ADMT2 : Password Migration NT4 to W2K3

[Andy Franczvai]

Hi everyone,

I am running into some problems getting the password to copy over for
users when running the User Migration Wizard within ADMT2 for a
migration from NT to W2K3.

I have done the following:
Setup trusts between the two domains
Ran ADMT with /key option for NT4 domain
Installed PES on one of our NT4 BDCs - imported key generated from
ADMT
Setup appropriate members of admin groups on each domain
Set registry keys up on BDC/PDC to allow for password exports
Created local group 'DomainName'$$$ on NT4 domain

When I run the tool, the user is migrated over, but I get an error on
the password migration. Here is the migration.log for when I tried to
migrate my own account:
2003-06-27 15:38:27
2003-06-27 15:38:27 Active Directory Migration Tool, Starting...
2003-06-27 15:38:27 Starting Account Replicator.
2003-06-27 15:38:28 Account Migration COPDOM AD CopyUsers:Yes
CopyGlobalGroups:No CopyLocalGroups:No CopyComputers:No StrongPwd:All
2003-06-27 15:38:30 CN=afranczvai - Created
2003-06-27 15:38:30 SID for COPDOM\afranczvai added to the SID History
of AD\afranczvai
2003-06-27 15:38:30 WRN1:7557 Failed to copy the password for
afranczvai. A strong password has been generated instead. Unable to
copy password. Access is denied..
2003-06-27 15:38:31 Operation completed.

Any ideas, or something I may have overlooked? Any help is
appreciated

Thank you,
af

 

[Yong Liang [MSFT]]

Have you restart the BDC after set the regkey to allow password exports?
http://support.microsoft.com/default.aspx?scid=kb;en-us;326480

Regards,
Yong

 

[Andy Franczvai]

Yong,

Yes, I did perform a reboot of the BDC after the registry change, and
I still got the error. Any other ideas on what might cause the 7557
error?