Environment
NetIQ Identity Manager 4.0.2
NetIQ Identity Manager Driver - Active Directory 4.0.1.0
Situation
After attempting to launch the Password Synchronization Control Panel on a windows server running the remote loader, an error: Windows Shell Common Dll has stopped working
is received with the following details.
Problem signature:
Problem Event Name: APPCRASH
Application Name: rundll32.exe_shell32.dll
Application Version: 6.1.7600.16385
Application Timestamp: 4a5bc9e0
Fault Module Name: PassSyncConfig.cpl
Fault Module Version: 1.3.0.0
Fault Module Timestamp: 549944af
Exception Code: c000041d
Exception Offset: 0000000000007adc
OS Version: 6.1.7601.2.1.0.274.10
Locale ID: 1033
Additional Information 1: e18e
Additional Information 2: e18e74b21e9624248e2e315705a24017
Additional Information 3: 80fa
Additional Information 4: 80fa21661b2bebf567b851e61cbb3b3b
is received with the following details.
Problem signature:
Problem Event Name: APPCRASH
Application Name: rundll32.exe_shell32.dll
Application Version: 6.1.7600.16385
Application Timestamp: 4a5bc9e0
Fault Module Name: PassSyncConfig.cpl
Fault Module Version: 1.3.0.0
Fault Module Timestamp: 549944af
Exception Code: c000041d
Exception Offset: 0000000000007adc
OS Version: 6.1.7601.2.1.0.274.10
Locale ID: 1033
Additional Information 1: e18e
Additional Information 2: e18e74b21e9624248e2e315705a24017
Additional Information 3: 80fa
Additional Information 4: 80fa21661b2bebf567b851e61cbb3b3b
Resolution
There was a ghost Domain Controller (DC) in the environment.
Meaning that there was a DC listed that was not really there.
After removing that DC, the password sync control panel applet launched without errors.
You can try to use the following to find such a DC.
netdom query dc
nltest /dclist:<domain name>
Then if you find one, you may have to remove it adsiedit.
Contact your Active Directory Administrator for assistance with this process.
Meaning that there was a DC listed that was not really there.
After removing that DC, the password sync control panel applet launched without errors.
You can try to use the following to find such a DC.
netdom query dc
nltest /dclist:<domain name>
Then if you find one, you may have to remove it adsiedit.
Contact your Active Directory Administrator for assistance with this process.