Problem migrating user account SID

Problem migrating user account SID
I’m trying to migrate user accounts SID from a Windows 2003 domain to a Windows 2008 domain using the command line admt.exe. There is a trust between the 2 domains and I’m able to migrate a user account using admt 3.1 wizard including SID. The wizard asks me for a user account in the source domain with administrative right for the SID migration.  In the wizard I use the same credentials as my current session. This works fine!!
But, when I’m using the command line “admt user” in an administrative cmd box i’m not prompted for any credentials in the source domain.  My current credentials have the proper right in the source domain so that should not be any problem but admt is not able to migrate the user SID and gives the following error:
ERR2:7615 SID History cannot be updated for xxxxx. You must be an administrator in the source domain
Any ideas ??

I to am seeing this error - running on a Target DC.
Command line: admt group /O: GroupOption2.txt /F: test.txt /TO:corporate/Groups
Option File:
[Migration]
SourceDomain=Source.com
TargetDomain=corp.target.com
PasswordOption=Copy
PasswordServer=blade3.source.com
ConflictOptions=MERGE
[User]
MigrateSIDs=Yes
[Group]
MigrateSIDs=Yes
UpdatePreviouslyMigratedObjects=Yes
FixGroupMembership=Yes
MigrateMembers=No
UpdateUserRights=YES
[Security]
TranslationOption=Add
Error from the logs:
2010-02-15 11:47:14 ERR2:7615 SID History cannot be updated for test group deleteme. You must be an administrator in the source domain.
The account I am logged in to the target DC is a member of the Administrators group on both domains and of the Domain Admins on the source.
Any ideas? Searching (with Bing and that other one) only turns up two relevant hits, this thread and a win2000 tech net article.
Extra info:
Source: Windows 2003 (OS) - Windows 2000 native functional levels (domain and forest)
Target: Windows 2008 (OS) - Windows 2003 functional
Sorry for the retarded formatting.

Similar Messages

  • Migrated User Account Keyboard Problem AFTER Login

    I have a brand-new MacBookPro (with multi-touch trackpad) that came with Leopard preinstalled. When I first started up the new computer, I set up a new administrator user account first. Then I used Migration Assistant to migrate my primary user account from my PowerBook G4, which is running the latest version of Tiger. I can log into my old user account with the same password I have always used, and everything looks fine--my old desktop is there, my Mail, iCal and iTunes settings all look great, etc.--but I can't use the keyboard. I can use the mouse to click on menus; the keys for the volume and backlight controls work, and some of the keys on the right side of the keyboard work (which seems particularly weird), but I can't do anything else with the keyboard. When I log out of the account and try to go back to the new admin account, the keyboard no longer works at all until I reboot. If I go directly into the new admin account, the keyboard is fine; it only starts locking up AFTER I log into my old user account. I have not had any keyboard problems with any other user accounts that I have created from scratch on the MacBookPro, nor have I had problems with the other user accounts I migrated from the PowerBook. After consulting with an Apple rep on the phone, I have tried the following things:
    1. deleting my migrated keychain file on the problem user account and letting it make a new login keychain;
    2. deleting the original default keychain on the PowerBook and re-running the Migration Assistant;
    3. deleting the problem user on the MacBookPro using the option of creating a disk image, and then creating an empty file in the Users folder with the same name as the problem user account and then dragging the files from the disk image into the folder, and then creating a new version of the user account with the same name, password, etc.;
    4. running Disk Utility to fix permissions (multiple times);
    5. I have completely erased and reinstalled the system on the MacBookPro using the install DVDs twice. The first time, I ran Migration Assistant immediately after the "Welcome," and the second time I set up a new administrator account first and then ran Migration Assistant.
    6. I have also tried the steps outlined in this article: http://docs.info.apple.com/article.html?artnum=306840.
    7. I have tried moving my user files over by hand but then I have a ton of permission problems and I was having trouble getting my Mail settings/mailboxes to move over properly. I've spent hours and hours on this.
    I have NEVER had so much trouble upgrading to a new computer or a new OS in all the years I've owned Macs! What am I missing???

    Well...I'm not sure which of the following fixed my problem, but once I realized it was something to do with the numeric keypad keys, I went into both the Keyboard & Mouse preferences and the Universal Access preferences and I made sure that I set everything back to the default settings. I suspect that going to Keyboard&Mouse-->Keyboard Shortcuts and clicking on "Restore Defaults" is what did the trick. So far, so good. I hope this helps somebody else; I couldn't find anything else anywhere about this somewhat quirky problem.

