Upon installing LSA Protection Update 20180619 to Migration Manager for AD 8.14 Directory Synchronization Agent (DSA) logs the following error:
The preinstalled service feature allows you to use Active Directory synchronization accounts that are domain members not included in Administrators group to migrate passwords and/or SID History. The preinstalled service must be also configured for environments where Microsoft Local Security Authority (LSA) protection is used. The preinstalled service feature is available starting from Quest Migration Manager for Active Directory version 8.14 with the Product Update 20180619.
If the service is not preinstalled on one of the sides (source or target DC) the DSA logs the above error.
Please configure the preinstalled service feature on both source and target Domain Controllers exactly as described in https://support.quest.com/technical-documents/migration-manager-for-ad/8.14/granular-account-permissions/2#TOPIC-952847
Even if Local Security Authority (LSA) protection is not required on one of the sides (source or target) the preinstalled service should be installed on it. There is no need to configure LSA protection on this side.
© ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center