ADMT ERR2:7621 while migrating accounts within the forest

While performing intra-forest migration of user accounts with the help of Active Directory Migration Tool (ADMT) you can get the following error:

 

ERR2:7621 Failed to move source object 'CN=migrTEST'. Verify that the caller's account is not marked sensitive and therefore cannot be delegated. hr=0x8009030e  No credentials are available in the security package

 

This could be because of following setting in your source domain controllers properties (select DC in AD Users and Computers snap-in and right-click):

Capture2

Notice that Do not trust this computer for delegation is set.

The right value for migration is Trust this computer for delegation to any service (Kerberos only):

Capture1

 

Tags: active directory (ru), admt, migration

PrintEmail

Add comment


Security code
Refresh