Error "Cannot make RPC bind to DC" in Directory Synchronization Agent (DSA) and Event Viewer logs (4247292)

DSA log contains:

"Target JobID:0 -> Error 0xe3000006. Cannot make RPC bind to DC= SERVERNAME as User=admin from Domain=DOMAINNAME.
RPC error 0xe. Not enough storage is available to complete this operation."

Event Viewer logs contains:

Event Type: Error
Event Source: Controller (SERVERNAME)
Event Category: (15)
Event ID: 6
Date: 6/23/2006
Time: 2:25:34 PM
User: N/A
Computer: SERVERNAME
Description:
Cannot make RPC bind to DC= SERVERNAME as User=admin from Domain=DOMAINNAME.

The service account being used is a member of too many groups and this is probably causing a "token bloat". 

Remove the group membership for the Quest service account and the RPC error should disappear.

If this error has been caused by something else then the following troubleshooting procedure can be used:

1. Install Microsoft Support Tools on DSA machine and use the Replmon utility (Start - Run - Replmon.exe)
2. Select "Add Monitored Server"
3. Enter the name of the server to monitor explicitly (in our example SERVERNAME)
4. Select "Show Attribute Meta-Data for Active Directory Objects"
5. Connect using the service account credentials (in our example User=admin Domain=DOMAINNAME) and specify any Distinguished Name from the DSA.log (the DN of a failing object, eg: cn=administrator,cn=users,dc=domainname,dc=com)
6. If in doubt - use ADSI Edit, find the object, copy the DN path and repeat the test.

This test should help you to determine whether this error is Migration Manager or Microsoft related.

Note:  It has been confirmed that group membership for the Quest service account in nested groups will cause the same problem.