ADMT ERR2:7675. Post-check failed, Access is Denied

After you run the Computer Migration Wizard and move a computer from the source to the target domain, the following errors are logged in the agent logs:

ERR2:7709 Post-check failed on the computer ‘Computer.domain.name’.

followed by

ERR2:7675 Unable to verify the migrated computer belongs to the domain.  Access is denied. (hr=0x80070005)

Continue reading

Visibility Lists in NTFS after Migrating from NDS to AD

What is a visibility list? In a nutshell if you have rights to a file anywhere in a Novell file system you also have rights to browse to that file in the file system.

“If a user has rights to a file, NetWare makes all directories above the file visible to the user.”

This makes a lot of sense, but it doesn’t hold true in the Microsoft world. Continue reading

CREATOR OWNER ACL

During a file migration from Novell to Windows my customer noticed some users had rights in the target system that they shouldn’t have or didn’t have in source. To make the issue more worrying, the rights being randomly assigned in target were “Full Control”.

We’re moving the data with Quest NDS-M, and then we have a custom script that fixes up the visibility so that the target system behaves more like Novell than NTFS and retains the same view of the data that the users had before.

I needed to find out where the issue was being introduced, on the target file system, via Quest, or with the rights rollup. Continue reading