Granular Undo removes user account from source domain and not the target domain. (NETIQKB38841)

fact
Domain Migration Administrator 7.x

symptom
Granular Undo removes user account from source domain and not the target domain.

symptom
Error: 'Could not verify that domains are in different forest.  An invalid ADSI pathname was passed. (Error code HR-80005000, domain=)'.

symptom
The migration.log file indicates that the user account was removed from the target domain, however it was removed from the source domain instead.

cause
A malformed LDAP call within Domain Migration Administrator (DMA) returns an incorrect value when obtaining information about the source and target domains.  This results in DMA deleting the user account from the source domain rather than the target domain.

fix
To address this issue, install the latest hotfix for Domain Migration Administrator (DMA).

note
This issue was first addressed in DMA 7.2 Hotfix 39473.

Formerly known as NETIQKB38841