-
Title
ADLDS to SQL Config Store Migration ERROR: Requested registry access is not allowed -
Description
While performing GPOADmin upgrade from v5.13.5 to v5.15, an error occurred
Error Message:
Source binding path: LDAP://xyzxyz.com/CN=Backups,CN={8Rcd34c2-2E2c-473b-a4ef-39ad8387719e},CN=xyzxyz.com,CN=Version Control,CN=SS,CN=DD,CN=Quest,CN=Services,CN=Configuration,CN={21442171-F9D1-4AgE-91L7-D980F9pD9198} 1 items were found. Backed Up On: 21/12/2020 1:00:09 PM Backup Id: 9047e0c4-7149-4783-9650-0a35b5b0c00b Storage Mode: NetworkShare Storage Location: \\z\y\xlog\xyzxyz.com\{8Rcd34c2-2E2c-473b-a4ef-39ad8387719e}\{9047e0c4-7149-4783-9650-0a35b5b0c00b}.zip Links: ERROR: Requested registry access is not allowed at System.ThrowHelper.ThrowSecurityException(ExceptionResource resource) at Microsoft.Win32.RegistryKey.OpenSubKey(String name, Boolean writable) at Quest.Avalanche.VersionControl.VersionControlManager.UseSQL . . at Quest.Avalanche.VersionControl.Workflow.SqlCommunications.AddHistory(Guid versionControlId, VersionControlAction action) at ConfigMig.VersionControlItemMigration.MigrateVersionControlItemToSQL(DirectoryEntry entry) Action: Register . . Migration Succeeded
-
Cause
Either an admin is used which is not local administrator OR it is local administrator but still has access issues in registry perhaps on HKLM\SOFTWARE\Quest.
-
Resolution
-Recreate the SQL DB, then perform the migration ‘replica’ of ADLDS Configuration store.-Give SYSTEM, Administrators, and if needed the account used for migration full control on HKLM\SOFTWARE\Quest.