Problem : ADMT Update User Rights option
What kind of rights is migrated when you select Update User Rights option in ADMT? I am having an error message when I use this option when migrating users with ADMT 3.0. Here are the error: ERR2:7228 Error updating user rights for CN=UserName, rc=-2147024891 Access is denied.
I want to know what kind of rights is migrated so I can take a clear decision if I can skip this option during my migration process.
Solution: ADMT Update User Rights option
I am having this same exact issue (well not me personally, but a colleague). It works for me.
In my scenario, I’m migrating from one child domain to another child domain in the same forest. I am a domain administrator in both child domains. I can migrate by using this “update user rights” option without issue.
My colleague however is delegated rights to specific OUs/Objects in both domains. I’m trying to have them do migrations without being a full domain administrator. (Maybe this is my first issue?). I can’t for the life of me find specific information citing the need to be a domain admin.
At any rate, I don’t fully understand this user rights option. From my knowledge of user rights, they apply to specific local machines (i.e. via local security policy, or GPO). These rights/privileges are stored locally on machines. The ADMT tool only has access to the server ADMT is installed on, and the DCs involved in the migration. Lastly user rights are most often provided via groups.
With all that said I don’t see how these users could possibly have *any* types of user rights on the DCs themselves, so I don’t see how this option is even useful. Am I completely missing something?