Article ID: 929268
Article Last Modified on 10/11/2007
APPLIES TO
- Microsoft Windows Server 2003, Standard Edition (32-bit x86)
- Microsoft Windows Server 2003, Enterprise Edition
- Microsoft Windows Server 2003, Standard x64 Edition
- Microsoft Windows Server 2003, Enterprise x64 Edition
- Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
SYMPTOMS
When you move a user account from a Windows NT 4.0 domain to a Microsoft Windows Server 2003 domain by using the Active Directory Migration Tool version 3.0 (ADMT v3), the following error message may be logged in the migration log:
However, you can see that the user account has been created in the Windows Server 2003 domain. Also, you can see that the user account has been moved correctly.
CAUSE
This issue occurs because the user account that has been moved does not have any permissions in the Windows NT 4.0 domain. The LsaEnumerateAccountRights function returns the STATUS_OBJECT_NAME_NOT_FOUND error code. Then, an error message is reported in the ADMT v3 even though the user account was moved successfully.
Note The LsaEnumerateAccountRights function enumerates the permissions that are assigned to an account.
RESOLUTION
You can safely ignore this error message because the user account has been moved successfully. Then, you can use the migrated user object.
MORE INFORMATION
For more information about how to manage user permissions programmatically in Windows NT, click the following article number to view the article in the Microsoft Knowledge Base:
132958 How to manage user privileges programmatically in Windows NT
Additional query words: CM55961 admt
Keywords: kberrmsg kbtshoot kbprb KB929268
