I have error when run dSHeuristics script, Windows 2016 Domain controllers and Functional level is Windows 2016
PS C:Scripts> C:ScriptsADdSHeuristics.ps1
dSHeuristics has already been set to 001
Checking Authenticated Users are part of "Pre-Windows 2000 Compatible Access" group
.. It has already been removed
Going through the Hosted Orgs
.OU: OU=Tenant B,OU=Units,DC=FM,DC=contoso,DC=com
Exception calling "AddAccessRule" with "1" argument(s): "Some or all identity references could
not be translated."
At C:ScriptsADdSHeuristics.ps1:78 char:5
+ $SubOUacl.AddAccessRule($SubOUace3) >$null 2>&1
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [], MethodInvocationException
+ FullyQualifiedErrorId : IdentityNotMappedException
Hello,
Please find the documentation at https://solidcp.com/kb/configuration/active-directory-advanced-ou-segregation/ taking care to set the values inside the powershell file.
Thanks,
Trevor
I followed that one and partially the script is running, it update the dSHeuristics value but fail to proceed with applying permissions to Hosting and SubOU
Hello,
I can see that there is an error where it shows the $CustomerOU has not been set and is using: OU=Tenant B,OU=Units,DC=FM,DC=contoso,DC=com or do you use contoso.com as your AD domain?
Thanks,
Trevor
the domain is FM.Contoso.com
