Getting error during On Demand Migration for Active Directory Agent installation
Error 1920. Service On Demand Migration for Active Directory Agent (ODMActiveDirectory) failed to start. Verify that you have sufficient privileges to start system services..Below are some possible cause
1) Incomplete update of gpo for permission (environmental) , if the GPO applies to others works
2) security tools or antivirus blocking and interrupting the installation
3) Other Restriction applies on the device to prevent the service from being started (environmental)
4) OS corruption of the device or issue on the windows; Error 1920 is more towards an windows service unable to start due to a restriction on the device
5) corrupted installation due to Hardware issue(harddisk badsector)
Below are some quick resolution that are possible resolutions for each possible cause
1) Make sure the device is updated and user permission is updated with GPO; Microsoft document can be reference here
2) Uninstall or add the exclusion list for the installer in security tools or antivirus.
3) verify if there is any other restriction applies on the environment involve installation
4) check windows health sample command below reference to here
DISM /online /cleanup-image /checkhealth 5) one of the hardware could be harddisk corruption or badsector, do a quick check on disk health with the command below, more details refers to here
chkdsk
Additional steps, you can double verify by starting the service on the device from services.msc if the service is able to run / startup.
6) In certain environments with specific security requirements, additional URLs need to be whitelisted to allow the agent to connect to the internet. Below are the necessary URLs that may need to be added to your proxy server or security tools:
## Connection to Quest *.quest-on-demand.com
These URLs may or may not be required based on your environment. Please consult your security team to determine which of the following need to be added: CDN Service with Microsoft (only required if your environment relies on specific infrastructure for CDN services): *.deploy.static.akamaitechnologies.com DigiCert (used for DigiCert certificate verification): *.ocsp.digicert.com Microsoft Authentication (required for Microsoft authentication, not by Quest): *.azure.com
Note: Be sure to reach out to your security team for clarification on which URLs are necessary for your specific environment.