ODM Active Directory (ODMAD) Cutover fails during the domain join phase with the following error: "Domain join failed with error: 2732"
The error is recorded in the Cutover log file:
PowerShell-<date and time>-BT-Cutover.txt
Log files can be found on the target machine in the following directory:
C:\Program Files (x86)\Quest\On Demand Migration Active Directory Agent\Files\
The target computer account was pre-created using the Offline Domain Join (ODJ) process via djoin.exe /provision. Such accounts are intended to be consumed by a corresponding ODJ operation (djoin.exe /requestodj) and are not designed for standard online domain join workflows.
During Cutover with “Join to Existing = Yes”, the join operation attempts to use standard domain join logic instead of ODJ. In this scenario, the pre-created account cannot be properly utilized. Consequently, Active Directory attempts to create a new computer account, which fails because an account with the same name already exists in the target domain.
Resolution Plan:
Important Notes:
Workaround (for affected devices):
Warning:
This ReACL configuration should not be used as a standard practice. It is intended only for devices in a “limbo” state where it has been fully verified that all required source user profiles have already been successfully converted to their target equivalents.