  • Migration Assistant won't migrate User Account settings

    I have Mac OS 10.7.5 running on the internal hard drive of my mid-2011 iMac. Because I'm having some issues with it that I suspect is due to old data/settings affecting 10.7.5, I wanted to see if installing Mac OS 10.8 might fix them. I installed 10.8 on an external FireWire drive but just did a clean install of the OS initially without migrating anything from the internal drive. My plan was to migrate things slowly rather than everything at once. Well I hit a snag at the outset when I tried to migrate my User settings; Migration Assistant says it can't do with out renaming my user account! The problem is that I don't know why this is happening AND I don't know if MA is talking about the user account in 10.8 or the one in 10.7.
    Any idea as to what I can do? I was thinking of wiping the external drive and starting over but this time have the User account(s) migrated as part of the install; might this work?
    BTW, when migrating AFTER a new OS install, is it better to have MA in the NEW OS pull the data from the old OS or have MA in the OLD OS push the data to the new OS (is it even possible to do this? I've always had the new MA pull the data from the old OS.)?

    OK, yesterday I wiped the drive and started over. When I got to the Setup/Migration Assistant, I was given 4 options:
    Users; Applications; Settings; Other files and documents... Under the Users option was a drop down where I could select which users to transfer; I selected mine and left the other ones (a "Test" account & an "Apple Service" account). Under the Settings option I could select "Computer" and/or "Network"; I selected both.The Applications & Other... options did not have ant drop down selections; I de-selected both.
    After the installation was complete, I let the iMac run for several hours with no hint of the slow down that happens on the Mac OS 10.7.5 system. I then used the Assistant and had my applications copied over. Oh, I also created new "Test" and "Apple Service" user accounts.
    OK, so what exactly is migrated via the "Other..." option?

  • Problem with user account

    I can log into my primary user account, however each login attempt thereafter to my apps or any website  allows me to enter user id and only one character of the password. Then my computer seems to lock up requiring a force quit. Logging into my secondary user account does not replicate this problem. I suspect a corrupt file somewhere. What can i do?

    I found the problem. I inadvertently turned the "mouse keys on"  in Universal Access. This had caused the number keys on the far right side of my keyboard to be dead, I thought I was unable to login anywhere because of not being able to enter any alpha-numeric passwords. I'm glad thats over. I've got to be more careful about clicking things. Anyway, Peace.

  • HT2518 How do you reset the password on a migrated user account? Mac wants the old password putting in before we can set a new password and the old password won't work.  How do we get around this?

    Used Migraton Assist to transfer data from old Dell PC onto new Macbook Pro.  Data has come across but cannota access the User Account from the Dell.  It is displayed on the desktop of the Mac but is requesting and new password.  Before we can reset the password we have to put in the old password.  We have put in the old password but it doesn't work and therefore we can't reset the password and get into the User Account. 
    How do we get around this problem so that we can access the User Account.
    Although the data has transferred we cannot see our contacts transferred from Outlook into Mail.  We are wondering if they are contained within our User Account, but can't find out until we can access the it?
    Help wold be much appreciated.
    Pensos

    Hello:
    Hopefully this will help you:
    http://support.apple.com/kb/PH4117
    Barry

  • Migrating user account on same computer?

    I thought I'd be able to find the answer to this just by searching the forum, but everything related to what I wish to do seems to be talked about in terms of one computer to another. However I wish to migrate from one account on my computer to a fresh one on the same computer, which seems like it would be simple, but I've been unable to figure it out on my own.
    The background is this: my G5 being four years old, my main user account that I have been using all this time has become a bit "sluggish." I created a new account and there is a marked difference between their responsiveness, both system-wide and on-line, so instead of troubleshooting what is bogging down the old account I thought I would just migrate over to the new one. Also, I was running the old account as admin, which I understand is not advisable, so I figured I would keep the old account for admin purposes while performing my day-to-day activities in the new account.
    I was surprised to find that there is no way for me to easily access all my files on my old account from my new account (read and write) simply by changing a global permission. This would have been the "ideal" way for me to make this adjustment, as it really wouldn't matter which of these two accounts I logged in from, everything would be the same. Am I missing something here?
    Barring a solution to that, I don't necessarily mind "starting fresh" and basically treating the accounts as separate computers. Address Book and iCal should be easy enough to export from the old account and import into the new account. Mail on my old account has grown huge (4GB) so I was planning to archive anyway with 3rd party software and start from scratch. The files I'm currently working on I will copy over, and then I guess anything prior that I need to refer to in the future I will just have to log in to the old account and copy over piecemeal. (Is there another way, other than simply copying 100% of my files from the get-go?)
    If I'm understanding all of the above correctly, my only concerns are:
    1) Applications. When I launch 3rd party apps that require registration from the new account, some seem to be having some issues. Would copying the "Application Support" folder from my old account solve this, or will I only be able to use these apps from one account on my computer at a time?
    2) iTunes, specifically as regards my iPhone. Will I need to log into my old account each time I wish to sync with my iPhone? Is there any way that by instead syncing with the new account that I can mess things up and cause my phone or my apps to be de-authorized?
    Many thanks in advance for any guidance you can give here. I hope I am not going about all this backwards and should rather just be trying to "clean up" the old account rather than make a new one to "mimic" it?
    Thank you,
    Josh

