Start a discussion

129 views
4 replies

SBS 2011 migration step failure

I am at chapter 7 steps 17 & 18 and run the steps below from the new 2019 server but I am getting only an error. The domain name and admin credentials are correct but it fails every time. Any ideas?

 

PS C:\Windows\system32> $currentDomain = Read-Host -Prompt "Enter your internal domain name"
Enter your internal domain name: Willamette
PS C:\Windows\system32> $cred = Get-Credential -Message "Enter Domain Administrator Credentials"
PS C:\Windows\system32> Install-ADDSDomainController -NoGlobalCatalog:$false -CreateDnsDelegation:$false -CriticalReplicationOnly:$false -DatabasePath "C:\Windows\NTDS" -DomainName $currentDomain -InstallDns:$true -LogPath "C:\Windows\NTDS" -NoRebootOnCompletion:$true -SysvolPath "C:\Windows\SYSVOL" -credential $cred -Force:$true -Confirm:$false -SafeModeAdministratorPassword (ConvertTo-SecureString 'ADRestoreModePassword_ChangeThis' -AsPlainText -Force)
Install-ADDSDomainController : Verification of user credential permissions failed. The wizard cannot access the list
of domains in the forest. The error is:
The target account name is incorrect.
At line:1 char:1
+ Install-ADDSDomainController -NoGlobalCatalog:$false -CreateDnsDelega ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Install-ADDSDomainController], TestFailedException
    + FullyQualifiedErrorId : Test.VerifyUserCredentialPermissions.DCPromo.General.26,Microsoft.DirectoryServices.Depl
   oyment.PowerShell.Commands.InstallADDSDomainControllerCommand

Message
-------
Verification of user credential permissions failed. The wizard cannot access the list of domains in the forest. The ...


PS C:\Windows\system32>

 

Virgil :}{:

Walter Yeaw Walter Yeaw
Published 01/15/2020 20:27
Add Comment
Mariette Knap

Is the Domain Admin a member of the Enterprise and Schema admins?

replied 01/16/2020 04:29
Walter Yeaw

Yes it is.

replied 01/16/2020 16:51
Mariette Knap

Two things:

  1. When asked for the domain name make sure you type domain.local, 
  2. When asked for username and password make sure you use the long format like domain.local\username
Try again and if it does not work let me know and I will help you in a remote session to get this going.
replied 01/16/2020 17:12
Walter Yeaw

I still get the same thing. 

Here is some additional information that may play into this. I renamed this server but I did it at the wrong point and that has caused me all kinds of issues. I think I have it straightened out but not totally sure I am out of the woods on this. I am almost to a point of wanting to rebuild the new server and start over but I think I need to move the FSMO roles back to the 2011 server first.

 

I can be reached at vmyers@phoenixtechnology.us with any questions or additional guidance that you can provide. Thank you

Virgil

replied 01/16/2020 18:20
Last Activity 01/16/2020 18:20