Question about ADMT and article 325851

Under the Groups heading, this article asks you to add the Domain Admins
global group from the source domain (NT4) to the Administrators local group
on the target (Windows 2003 AD domain). Problem is, there is no
Administrators local group in Windows 2003 that I can see. The nearest
match is Domain Admins domain local group and when I try to add members to
this group the only available location is the local AD tree. I can't
specify a trusted NT4 domain. Is this a documentation error?

Thanks.

Kevin.

Kevin E. wrote:

Under the Groups heading, this article asks you to add the Domain Admins global group from the source domain (NT4) to the Administrators local group on the target (Windows 2003 AD domain). Problem is, there is no Administrators local group in Windows 2003 that I can see. The nearest match is Domain Admins domain local group and when I try to add members to this group the only available location is the local AD tree. I can't specify a trusted NT4 domain. Is this a documentation error? Thanks. Kevin.

Hello,
The KB 325851 is simple and it works always if understood correctly.
here is the reply for your question.

User Rights Required to migrate users from NT 4.0 Source to 2003 Target Domain

You must log on to the computer (Target Domain Controller) on which you run ADMT with an account that has the following permissions:

• Domain Administrator rights in the target domain.
(By adding administrator account of source domain in target domain’s administrator’s group.

• A member of the Administrators group in the source domain.
(Administrator account is by default in administrators group on Domain Controllers)

• Administrator rights on each computer that you migrate.
(All workstation in source domain will by default have domain admin group in their local administrators group, and domain admin contains administrator account by default)

• Administrator rights on each computer on which you translate security.
(All workstation in source domain will by default have domain admin group in their local administrators group, and domain admin contains administrator account by default)

You will have the appropriate rights when you log on to the PDC that is the FSMO role holder in the target domain with the Source Domain \Administrator account, assuming that the Source Domain \Domain Admins group is a member of the Administrators group on each (source domain’s ) computer.