    I recommend making a full backup of your system before trying this.
    read the above post of mine for finding out the short user name of your second account and group name of your first account.
    Macintosh-HD -> Applications -> Utilities -> Net Info Manager
    You can use the net info manager to add a user to the group. although I think the single command is easier to use. You can copy the first portion into terminal and type in the variable and information.
    Here is the Net Info Manager way:
    in the middle column click on groups. this will bring out the list of groups. Scroll down to your group from your first userid and click on at.
    Click on the lot on the lower left-hand corner of the screen. Fill in your administrator password.
    Click on the down triangle for the list of groups.
    Click on edit: add
    fill in your group name.
    Mac OS X uses Unix permissions.
    You will need to use BatChmod to change the permissions. Mac OS X doesn't let you change the permission to let others look in directories -- this is called the execution permission. The picture directory doesn't let others look at its files. You need to change this. You need to set the read-only and the execution permissions. And change it on group and other/everyone.
    !http://farm4.static.flickr.com/3265/3180927160_fabd018171.jpg?v=0!
    Sometimes things are not updated as you would expect. I noticed that the Red minus bar on a folder doesn't go way when I changed the permissions. I had to log off the user. You may want to be boot after changing the execution permission. It shouldn't be necessary.
    "BatChmod is a Cocoa utility for manipulating file and folder privileges in Mac OS X. It allows the manipulation of ownership as well as the privileges associated to the Owner, Group or others."
    http://www.macchampion.com/arbysoft/Welcome.html
    debate
    You can use the get info command to find out file permissions and make the changes.
    Click on the file of interest. Press command i (⌘-i)
    Each file has an owning user and a group of users that are allowed to access the file. Also, there is a another access for all users. The owning user is the UID field. The group of users is the GID.
    You could add yourself to your first Group. This would allow you to look at any file your wife owns.
    The NetInfo Manager application allows you to make this change.
    Macintosh-HD -> Applications -> Utilities -> NetInfo Manager
    In the middle column is the function. Pick users in the middle column then select the user of interest in the right column. Find out what group you and your wife are in.
    Now go back to the middle column and pick the Group. Now pick your wife's group. Now add your group to your wife's group. To add an item to a group, you need to look up and find the pulldown called directory > insert value.
    File system permissions
    http://en.wikipedia.org/wiki/Filesystempermissions
    Robert

  • Problems with user account on external HD

    I'm on a mac mini (Early 2009) running OS 10.9.5. Quite some time ago I moved my user account to an external disk named, let's say "My Disk" and things were running fine. Recently, however, I logged into my account but could not access any of my files. I logged through another account, checked the home directory in Preferences/Users & Groups, and found it to be in the right place, "/Volumes/My Disk/my_home_folder". I then manually navigated to my home folder, and when I selected it, it showed up as "/Volumes/My Disk 1/my_home_folder" (notice the numeral 1 after the name of the disk). This fixed the problem and I can now log on to my account, but:
    This is the second time within a few days that the OS renamed the external HD spontaneously by adding a numeral
    This numeral does not show on the disk image on the desktop, nor in disk utilities
    I can rename the external disk to a different name without a numeral and repoint my account, but if I want to change the name back to it "My Disk", the OS will attach the numeral to it, when viewed in Preferences/Users & Groups.
    Is there a fix other than deleting the user account, or re-installing OS?
    tm

    Answering my own question, this looks like a permissions issue. After repairing permissions the external disk was identified by its proper name (no numerals) and all functions were restored.

