During the computer migration ADMT, you might receive the following error message:
ERR3:7075 Failed to change domain affiliation, hr=80070005 Access is denied
1. Open Registry Editor on the on the Target DC and make sure the LSARPC and Netlogon values exist in the NullSessionPipes registry key - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters
2. If not, add LSARPC and Netlogon values to NullSessionPipes registry key.
3. Restart the Server service.
If you receive the same error message during the ADMT computer migration, try the following options/hotfix:
ERR3:7075 Failed to change domain affiliation, hr=800704f1. The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you.
“When this error is generated, it is due to the following hotfix NOT being installed onto the client machine that you are migrating into the Windows 2008 domain:
944043 Description of the Windows Server 2008 read-only domain controller compatibility pack for Windows Server 2003 clients and for Windows XP clients and for Windows Vista
Upon installing the hotfix and rebooting the client machine(s), re-running ADMT for the computer object migration will now succeed.”
Other Related Articles and Blogs:
Active Directory Migration Using ADMT - http://www.sivarajan.com/admt.html
Computer Migration - Things to Consider - http://www.sivarajan.com/cm.html
User Account Migration and Merging Using ADMT - http://www.sivarajan.com/