In the profile that creates & updates groups, SID History syncs successfully.
In the profile that matches & updates users, SID History fails with error “The remote procedure call failed and did not execute”.
The source service account is a Domain Admin. The target service account has Delegated SID History rights for the whole domain.
The network/firewall guys state that all required ports are open between the DSPro server and the DC's, as well as between the target DC and the source PDC.
I have tried copying the Users profile and trying it on the new profile, same error. I have also tried creating a new Users profile from scratch (no copy), same error.
Please advise what could cause this.
Re-establish the connection by switching the GC in the Users profile to a different Domain Controller (DC), this should clear the domain display temporarily.
Click "Search" to re-populate the Domain Name display
Click Save.
Run a sync, the SID's should sync across for the affected objects.
Change the Users profile back to use the original GC, which should clear the Domain Name Display temporarily.
Click "Search" to re-populate the display
Clicked Save.
Contact Product Support if this does not resolve the issue.