The following configuration required for SID history has not been performed. Local group, $$$, required for auditing has not been created in the source domain

by

While performing AD objects migration, you may receive the following error:

The following configuration required for SID history has not been performed. Local group, <source_domain_name>$$$, required for auditing has not been created in the source domain

Solution

Do the following to resolve the problem:

Create a local group in the source domain

Open active directory users and computers console in one of the domain controllers in the source domain. Expand domain name and locate Users container. Create an empty domain local group in the format <NetBIOS name of source domain>$$$ suppose yourdomain$$$

Enable Auditing in the source domain

  1. Open group policy management editor in one of the domain controller in source domain
  2. Expand Forest | Domains | Domain | Domain Controllers | Default Domain Controllers Policy
  3. Right-click Default Domain Controllers Policy and then click Edit
  4. Expand Computer Configuration | Policies | Windows Settings | Security Settings | Local Policies | Audit Policy
  5. In right-window, right-click Audit account management and then click Properties
  6. Click Define these policy settings and check both Success and Failure. Click Apply and then OK
  7. Again in the right-window, right-click Audit directory service access and then click Properties
  8. Click Define these policy settings and then check only success. Click Apply and then OK

Reference

https://technet.microsoft.com/en-us/library/cc974410%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396

Leave a Comment