Error: E20235: Failed to find ACCOUNTNAME, hr=0x800401e4. This account will not be migrated. (NETIQKB25035)

fact
Domain Migration Administrator 7.1

symptom

Error: E20235: Failed to find ACCOUNTNAME, hr=0x800401e4.  This account will not be migrated.

symptom
Symptom 1 This error is found in the migration.log on the Domain Migration Administrator (DMA) console machine after the 'Remove SID History' wizard is executed.  SID History is not removed from the target account.  The migration scenario is INTRAforest or between two domains that have the same parent/root.

symptom

Symptom 2 This error is inaccurate when the migration scenario is other than INTRAforest.  You will see the following entry immediately after the error when SID History is properly removed in a non-INTRAforest scenario:

Removed SID for (account_name) from SIDHistory of (account_name).

cause
Hotfix 22291 introduced an issue that will not allow DMA to remove SID History from an account that has been migrated in an INTRAforest scenario.

fix

When SID History has not been removed you may choose from the following 2 workarounds (A or B) to resolve the issue:

NOTE: These workarounds are not necessary when SID History has been removed as described in Symptom 2 above. Please consider the error inaccurate.

A. Project Export

1. Install DMA on another Windows 2000 or XP machine.  Do not install any Hotfixes. 
2. Export your project to the 2nd DMA console and use the 'Remove SID History' wizard as you would under normal circumstances. 
3. Once SID History has been removed, you may export the project from the 2nd console to the original DMA console and continue your migration plan.
4. You may uninstall DMA from the 2nd console if you prefer, however there is no consequence for leaving it installed.

For more information on exporting projects, please see Chapter 6, sub-section 'Exporting a Migration Project' in the DMA/SC 7.1 User Guide.

B. Run SidHistory Report

1. Install DMA on another Windows 2000 or XP machine.  Do not install any Hotfixes. 
2. From the 2nd console, run the report named 'SidHistory' under the 'Domain Status' report group.  This will populate the DMA database on the 2nd console.
3. Use the 'Remove SID History' wizard as you would under normal circumstances.
4. You may uninstall DMA from the 2nd console if you prefer, however there is no consequence for leaving it installed.

For more information on reports, please see Chapter 8 'Understanding Reporting' in the DMA/SC 7.1 User Guide.

note
This issue will be fixed in DMA 7.2 which is tentatively scheduled for release late in 2003.

note

Please contact Technical Support to create a 'Support Request' for any issues you encounter that are not addressed by the User Guide, any Knowledge Base articles found on the website, or current Hotfixes available for download.

• Online Support Request Form

Formerly known as NETIQKB25035