SID Migration W2k3 -> W2k3
We are about to start a pretty major restructuring of our active directory by migrating to a new forest with 2 child domains. In testing we've managed to migrate everything sucessfully. I thought i'd get a head start and migrate 1800 pupils accounts and various groups over the weekend using ADMT v3. I've setup a two-way trust and everything is communicating correctly, but when I come to migrate a group I can't migrate the SIDs to the target domain.
I've got the two-way trust in place, made the registry change (TcpipClientSupport) on the source DC, created a domain local group (CURRICULUM$$$) on the source DC, the administrator account for the target domain is a member of the local administrators group in the source domain, the auditing of account managment (both sucess and failure) is enabled on both domains.
What am I missing? :confused:
The specific error I am getting is: Could not verify auditing and TcpipClientSupport on domains. Will not be able to migrate Sid's. The specified domain either does not exist or could not be contacted.
If I choose not to migrate SIDs it works perfectly.