P365 Directory Sync workflow observed LSASS access denied error code 5 when syncing passwords
Security setting on the domain controller is preventing the password copy process accessing LSASS.
The following security setting under registry will need to be configured to allow access to LSASS on the domain controller.
• A setting that configured LSA as a protected service (Configuring Additional LSA Protection)
1. This configured a registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa - "RunAsPPL"=dword:00000001.
• A setting that disabled SMB1
1. This configured a registry key SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters - "SMB1"=dword:00000001
© 2021 Quest Software Inc. ALL RIGHTS RESERVED. Feedback 使用条款 隐私