Exchange Server - Help! Using Exch2003 migration tool

Asked By dan4u
25-May-07 06:42 PM
Hello,
The existing setup is this:

Original domain is w2k domain running exch2000, I have 2 new servers
(separate domain) , 1 is DC the other is a member server running exch2003.
Using the exchange 2003 migration tool from the Exch2003 server I was able to
connect and see the exch2000 accounts to migrate and selected 1 account as a
test.  This account shows up with a red X and the migration screen says
migrating and has been sitting there for 30 minutes.  The application log
says it has failed to logon to the mailbox x500 - - - .  Any help is greatly
appreciated.

--
Thanks,
Dan
Active Directory
(1)
CSS
(1)
LeifDan
(1)
DanRe
(1)
TechR
(1)
MSFT
(1)
OBG
(1)
SBS
(1)
  Leif Pedersen [MVP] replied...
27-May-07 01:54 PM
Hi,

This might help you troubleshoot:
http://support.microsoft.com/kb/328871/en-us

Leif
  KamolSagwa replied...
29-May-07 07:43 AM
Dan,
Could you verify if the trust between the domains exist?
Maybe removing and readding the trust might work ... just a wild work around.
Cheers
Kamol Sagwan
http://blog.avanadeadvisor.com/blogs/kamol/
  dan4u replied...
29-May-07 11:47 AM
Hello,
Thank you for your response. How can I verify/create a trust relationship
between the w2003 and the w2000 domains?
--
Thanks,
Dan
  v-terli replied...
30-May-07 05:09 AM
Hello Dan,

Thank you for posting here.

I suggest you to go through the following page to set and check the Trusts
between domains:

Create a Two-way Trust (MMC Method)
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/ac
tivedirectory/maintain/opsguide/part2/adogdapb.mspx#E6OBG

Active Directory Operations Guide: Managing Trusts
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/ac
tivedirectory/maintain/opsguide/part1/adogd05.mspx

More Information:
=========

A trust relationship (also called a trust) is a logical relationship
established between domains to allow authentication and authorization to
shared resources. The authentication process verifies the identity of the
user, and the authorization process determines what the user is permitted
to do on a computer system or network. Once a user requesting access to a
resource computer in another domain has been authenticated by the resource
domain, the resource computer compares the user's credentials to the
permissions assigned within its security descriptor to help determine the
user's level of authorization to that resource. A security descriptor
contains access control lists (ACLs) that identify the users and groups
that are assigned or denied access permissions on a resource.

In its simplest form, a trust acts as a technological drawbridge, by either
allowing or disallowing authentication traffic to flow between two or more
domains. When a trust relationship is created between two domains, traffic
is allowed over the bridge, permitting the sharing of resources between
them.

For more information regarding trust relationship, please refer to the
following article:

Trust Technologies
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/TechR
ef/9d688a18-15c7-4d4e-9d34-7a763baa50a1.mspx

Hope the suggestion above is useful. Have a nice day.

