ODM Dirsync - SIDHistory Error: "Write: The operation requires that destination domain auditing be enabled I have verified Auditing has been enabled in the target environment" (4325147)

• We receive the following error when syncing SIDHistory:

Error: Write: The operation requires that destination domain auditing be enabled I have verified Auditing has been enabled in the target environment.

• Auditing is configured as per the documentation (success and failure) for source and target environments.

• Confirm the domain policy is not overriding the domain controller policy for auditing:
  • https://docs.microsoft.com/en-us/troubleshoot/windows-server/windows-security/security-auditing-settings-not-applied-when-deploy-domain-based-policy
• Active Directory SID History Synchronization Quick Start Guide:
  • https://support.quest.com/technical-documents/on-demand-migration/current/active-directory-sid-history-synchronization-quick-start-guide#TOPIC-1622445

Enable Auditing and Advanced Auditing following the sections
below for both the Target & Source Domains:

• Log on as an administrator to any domain controller in the domain.
• Click Start, point to All Programs, point to Administrative Tools, and then click Group Policy Management.
• Navigate to the following node: Forest | Domains | Domain Name | Domain Controllers | Default Domain Controllers Policy
• Right-click Default Domain Controllers Policy and click Edit.
• In Group Policy Management Editor, in the console tree, navigate to the following node: Computer Configuration | Policies | Windows Settings | Security Settings | Local Policies | Audit Policy
• In the details pane, right-click Audit account management, and then click Properties.
• Click Define these policy settings, and then click Success and Failure.
• Click Apply, and then click OK.
• In the details pane, right-click Audit directory service access and then click Properties.
• Click Define these policy settings and then click Success.
• Click Apply, and then click OK.

• In the Domain Group Policy Management Editor, in the console tree, navigate to the following node: Computer Configuration | Policies | Windows Settings | Security Settings | Advanced Audit Policy Configuration | Audit Policies | Account Management
• In the details pane, right click on Audit Application Group Management subcategory and then click Properties.
• Click Configure the following audit events and then slick Success and failure.
• Click Apply, and then click OK.
• Repeat above steps for the following Subcategory Audit Events.
• Audit Computer Account Management
• Audit Distribution Group Management
• Audit User Account Management
• Audit Other Account Management Events
• Audit Security Group Management