  • Migration Assistant Won't Migrate User Account from Time Machine

    I am trying to move my wife's user account from a Time Machine backup using Migration Assistant.  Migration assistant chugs along for 2 1/2 hours and says everything was transfered hunkie-dorie.  However, when I try to log her on, I can't.  When I log on as me, I went to System Prefs --> Accounts, her username is there.  However, when I look inside the Users folder, none of her information is there.
    thanks in advance,
    tim

    No Filevault on my computer and hers.
    Doesn't work in Save Boot, either.  That is the puzzle.  Her account appears at the login screen--even the flower pic. that was migrated from from the Time Machine backup. The login screen will not accept any password.  I know I'm typing it correctly.  Her account appears in System Prefs --> Users, but it's not in the Users folder on my disk drive.
    tim

  • Password Problems with User Account

    I have attempted several times to use my admin account to set up a user account on my G4 desktop. I can always manage to set up the user and password, but whenever I log in as the new user, the password doesn't work. I've tried this several times using different user names and different passwords, but no luck. Can someone tell me what I'm doing wrong?
    G4 Tower   Mac OS X (10.4.6)  

    I was having a similar problem to yours. Running 10.4.6 on an old PowerBook G4 Titanium 400Mhz, and when I tried to create a new regular user account last week, the login window wouldn't accept my new password for the user account, even though I'd just created it. It just shook/shuddered to indicate typing the wrong password, even though I knew I was typing it right!
    I tried lots of troubleshooting steps to no avail. Downloaded and installed the newest 10.4.8 full updater. Ran disk utility to repair permissions, and checked the disk for problems. Still no go on logging into the new regular user account. Deleted and recreated the account a few times with no luck.
    Then I went into the security control panel and set a new "Master Password" for my computer. When I created a new account, and then tried to log in, it rejected the password, but after typing the "right" password four times, the computer gave me an opportunity to type the Master Password, and then "reset" the new user's password, after which it logged in just fine!
    I definitely recommend trying this procedure before going through a whole reinstall process for the operating system!
    -Nate

  • Migrated User Account does not appear at login

    Hi: I was having a few glitches with Leopard for my main user account (screen dimming did not work). So I backed up the computer to another disk using Super Duper. I did a clean install of Leopard, did the updates and then used the migration assistant to reimport my user accounts. On the first try, I actually did not migrate the main account I wanted so I used the migration assistant for a second time to import the user information I wanted.
    A folder was created in the user folder with all the documents associated with the the main account I wanted to migrate, however on login, this user account does not appear.
    Is there a way I can make this account appear at login.
    Thanks
    Mike

    do the following. log in as an admin user and run the following terminal command (copy and paste, do not retype, please)
    sudo rm /var/db/dslocal/nodes/Default/users/short-user-name.plist
    Instead of short-user-name put in the above the short name of the migrated user. It's the same as the name of that user's home directory in /Users folder.
    You'll be prompted to enter your admin password (which you won't see as you type it). that's normal.
    Restart and try creating the account with that shortname. it will say that a home directory by that name already exists and ask if you want to use it. say "yes".
    you'll now be able to log in into that account.

  • Problems with User Accounts connecting to the server

    I created couple of user accounts but the users can not connect to their accounts from the computer lab. i want to know how properly set the accounts to login to any computer in the lab.

    Welcome to the forums. You need to:
    1. Bind your desktop machines to your Open Directory master
    2. Create groups and user accounts in WorkGroup Manager which allow your users to log into those computers
    You will find the User Admin documents here useful:
    http://www.apple.com/server/documentation/
    hth,
    b.

  • Problems With User Account? Try Resolving Font Conflicts!

    After installing SL as an upgrade, one of my user accounts could not install software, switch to the other account, or do anything where the system would ask for the account password.
    I tried resolving this by doing several things like remove all other language keyboards, deleting all files in the user/library/preferences folder, removing the user/lib/pref/byhost files, and the standard repair permisssions, etc.
    I then remembered a message which said something about font conflict when first logging into that user account after the SL upgrade.
    So, I went into Font Book and noticed that most of the fonts in the user category had the yellow triangle indicating duplicate copies of those fonts.
    I resolved it by deleting all fonts in the user/library/font file. Those fonts were available in the computer anyway so I hope I'm not missing anything. Even still, a missing font is better than the alternative of not being able to install software and make other admin changes from the account.
    I hope this helps.

