Article ID: 2753560 - View products that this article applies to.
Expand all | Collapse all

Symptoms

When you try to install the Active Directory Migration Tool (ADMT) 3.2 on a Windows Server 2012 server, you receive the following error:
The Active Directory Migration Tool v3.1 must be installed on Windows Server 2008
When you try to install the Password Export Server (PES) 3.1 on a Windows Server 2012 domain controller, you receive the following error:
Installation ended prematurely because of an error

Cause

ADMT 3.2 and PES 3.1 are not supported for installation on Windows Server 2012. The installers intentionally block unsupported operating systems.

Resolution

When you migrate to a Windows Server 2012 domain, install ADMT 3.2 on a Windows Server 2008 R2 server that can operate as the migration computer. You have to have a Windows Server 2008 R2 domain controller in the target environment.

Note If you already specified a Windows Server 2012 domain functional level, and you want the ADMT server to be a domain controller, you can lower the forest and domain functional level by using Windows PowerShell commands. For example, you can use commands that resemble the following:
Set-AdForestMode -identity contoso.com -forestmode Windows2008R2Forest
Set-AdDomainMode -identity contoso.com -domainmode Windows2008R2Domain
Windows Server 2012 implements only one feature, Dynamic Access Control, that has a Windows Server 2012 domain functional level requirement when the Windows Server 2012 domain is configured always to provide claims from all domain controllers. If you do not use this feature, you can lower the functional levels to support previous operating system domain controllers for ADMT migrations. When the migration is complete, you can raise the domain and forest functional levels back to Windows Server 2012.

More information

This overall behavior is by design. The error that the ADMT installation reports is a code defect. The message should state "The Active Directory Migration Tool v3.2 must be installed on Windows Server 2008 or Windows Server 2008 R2."

For more information about Kerberos claims in Windows Server 2012, go to the following Microsoft TechNet website:
What's New in Kerberos Authentication
http://technet.microsoft.com/en-us/library/hh831747
For more information about ADMT, go to the following Microsoft TechNet website:
ADMT Guide: Migrating and Restructuring Active Directory Domains
http://technet.microsoft.com/en-us/library/cc974332(v=WS.10).aspx

Properties

Article ID: 2753560 - Last Review: November 27, 2012 - Revision: 3.0
Applies to
  • Windows Server 2012 Datacenter
  • Windows Server 2012 Standard
Keywords: 
KB2753560

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com