Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

ADMT Version 2 does not migrate a computer if an account with an identical NetBIOS name exists


View products that this article applies to.

This article was previously published under Q316073

↑ Back to the top


Symptoms

If you use the Active Directory Migration Tool (ADMT) version 2 to migrate a computer account from one Windows 2000-based domain to another, the migration may not succeed and an "Access Denied" message may be returned when you dispatch a migration agent to the computer. This behavior can occur if a computer account with the same NetBIOS name already exists in the target domain. This is often the result of a computer having been migrated previously and then manually rejoined to the source domain.

↑ Back to the top


Cause

When ADMT version 2 is running in the target domain, it passes the NetBIOS name instead of the DNS name for the computer accounts that are to be migrated. Therefore, an invalid Kerberos service ticket that cannot be interpreted by the computer that is being migrated may be constructed. This issue can occur whether or not you specify the Replace conflicting accounts option.

↑ Back to the top


Workaround

To work around this issue, delete the identical machine accounts in the target domain.

↑ Back to the top


Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

↑ Back to the top


More information

The error code that is returned by this condition is AP_ERR_MODIFIED. If the machine account in the target domain has been disabled, the error code is STATUS_ACCOUNT_DISABLED.

The Dispatch.log file that is created contains entries that are similar to:
2002-01-09 13:31:18 ERR2:7037 You do not have administrator privileges on \\ADMTW2K-WS1. The agent will not be installed.
2002-01-09 13:31:18 ERR2:7005 Failed to launch agent on \\ADMTW2K-WS1, hr=80070005 Access is denied.

↑ Back to the top


Keywords: kbbug, kbfix, KB316073

↑ Back to the top

Article Info
Article ID : 316073
Revision : 8
Created on : 2/27/2007
Published on : 2/27/2007
Exists online : False
Views : 462