Error message when you move a user account from a Windows NT 4.0 domain to a Windows Server 2003 domain by using the Active Directory Migration Tool (ADMT) version 3: "The array bounds are invalid"

When you move a user account from a Windows NT 4.0 domain to a Microsoft Windows Server 2003 domain by using the Active Directory Migration Tool version 3.0 (ADMT v3), the following error message may be logged in the migration log: However, you can see that the user account has been created in the Windows Server 2003 domain. Also, you can see that the user account has been moved correctly.

This issue occurs because the user account that has been moved does not have any permissions in the Windows NT 4.0 domain. The LsaEnumerateAccountRights function returns the STATUS_OBJECT_NAME_NOT_FOUND error code. Then, an error message is reported in the ADMT v3 even though the user account was moved successfully.

Note The LsaEnumerateAccountRights function enumerates the permissions that are assigned to an account.

You can safely ignore this error message because the user account has been moved successfully. Then, you can use the migrated user object.

For more information about how to manage user permissions programmatically in Windows NT, click the following article number to view the article in the Microsoft Knowledge Base: