No mapping between account names and security IDs was done (4320473)

While performing upgrade of InTrust you recieve an error similiar to the following:

"Error Code: 0x00000534
Error Description: No mapping between account names and security IDs was done."

By clicking "OK" to the error the setup then rolls back the installation.

This is known to occur when the Quest InTrust services are started with UPN account name.

As described in the Quest InTrust Release Notes document:

"Do not use UPN-style account names (testuser@yourdomain.com)."

WORKAROUND

1) Open Services.msc snap-in via Administrative Tools,etc.
2) Locate the following Quest InTrust services:
> Quest InTrust Server
> Real-time Monitoring Server
3) Ensure "Quest InTrust Server" and "Quest Real-time Monitoring Server" are running as the down-level user logon name. You will need to re-enter the username and password.

Ex:

"Domain\Username"

4) Restart the "Quest InTrust Server" service to ensure the services restart as expected.
5) Run the upgrade again.

STATUS

Enhancement request CR0112049 has been submitted to Development for consideration in a future release of Intrust.

In some configurations "Quest InTrust Agent" service may be using a service account as well. Typically it will run as LocalSystem and not require attention as desribed in this article.