After upgrading the version from 8.14 to 8.15 the following error is seen in DSA log:
03/12/21 10:59:52 (GMT-03:00) Common AcAdSwitches Error 0xe1000051. Cannot compare password hashes, source user: "<source_user>", target user: "<target_user>" Error 0x80070057. Cannot install AePAgent. Cannot start service. The parameter is incorrect. (source=AePwd.PwdInstEx.1)
To resolve the issue please determine if password and SIDHistory agents were installed using Preinstalled Feature or not.
Preinstalled Feature
Upgrade password and SIDHistory agents on DC using "Preinstalled Feature" item: Migration Manager for AD 8.15 - Granular Account Permissions (quest.com)
Default mode (on-demand method)
- write down what DC was mentioned in DSA log as having an issue
- verify list of DSAs in Agent Manager, Properties and list those that are having that DC configured as preferred
- stop synchronization for all domain pairs that are using those DSA agents
- when synchronization is stopped, DSA should remove AepAgent (64) and AelAgentMS (64) from appropriate folders in DC
-- AepAgent/AepAgent64 in c:\Windows\Aelita\AepAgent folder
-- AelAgentMs/AelAgentMs64 in c:\Windows\System32 folder
- make sure that appropriate services are stopped
If services are still running and/or files are still present, then stop services manually and move files away. Please make sure that Aelita folder is empty and AelAgentMs.cnt file are gone as well
Start synchronizations back and monitor DC. Files should be re-populated with the correct version.
© 2025 Quest Software Inc. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center