Microsoft KB Archive/929493

= Error message when you use ADMT version 3 to migrate computer accounts from one Windows Server 2003 domain to another: “ERR3:7075 Failed to change domain affiliation” =

Article ID: 929493

Article Last Modified on 10/11/2007

-

APPLIES TO


 * Microsoft Windows Server 2003, Standard Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise Edition
 * Microsoft Windows Server 2003, Enterprise x64 Edition
 * Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems

-



SYMPTOMS
When you use Active Directory Migration Tool (ADMT) version 3 to migrate computer accounts from one Microsoft Windows Server 2003 domain to another, one or more of the following error messages are logged in the ADMT migration log:

Error message 1

ERR3:7075 Failed to change domain affiliation, hr=800706fb The security database on the server does not have a computer account for this workstation trust relationship.

Error message 2

ERR2:7625 Unable to connect to \\. .local\ADMIN$ The machine might be down or its Server, Netlogon service might not be started. rc=1722 The RPC server is unavailable.

ERR2:7014 The Active Directory Migration Tool Agent Service on \\..local did not start. See the application log on \\..local for details.

Error message 3

WRN1:7372 ADMT does not process BUILTIN accounts or change the membership of BUILTIN groups (Administrators, etc.). Skipping Domain Users 2006-04-07 08:47:49 ERR2:7228 Error updating user rights for CN=TSMITH, rc=-2147023162 The array bounds are invalid. Operation completed.



CAUSE
This problem occurs if one of the following conditions is true:
 * The ADMT agent on a client computer cannot locate the domain controller on which the computer account was created.
 * The Domain Name System (DNS) server names on a client computer are fixed. Therefore, these names are not retrieved from a Dynamic Host Configuration Protocol (DHCP) server. The DNS settings point to external DNS servers.
 * A firewall program is running on a client computer.



RESOLUTION
To resolve this problem, use one or more of the following methods until the problem is resolved.

Method 1
Troubleshoot all network problems, and then make sure that the ADMT agent on the client computer can connect to the domain controller on which the computer account was created.

For more information about how to troubleshoot network connectivity problems, click the following article number to view the article in the Microsoft Knowledge Base:

325487 How to troubleshoot network connectivity problems

Alternatively, migrate computer accounts to a domain controller to which the ADMT agent can connect.

Method 2
Configure DNS settings on the client computer to retrieve DNS server names from a DHCP server.

Method 3
Disable all firewall programs that are running on the client computer.

Method 4
Make sure that you can connect to the source and target domain controllers from the client computer by typing the following command:

ping

Method 5
If the previous methods do not resolve the problem, follow these steps:
 * 1) Use an account that has administrator credentials to log on to the client computer.
 * 2) Click Start, point to Settings, and then click Control Panel.
 * 3) Double-click Network Connections, right-click the connection that you want, and then click Properties.
 * 4) On the General tab, click Client for Microsoft Networks, and then click Uninstall.
 * 5) Restart the computer.
 * 6) Click Start, point to Settings, and then click Control Panel.
 * 7) Double-click Network Connections, right-click the connection that you want, and then click Properties.
 * 8) On the General tab, click Install, click Client in the Select Network Component Type dialog box, and then click Add.
 * 9) In the Network Client list, click Client for Microsoft Networks, and then click OK two times.
 * 10) Restart the computer.

Keywords: kbtshoot kbprb kbexpertiseadvanced kbexpertiseinter KB929493

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.