ADMT Migration NT4>2003 SID History Issue

Discussion in 'Server Migration' started by D.Trigg, Nov 29, 2005.

  1. D.Trigg

    D.Trigg Guest

    Hey there,

    I am in process of an ADMT 3.0 migration NT4SP6a128 to Win2k3SP1 Native
    Mode.. 90% of the accounts migrate without issue but around 10% have a
    strange SID history translation problem. In the logs the errors are as
    follows:

    ERR2:7111 Failed to add sid history for xxxuser to xxxuser. RC=1378

    I cannot find any reference on the 1378 error.. any ideas?
     
    D.Trigg, Nov 29, 2005
    #1
    1. Advertisements

  2. Hi Dan,

    The 1378 is an error indicating the account already exists. Which means
    when you try to move the account, it appears to be migrating the account
    but not the sid information.

    On the source domain, look for a group called domain_netbios_name$$$.
    Thisshould be under USERS. The account gets added to that group when the
    API for
    adding SID history is called. If the account is not removed from this group
    for some reason( should be automatic), then the next time an attempt to add
    sid history is performed for this account the error (1378) occurs.
    Resolution is to remove the account from this group and then try migrating
    the account again.

    Let me know if you have any questions.

    In addition, just fyi:

    If Novells NDS4NT is installed it replaces SAMSRV.dll, with a proprietry
    SAMSRV.dll, this seems not to fully support the API set the original dll
    supports,
    and therefore the process of migrating a user with SID history seem to fail.

    NDS4NT has not been tested with ADMT. NDS4NT is not supported under
    certain situations as per:
    http://www.microsoft.com/ntserver/techresources/deployment/NTserver/NDS.asp

    322970 How to Troubleshoot Inter-Forest sIDHistory Migration with ADMTv2
    http://support.microsoft.com/?id=322970

    322981 How to Troubleshoot Inter-Forest Password Migration with ADMTv2
    http://support.microsoft.com/?id=322981

    HOpe it helps.

    Best regards,

    Vincent Xu
    Microsoft Online Partner Support

    Get Secure! - www.microsoft.com/security

    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.

    This posting is provided "AS IS" with no warranties, and confers no rights.


    --------------------
     
    Vincent Xu [MSFT], Nov 30, 2005
    #2
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.