Resolution
Domain Migration Administrator 7.x
symptom
Error: Failed to move object CN=
cause
The account selected for migration is locked out or has been locked out at some time since the account was created.
fix
If the account is currently locked and you are unable to unlock the account, you can use the following workaround:
Perform the following steps using either a project or the Global Wizard:- Specify \\computername or \\IPAddress for the Source domain name
- Continue with the migration as normal
DMA will think you are performing an Inter Forest migration rather than an IntraForest migration. It will then copy the user account to the target domain. Since there can only be one instance of a user account in a Forest, then you must delete the source version before the Global Catalog becomes aware that there is a duplicate user account.
However, if the account is unlocked and you are still seeing this issue, this is the result of a bug in Windows 2000. Please consult the following Microsoft article regarding a hotfix and potential workaround that should allow the migration to continue.
841819 - You receive an error message when you try to use version 2 of the Active Directory Migration Tool to migrate a Microsoft Windows 2000 Server domain
http://support.microsoft.com/default.aspx?scid=kb;en-us;841819