During Active Directory Processing the following error occurs "LDAP error 0x35. Unwilling To Perf (45453)

During Active Directory Processing the following error occurs "LDAP error 0x35. Unwilling To Perform"

This issue, among others has been resolved in ADPW 8.2.2. It can be downloaded from the following link:

https://support.quest.com/SUPPORT/index?page=downloadsentitlement&file=2439904

Installation:

Before installation remove any previous version of standalone Active Directory Processing Wizard, if one was installed.  The console integrated ADPW version cannot be uninstalled.  To install Active Directory Processing Wizard 8.2.2, run the adpw.8.2.2.100.msi file and complete the installation wizard.  After installation of this standalone version is complete, it must be executed via the start menu, and not from within the QMM console.  Launching from within the QMM console, will only run the version that is shipped and installed with the product. 

Important:

The tool does not communicate to migration project database in ADAM and requires the external INI file containing the list of migrated objects. To generate the INI file, take the following steps:

1. From Tools menu in Quest Migration Manager, select Export to | INI file. The Export INI File dialog box will appear.
2. Select Active Directory Processing Wizard in the Wizard's Name list box.
3. Specify the INI file name and path in the INI file field or leave the default.
4. Click OK. This will create INI file in the folder you specified on step 3.

Quest Active Directory Processing Wizard 8.2.2 is a new version of the tool that replaces one included in Migration Manager 8.2 setup and includes the following enhancements:

• Resolves the issue with group membership updating on domain controllers running Windows Server 2003 SP1 without hotfix KB906381, SP1 with hotfix KB926122 or SP2 ("LDAP error 0x35. Unwilling To Perform" error).
• Improves performance of group membership and linked attribute updating.
• Provides the ability to specify preferred domain controllers and global catalogs.
• Provides the ability to specify processed organizational units.
• Allows consistent updating of current processing state in user interface.
• Improves logging.

New in this release: 

• Ability to exclude sub-containers from updating
• Ability to specify the log file path in the LogFilePath string value of the HKEY_LOCAL_MACHINE\SOFTWARE\Aelita\Migration Tools\CurrentVersion\Active Directory Processing Wizard registry key.
• Exchange directory permission updating
• sIDHistory cleanup

Resolved Issues:

ADPW may create corrupted ACE if the Inherited Object Type field and the Object Ace Type field is empty in the processed ACE.
Note: The issue may occur, only if permissions on ACE applied to a specified object type, like users, groups, inetOrgPersons, etc (not to the current object and/or its child objects). If the ACE is corrupted, the permissions will be applied to Special, and the ACE description will contain the following: Object permissions are not available for this object type.