ADMT 3.2 and PES 3.1 installation errors on Windows Server 2012

When you try to install the Active Directory Migration Tool (ADMT) 3.2 on a Windows Server 2012 server, you receive the following error:When you try to install the Password Export Server (PES) 3.1 on a Windows Server 2012 domain controller, you receive the following error:

ADMT 3.2 and PES 3.1 are not supported for installation on Windows Server 2012. The installers intentionally block unsupported operating systems.

When you migrate to a Windows Server 2012 domain, install ADMT 3.2 on a Windows Server 2008 R2 server that can operate as the migration computer.�You have to have a Windows Server 2008 R2 domain controller in the target environment.

Note If you already specified a Windows Server 2012 domain functional level, and you want the ADMT server to be a domain controller, you can lower the forest and domain functional level by using Windows PowerShell commands. For example, you can use commands that resemble the following:Windows Server 2012 implements only one feature, Dynamic Access Control, that has a Windows Server 2012 domain functional level requirement when the Windows Server 2012 domain is configured always to provide claims from all domain controllers. If you do not use this feature, you can lower the functional levels to support previous operating system domain controllers for ADMT migrations. When the migration is complete, you can raise the domain and forest functional levels back to Windows Server 2012.

This overall behavior is by design. The error that the ADMT installation reports is a code defect. The message should state "The Active Directory Migration Tool v3.2 must be installed on Windows Server 2008 or Windows Server 2008 R2."

For more information about Kerberos claims in Windows Server 2012, go to the following Microsoft TechNet website: For more information about ADMT, go to the following Microsoft TechNet website: