jason Tan, Jan 24, 2006
    #2
    1. Advertisements

  3. Mustu

    Mustu Guest

    Thanks. The problem is in general for all the users. I tried migrating the
    user accounts again choosing the option of replacing existing users. It
    still gives me the same error of access denied when trying to access
    resources on the source domain from while being logged onto the target
    domain. I even tried adding the target domains 'Domain Users' security group
    into the 'Users' built-in security group of the source domain. That didnt
    work either.

    Regards,
    -Mustu
     
    Mustu, Jan 25, 2006
    #3
  4. Hi Mustu,

    Jason is on holiday and I will work with you .

    From the symptom, it seems that the SID history is not migrated well. I'd
    like to suggest you follow the article as below:

    326480 How to use Active Directory Migration Tool version 2 to migrate from
    Windows 2000 to Windows Server 2003
    http://support.microsoft.com/default.aspx?scid=kb;EN-US;326480

    to migrate the accounts again. If the problem still occurs, please send me
    the ADMT log via

    Thanks.

    Best regards,

    Vincent Xu
    Microsoft Online Partner Support

    Get Secure! - www.microsoft.com/security

    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.

    This posting is provided "AS IS" with no warranties, and confers no rights.


    --------------------
     
    Vincent Xu [MSFT], Jan 25, 2006
    #4
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.