mm....i'm facing some difficult during migrate the user password
I'm setting a PES to export the password from NT server to 2003 server.
During run the ADMT at 2003 server to migrate the user account with password,it pop up this error message:
2004-07-27 13:26:51 WRN1:7557 Failed to copy the password for temp12. A strong password has been generated instead. Unable to copy password. 存取被拒。.
i check it from microsoft,this problem can be solve by:
http://support.microsoft.com/default.aspx?kbid=322981
WRN1:7557 Failed to copy the password for {user.} A strong password has been generated instead. Unable to copy password. Access is denied.
If this error message appears in the Migration.log file, verify the following:
The following registry key value is set on the target domain controllers:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\RestrictAnonymous = 0
Pre-Windows 2000 Compatible Access has Read and Enumerate Entire SAM Domain permissions on the object, as follows:
CN=Server,CN=System,DC={TargetDomain},DC={tld}
The registry key i had set it before.But,what is the meaning of CN=Server,CN=System?
My source domain is NT,there no AD and "Pre-Windows 2000 Compatible Access " group,how can i set it?
Similar description from migration cookbook also:
In the Active Directory Users and Computers snap-in, verify permissions on the PES server object. The PES requires that the “Pre-Windows 2000 Compatible Access” group has “Read All Properties” rights on the following object:
CN=Server,CN=System,DC=<domain_name>
Thanks your any suggestion.
