ADMT 3.2 - Could not verify auditing and TcpipClientSupport on domains" - SID migration problem

Question

Hello,
I have problem with SID migration between two domains with ADMT 3.2. Error I've got:

ADMT is installed on machine under user with Administrator rights (build in group too) in new domain but it's different machine than DC.
AMDT has no problem with migrating user (w/o password and SID of course) so it's configured properly.

First of all let me explain what I've did:

1. SID filtering disabled on both domains
   
2. Firewall disabled (to prevent ports from beeing blocking) on all DC's - old ones and new ones.
3. Two way trust is done and it's working - for both domains
4. Auditing and SID name translation is turned on in GPO's in both domains

5. Tcpip in regedit is set in BOTH domains.

6. ADMTUser - used on ADMT machine to migrate users has delegatet full control in AD Users and Computers and also in in Built in Administrator group.

7. Also I've did netdom trust newdomain.org /domain:olddomain.local /enablesidhistory:yes

Please give me some hints, because I'm out of idea what to do to migrate those SID's...

Answer 1

Hello,
Problem resolved - for anyone wondering - ADMTUser (under which ADMT was configured and installed) wasn't in built in Administrators group in source domain. :)
Now it's working fine.

Answer 2

Anyone has any idea?