Microsoft KB Archive/929268
Article ID: 929268
Article Last Modified on 10/11/2007
- Microsoft Windows Server 2003, Standard Edition (32-bit x86)
- Microsoft Windows Server 2003, Enterprise Edition
- Microsoft Windows Server 2003, Standard x64 Edition
- Microsoft Windows Server 2003, Enterprise x64 Edition
- Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
When you move a user account from a Windows NT 4.0 domain to a Microsoft Windows Server 2003 domain by using the Active Directory Migration Tool version 3.0 (ADMT v3), the following error message may be logged in the migration log:
However, you can see that the user account has been created in the Windows Server 2003 domain. Also, you can see that the user account has been moved correctly.
This issue occurs because the user account that has been moved does not have any permissions in the Windows NT 4.0 domain. The LsaEnumerateAccountRights function returns the STATUS_OBJECT_NAME_NOT_FOUND error code. Then, an error message is reported in the ADMT v3 even though the user account was moved successfully.
Note The LsaEnumerateAccountRights function enumerates the permissions that are assigned to an account.
You can safely ignore this error message because the user account has been moved successfully. Then, you can use the migrated user object.
For more information about how to manage user permissions programmatically in Windows NT, click the following article number to view the article in the Microsoft Knowledge Base:
132958 How to manage user privileges programmatically in Windows NT
Additional query words: CM55961 admt
Keywords: kberrmsg kbtshoot kbprb KB929268