An error appears when DMA tries to update the membership of a target group. (NETIQKB19605)

  • 7719605
  • 02-Feb-2007
  • 05-Oct-2007

Resolution

fact
Domain Migration Administrator 7.x

symptom
An error appears when DMA tries to update the membership of a target group.

symptom
DMA is unable to update the membership of a target group.

symptom
Error: '[7298]E23684: Failed to find (blank) in <source_domain name>, hr=80070057 The parameter is incorrect.'

symptom
Error: 'W13697: Skipping group, LDAP://domain.dom.local/CN=account,OU=MyOU,DC=domain,DC=dom,DC=local, since we have no SourcePath to examine.'

cause

This error can occur when the following criteria are met:

  1. Groups with SID History exist in the target domain's Active Directory.  Either they have been migrated to the target domain with another tool or another installation of DMA, or they have been created with the same name.
  2. The SID History report is run before the migration.
  3. The effected groups have not been specifically chosen for migration with the current installation of DMA, but the option to migrate associated groups has been chosen during user migration.


fix

There are two solutions for this issue:

First Solution:

  1. Specifically migrate the effected groups with the group migration wizard. 

    1. If you choose to migrate the group without the option to migrate its members, Domain Migration Administrator will still update the groups with only those user accounts that have already been migrated.


Second Solution:

  1. Open the \Program Files\NetIQ\DMA\Protar.mdb database with Microsoft Access 2000 or later.
  2. Open the table named, MigratedObjects.
  3. Remove any entries where the object type is group and the SourceAdsPath is blank. 
  4. Save the changes and close Microsoft Access 2000.

  5. Re-migrate the users.


Additional Information

Formerly known as NETIQKB19605