Offline Domain Join - PowerShell job BT-CredentialCache is failed (4381876)

Offline Domain Join - PowerShell job BT-CredentialCache is failed

The Offline Domain Join job in Quest On Demand fails during execution with errors indicating job status update failures and a failed Credential Cache task:

 

Error[12]: An error occurred attempting to update the job status to the server.
At least one error has occurred.
Error while sending the request.
The remote name could not be resolved: 'xxx'

 

Error[17]: PowerShell job BT-CredentialCache is failed.
Result code: 12

Ping to Target DC Failed! Starting Sleep Cycle for 300
General error

This error indicates that the Credential Cache task - a mandatory prerequisite for Offline Domain Join - cannot reach the target domain controller.

 

The issue occurs when the device agent on the workstation is unable to communicate with the Target Domain Controller IP address defined in the Credential Cache Profile. This is typically caused by the workstation not having an established or functional network path, most commonly due to VPN limitations.

 

Common scenarios include:

 

• The workstation is not connected to VPN at the time the Credential Cache task runs
• The VPN allows access to only one environment (source or target)
• The VPN disconnects or blocks local network access when enabled
• Network routing or firewall rules prevent simultaneous access to both environments

To successfully complete the Credential Cache activity and proceed with Offline Domain Join, ensure the following requirements are met:

1. Ensure Dual Network Connectivity

The workstation running the device agent must have simultaneous network connectivity to:

• The Source and Target DCs

This connectivity must exist at the same time during the Credential Cache task execution.

2. Verify VPN Configuration.

If a VPN is used:

• Confirm the VPN provides access to both source and target environments.
• Ensure the VPN does not disable local or secondary network routes.
• Avoid split-tunnel configurations that block one environment. 

3.  Validate Target DC Reachability.

From the workstation, verify connectivity to the target DC specified in the Credential Cache Profile:

ping <Target_DC_IP_or_FQDN> or nltest /dsgetdc:<target_domain>

Please review the video tutorial about Offline Domain Join and the technical documentation: 1. https://support.quest.com/kb/4373125/on-demand-migration-offline-domain-join 2. https://support.quest.com/technical-documents/on-demand-migration/current/active-directory-user-guide/13#TOPIC-1601763