    I have a similar issue with both my user accounts.
    Spent about 3 hours with Apple customer support and still have the issue with installing updates and everything requiering authentication.
    I noticed no conflict message as you did though...

  • Problems with user account / losing preferences

    Hallo!
    Recently, my iBook is doing strange things. Suddenly, all my preferences (bookmarks, themes, wallpaper etc) disappear, i don´t know why. I have to reinstall everything, and then (some time later) it all starts from the beginning (disappearing).
    I think this might be due to the presence of other user accounts (i bought the iBook from a friend), but it is impossible to delete them.
    And there is my question: what about a complete re-installing of the iBook? I have the 2 installing CDs, that should be ok, shouldn´t it?
    As i am totally new on apple, i need your opinion:
    what will disappear when re-installing the iBook? Will NeoOffice still be there?
    Is it - in your point of view - a good idea to do that reinstalling?
    Thank you very much for your advice!

    Hi there, It sounds like the account/shortname/home folder was renamed at one time.
    Have you tried making a new Admin account yet in System Preferences>Accounts?
    I have the 2 installing CDs, that should be ok, shouldn´t it?
    If they are the right ones, that may do it, what are the 2z-***-***-A numbers on them and the info on your iBook...
    At the Apple Icon at top left>About this Mac.
    Then click on More Info>Hardware and report this upto *but not including the Serial#*...
    Hardware Overview:
    Machine Name: Power Mac G5 Quad
    Machine Model: PowerMac11,2
    CPU Type: PowerPC G5 (1.1)
    Number Of CPUs: 4
    CPU Speed: 2.5 GHz
    L2 Cache (per CPU): 1 MB
    Memory: 10 GB
    Bus Speed: 1.25 GHz
    Boot ROM Version: 5.2.7f1
    what will disappear when re-installing the iBook? Will NeoOffice still be there?
    With an Erase & Install, everything will be erased and you start out with only what the iBook originally came with. An Archive & Install will just replace the OS files.

  • I-tunes 7.6 problem with user accounts

    I recently upgraded to i-tunes 7.6; it works fine on my user account but not under the other 2 (my wife and son). I have tried all the support suggestions but have had no success. When attempting to open i-tunes under their user names I get windows is configuring and then the pop-up closes but no i-tunes; if you try to open i-tunes again you get the same thing. Any help would be greatly appreciated.

    Ok im going to post this on as many foruma as i can but i found a temporary fix to the issue. So i downloaded the new itunes 7.6. And after a week of nonstop searching for a soulution here is one. So i downloaded the update of 7.6 and then using the *Add and Remove Programs* feature under the *conrol panel* i removed itunes *only itunes* not quicktime. So after that i went to filehippo.com searched and found *itunes 7.4.3* and downloaded that. After that my itunes opened, it has some issues but hey at least i have my itunes. I downloaded 7.4.3 because ive heard form some people that 7.5 has issues to. But i hope this helps some ppl.

  • Problem Deleting User Account

    I was deleting a user account (securely) and it was taking forever (about 24 hours).  I force shut down the computer and restarted it.  The account has gone from the System Preferences/Users; however, the files are still on the system as there is not enough space on the hard drive for the task to have completed.  This was an Admin account and I’m using Mavericks 10.9.3.
    How do I locate the folder and remove this other account?  Help much appreciated.  Thank you.

    - open Finder
    - on the menu bar: Go -> Go to Folder ...
    - in the new window enter: /Users
    Here you will find all home folders of all users on the system. Delete the home folder of the user in question.

Maybe you are looking for

  • BDC issue

    Hi All, we have written a bdc for material upload for Tcode MMZ1. all works fine till the Accounting screen where we have to give the valuation type as D. (MBEW-BWTTY). and the Costing Screen we have to manually give enter to cross these screens and

  • When should I use static variable and when should not? Java essential

    When should I use static variable and when should not? Java essential

  • Language Translation

    Hi, OSS#533888 has explained with the following steps 1. in Cl. 000, Transaction SMLT for Classifying the Language and Language Import from SAP CDs (only if language was not orted during installation/ upgrade)   2. in Cl. 000, Report RSTLAN_IMPORT_OC

  • How to downloading resume on computer?

    haveing trouble downloading resume on computer windows vista 2007

  • Black screen during shutdown?

    I'm so use to the gray startup and shutdown screen in previous OS X versions but on Yosemite I'm not sure something went wrong or if this is the norm now. I still get the gray startup screen (with now a progress bar where the revolving wheel used to