Error Message "Password Migration Has Been Disabled" When You Attempt to Migrate User Passwords (294356)


The information in this article applies to:

  • Microsoft Windows Server 2003, Standard Edition
  • Microsoft Windows Server 2003, Enterprise Edition
  • Microsoft Windows Server 2003, 64-Bit Enterprise Edition
  • Microsoft Windows Advanced Server, Limited Edition
  • Microsoft Windows Small Business Server 2003, Premium Edition
  • Microsoft Windows Small Business Server 2003, Standard Edition
This article was previously published under Q294356
IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry

SYMPTOMS

When you run the Microsoft Active Directory Migration Tool (ADMT), you may receive the following error message:
Password Migration has been disabled on this domain controller - servername, would you like to select a different password domain controller?

CAUSE

This problem occurs when you attempt to migrate user passwords, immediately after you select the Password migration source DC option.

When the Password Migration dynamic-link library (DLL) file is installed on a domain controller by running the Pwdmig.exe program from the Windows Server 2003 CD-ROM, a registry value is created. By default, the value is set to disable the password migration functionality.

RESOLUTION

WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

To resolve this problem:
  1. Click Start, click Run, and then type: regedit.
  2. Locate the AllowPasswordExport registry value in the following registry key:

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa

  3. In the right pane, double-click the AllowPasswordExport value.
  4. Change the 0 value to a value of 1, and then click OK.NOTE: The domain controller does not have to be restarted.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

MORE INFORMATION

When you attempt to migrate user passwords, you may also receive the following error message:
The Password Migration DLL is not installed and running on the selected password domain controller servername. Please select another password domain controller or install the Password Migration DLL on servername.
The preceding error can indicate one of the following situations :
  • The Password Migration DLL has not been installed on the selected server.
  • The server may not be available.
  • The Migration DLL has been installed, but the server has not been restarted.
Modification Type:MinorLast Reviewed:1/20/2006
Keywords:kberrmsg kbprb KB294356
©2004 Microsoft Corporation. All rights reserved.