While doing cross forest move between Exchange2010 to Exchange 2010 , I had to configure PES (Password Export Service) to migrate passwords of the mailboxes
If you are confused with the first line,Please read the below post and come back.
Below error was popping up :
“Unable to establish a session with the password export server. Either the currently logged on user does not have sufficient permissions to call the Password Export Server or the account that the Password Export Server Service is running under does not have sufficient permissions on the target domain controller. Verify that the logged on user is a member of the Administrators group in the source domain and that the Password Export Server Service account can change passwords of user accounts in the target domain.”
My fix :
Created a Service Account
Name: ADMT
Member of (TargetDomain – DomainAdmins)
Member of (SourceDomain –Administrators)
And Configured the Password Export Server Service Properties
TargetDomain\ADMT
Waited for few minutes.
Logged into domainController of the TargetDomain Using the Service Account.
Now it allowed me to migrate passwords
Thanks. Resolved my issue
Hi man,
Have you encountered the issue of running the SidHistory migration via command line and being denied, but it works perfectly through the ADMt GUI?
https://learn.microsoft.com/en-us/answers/questions/2119582/problem-to-migrate-sid-history-using-admt-with-pow