Resolution
How do I enable disabled accounts that were originally created by ADC?
fact
Domain Migration Administrator 6.x
fact
Domain Migration Administrator 7.x
fact
Exchange Migrator 1.x
fact
Exchange Migrator 2.x
fix
The Microsoft recommended practice for enabling an ADC created account is to enable the account and clear the msExchMasterAccountSid property. Please refer to the following Microsoft article regarding this process.
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q316047
Alternatively, you can use the Update Active Directory Connector Accounts wizard in the Domain Migration Administrator to enable the account and clean up the ADC information after migration with Domain Migration Administrator (DMA) or Exchange Migrator. For more information about the Update Active Directory Connector Accounts wizard, please refer to the following knowledge base articles:
- How does ADC and the Update ADC Accounts Wizard work?
https://www.netiq.com/kb/esupport/consumer/esupport.asp?id=NETIQKB6409 - What is the Update Active Directory Connector Accounts (ADC Update) wizard, included with Domain Migration Administrator?
https://www.netiq.com/kb/esupport/consumer/esupport.asp?id=NETIQKB3911
note
Please note that with the release of the Microsoft ADC that ships with Exchange 2003, when ADC creates an Active Directory account for the first time the samAccountName is in the format ADC_xxxxxxxx (where the xxxxxx are randomly generated characters). This can be handled during the domain migration phase in a couple of different ways:
- Use the scripting or database modeling interfaces in Domain Migration Administrator.
- Refer to the following NetIQ Knowledge Base article for a script that will update the target samAccountName to match that of the source mailboxes Primary NT Account:
https://www.netiq.com/kb/esupport/consumer/esupport.asp?id=NETIQKB33384