-
Title
Upon installing LSA Protection Update 20180619 DSA logs Error '0xe1000051. Cannot compare password hashes, source user: "TestUser01", target user: "TestUser01" Error 0x800706ba. The RPC server is unavailable.' -
Description
Upon installing LSA Protection Update 20180619 to Migration Manager for AD 8.14 Directory Synchronization Agent (DSA) logs the following error:
Common AcAdSwitches Calling ISynPwdEx connect, source: [source_DC], target: [target_DC]Common AcAdSwitches Error 0xe1000051. Cannot compare password hashes, source user: "TestUser02", target user: "TestUser02"Error 0x800706ba. The RPC server is unavailable. -
Cause
The preinstalled service feature allows you to use Active Directory synchronization accounts that are domain members not included in Administrators group to migrate passwords and/or SID History. The preinstalled service must be also configured for environments where Microsoft Local Security Authority (LSA) protection is used. The preinstalled service feature is available starting from Quest Migration Manager for Active Directory version 8.14 with the Product Update 20180619.
If the service is not preinstalled on one of the sides (source or target DC) the DSA logs the above error.
-
Resolution
Please configure the preinstalled service feature on both source and target Domain Controllers exactly as described in https://support.quest.com/technical-documents/migration-manager-for-ad/8.14/granular-account-permissions/2#TOPIC-952847
Even if Local Security Authority (LSA) protection is not required on one of the sides (source or target) the preinstalled service should be installed on it. There is no need to configure LSA protection on this side.
-
Additional Information
Might be nneded to restart the ADAM DB.