-
Title
"Error 0xe1000051. Cannot compare password hashes, source user: x, target user:x -
Description
"Error 0xe1000051. Cannot compare password hashes, source user: "UserName", target user: "UserName" Error 0x80070005. Cannot install AePAgent. Cannot identify CPU type. Access is denied. (source=AePwd.PwdInstEx.1)."
-
Cause
1. The firewall service on domain controllers in the the source and/or target domain may not permit the installation of the AePagent service. Password comparison will fail if the AePagent cannot be installed.
2. An antivirus prevents password agent from being installed on either the source or target domain controller.
-
Resolution
1. Disable the firewall on the domain controller noted in the DSA.log error. Once the firewall has been disabled, the AePagent will be installed and password synchronization should start to work.
If the firewall on the domain controllers cannot be disabled, make sure that ports 135, 137, 138 and 139 are open on the following servers:
- source and target server
- routers separating the subnets
- firewall
For Windows Server 2008 and Windows Server 2008 R2 create a new rule using the New Inbound Rule Wizard or by executing the command noted below:
x86 domain controllers:
netsh advfirewall firewall add rule name="Quest Migration Manager Agent" dir=in action=allow program="%SystemRoot%\System32\AelAgentMS.exe"
x64 domain controllers:
netsh advfirewall firewall add rule name="Quest Migration Manager Agent" dir=in action=allow program="%SystemRoot%\System32\AelAgentMS64.exe"
****
2. It may not be enough to disable McAfee and/or Trend-Micro antivirus services from within services.msc. You must either completely uninstall the antivirus or go into the settings and completely disable "on-access" scanning functionality via checkbox. This may vary based on the version of McAfee, and additional testing may be needed. Disabling Trend-Micro Antivirus is not enough to prevent this and must be completely uninstalled.
To add agent to exclusion list please run following command using powershell:
Add-MpPreference -ExclusionPath C:\Windows\System32\AelAgentMS64.exe
-
Additional Information
For more information on firewall ports and how to properly prepare the source and target domains, review the "Preparing the Source and Target Environments for Active Directory Migration" section of the http://worlddownloads.quest.com.edgesuite.net/Repository/support.quest.com/Migration%20Manager%20for%20AD/8.8/Documentation/Migratio Manager_8.8_Install Guide.pdf 8.8 installation guide QMM 8.8 Installation Guide As noted in the installation guide, for one-way synchronization disable or modify the target domain controllers' firewall rules. For a two-way synchronization, the same actions will need to be performed on the source domain controllers.