A message stating the 'TCPIPClientSupport' key has not been set is still being received after settin (NETIQKB7233)

  • 7707233
  • 02-Feb-2007
  • 16-Aug-2007

Resolution

fact
Domain Migration Administrator 7.1

symptom
A message stating the 'TCPIPClientSupport' key has not been set is still being received after setting the key on the source PDC and rebooting it.


cause
In the GUI, when you are prompted YES or NO to set the TCPIPClientSupport key and selecting yes, Domain Migration Administrator contacts the closest DC, which in some cases may be the BDC. This is where the problem occurs because, in order, for DMA to properly migrate accounts with SID History, it must set the registry key on the source domain's PDC.

fix

As a workaround for the Domain Migration Administrator 7.0, verify that the Secure Channel is pointing to the source domain PDC instead of a BDC.  To change the Secure Channel use the following command: 

  • nltest /server:target DC (dma machine) /sc_reset:sourcedomain\sourcePDC.

Once the Secure Channel has been verified/set, retry running through the 'Migrate Users' wizard to migrate accounts with SID history.  If the key has been previously set on the source domain's PDC, you should not be prompted to set the key again.  If the key has not been set on the PDC, then DMA will set it on the PDC only and you will be able to successfully migrate accounts with SID History.



fix
This issue is resolved in DMA 7.1.

Additional Information

Formerly known as NETIQKB7233