Saturday , March 23 2019

Password Export Server 3.2 – Unable to establish a session with the password export server

While doing cross forest move between Exchange2010 to Exchange 2010 , I had to configure PES (Password Export Service) to migrate passwords of the mailboxes

 

If you are confused with the first line,Please read the below post and come back.

http://careexchange.in/how-to-migrate-users-across-forest-cross-forest-using-admt-3-2-with-sid-and-passwords/

 

Below error was popping up :

"Unable to establish a session with the password export server. Either the currently logged on user does not have sufficient permissions to call the Password Export Server or the account that the Password Export Server Service is running under does not have sufficient permissions on the target domain controller. Verify that the logged on user is a member of the Administrators group in the source domain and that the Password Export Server Service account can change passwords of user accounts in the target domain."

image

 

My fix :

Created a Service Account

Name: ADMT

Member of (TargetDomain – DomainAdmins)

Member of (SourceDomain –Administrators)

And Configured the Password Export Server Service Properties

TargetDomain\ADMT

image

Waited for few minutes.

Logged into domainController of the TargetDomain  Using the Service Account.

 

Now it allowed me to migrate passwords

 

Smile

About Satheshwaran Manoharan

Satheshwaran Manoharan is an Microsoft Exchange Server MVP , Publisher of CareExchange.in
Supporting/Deploying/Designing Microsoft Exchange for some years.
Extensive experience on Microsoft Technologies.

Check Also

Moving users using ADMT 3.2 in Windows Server 2012 R2

Download Active Directory Migration Tool version 3.2 Type the Default Instance if you have a ...

Leave a Reply

Your email address will not be published.