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
relationship
around.
exch2003.
able to
account as a
says
log
greatly
Create New Account
help
ScRunLDIFScript (f: \ titanium \ admin \ src \ libs \ exsetup \ exmisc.cxx:1309) Error code 0XC007200E (8206): The directory service is busy. [22:48:47] ScImportActiveDSSchemaChanges (f: \ titanium \ admin \ src \ libs \ exsetup \ exmisc.cxx:1408) Error code 0XC007200E (8206): The directory service is busy. [22:48:47] DS or RPC is busy. Sleep 250 msec. [22 ScRunLDIFScript (f: \ titanium \ admin \ src \ libs \ exsetup \ exmisc.cxx:1309) Error code 0XC007200E (8206): The directory service is busy. [22:49:19] ScImportActiveDSSchemaChanges (f: \ titanium \ admin \ src \ libs \ exsetup \ exmisc.cxx:1408) Error code 0XC007200E (8206): The directory service is busy. [22:49:19] DS or RPC is busy. Sleep 500 msec. [22 ScRunLDIFScript (f: \ titanium \ admin \ src \ libs \ exsetup \ exmisc.cxx:1309) Error code 0XC007200E (8206): The directory service is busy. [22:49:52] ScImportActiveDSSchemaChanges (f: \ titanium \ admin \ src \ libs \ exsetup \ exmisc.cxx:1408) Error code 0XC007200E (8206): The directory service is busy. [22:49:52] DS or RPC is busy. Sleep 750 msec. [22 ScRunLDIFScript (f: \ titanium \ admin \ src \ libs \ exsetup \ exmisc.cxx:1309) Error code 0XC007200E (8206): The directory service is busy. [22:50:25] ScImportActiveDSSchemaChanges (f: \ titanium \ admin \ src \ libs \ exsetup \ exmisc.cxx:1408) Error code 0XC007200E (8206): The directory service is busy. [22:50:25] DS or RPC is busy. Sleep 1683 msec. [22
5 server in parthenses) can I delete this account. It also appears I have three active directory connectors. One is for the current exchnage 2003 server and according to it it synchronizes delete these? Exchange Admin Discussions Windows XP (1) Exchange Server 2003 (1) Microsoft Exchange (1) Active Directory (1) Exchange Server (1) MPSReports (1) Database (1) Report (1) The best thing to do you some help. Thanks and have a nice day! Best regards, Terence Liu(MSFT) Microsoft CSS Online Newsgroup Support Get Secure! - www.microsoft.com / security = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = This newsgroup only focuses on SBS are resolved in a timely manner. For urgent issues, you may want to contact Microsoft CSS directly. Please check http: / / support.microsoft.com for regional support phone numbers. Any input or this happened since it hasn't been running in years. Also I'm seeing two active directory connector that list one of the old 5.5 servers as the exchange server. Should
Any advice would be appreciated. Exchange Setup Discussions Exchange Server 2007 (1) Microsoft Exchange (1) Active Directory (1) Windows Vista (1) Outlook 2003 (1) Outlook 2007 (1) Office 2007 (1) Office 2003 confirm that my understandings are correct. As I understand it, the issue is: In your Active Directory environment Kerberos Realm is used for user authentication, ADdomain \ user is mapped to REALM \ user know some more detailed information. Thank you. When a domain-connected client connects to the Active Directory directory service, the Exchange 2007 client authenticates to Active Directory and tries to locate the Autodiscover SCP objects that were created during Setup by
Greetings, I have tried to install MS Exchange 2003 into existing Exchange 5.5 organization. Active Directory Connector is installed and works fine. I have ran DCDiag and NetDiag, both tools don failed step again" There are the part of the Exchange Server Setup Progress.log and Active Directory Connector.Log below. What I am doing wrong? - -- -- -- -- -- -- - Active Directory Connector.Log - -- -- -- -- -- -- -- -- -- - [16:49:52] (3221233498) LDAP Bind was unsuccessful on directory mailserver.kb_sinergia.local for distinguished name 'KB_SINERGIA \ Administrator Directory returned error:[0x51] [16:49:52] (3221233498) LDAP Bind was unsuccessful on directory mailserver.kb_sinergia
logs indicates that exchange is unable to connect to GC, and DC. We are using Active Directory Connector to connect to AD. I am copying the output of DCDiag and few entries fix them? Please help, Rana. - -- -- -- -- -- -- -- -- -- -DCDiag output- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- - Domain Controller Diagnosis Performing initial setup: * Connecting to directory service on server pdc1. * Collecting site info. * Identifying all servers. * Identifying all NC cross-refs info. Doing initial required tests Testing server: Default-First-Site-Name \ PDC1 Starting test: Connectivity * Active Directory LDAP Services Check * Active Directory RPC Services Check . . . . . . . . . . . . . . . . . . . . . . . . . PDC1 passed test Connectivity Testing server: Default-First-Site-Name \ BDC1 Starting test: Connectivity * Active Directory LDAP Services Check * Active Directory RPC Services Check . . . . . . . . . . . . . . . . . . . . . . . . . BDC1 passed test Connectivity Doing primary