Retour
-
Titre
How to install Preinstalled Feature on Domain Controllers -
Description
Sometimes password/SIDHistory sync are not working on DC due to overzealous security software, GPOs or LSA protection. To address that, Preinstalled Feature should be installed on both, source and target DC, specified in Agent Manager, DSA properties, preferred DC/GC -
Cause
Security software, strict GPOs or LSA protection -
Résolution
To resolve the issue and install AepAgent/AelAgentMS on DCs, please follow instructions here:
Migration Manager for AD 8.15 - Granular Account Permissions (quest.com)
Note: it's important to install Preinstalled Feature on ALL DCs, that are served by specific DSA. This is important when the same DSA is serving multiple domain pairs.