When migrating SIDHistory with the On Demand Migration (ODM) Active Directory on-premise directory synchronization agent, you may encounter the following error in the target agent logs:
Write: Access is denied
This issue assumes that all other prerequisites have been met.
1) When installing the target directory sync agent, provide admin credentials to the source Active Directory domain (trust is not required).
2) Ensure that the target agent service account has been a member of the build-in\Administrators group in the source Active Directory domain (trust is required).
3) An Internet Protocol Security (IPSec) tunnel may need to be configured to allow the target access to the source. Work with the network administrators to ensure the target service account has access to the source.
4) Change the PDC Emulator role to another DC and update the ODM-Dirsync Environment setting to ensure this DC is listed in Domain Controllers tab and is listed as Priority 1.
5) Change the service account UPN suffix to use the correct domain suffix.
6) Add Quest agent folder and its executables to antivirus exclusions' list. Some AV solutions rely on EXE checksums, so these exclusions should be renewed every time Quest agent version is being updated
© ALL RIGHTS RESERVED. Feedback Términos de uso Privacidad Cookie Preference Center