The server is unwilling to process the request (4248586)

The server is unwilling to process the request

A user provisioning or update step with Active Directory target that includes pwdHash sync rule fails with the following error: 

The Server is unwilling to process the request.

1. Quick Connect Capture Agent is not installed on the source or target domain controller.
2. Initial password rule is not configured in user provisioning step.
   Note: Active Directory does not allow creating user accounts with a blank password.

Applicable to both user provisioning and update:

1. Make sure you have Quick Connect Capture Agents installed on both the source and target domain controllers.
2. Make sure that the version of Capture Agents matches the one of the Sync Engine component.

Applicable to user provisioning only:

• Specify a placeholder password that matches the domain password policy rules in the provisioning step, under Initial Password.
• Quick Connect will specify the placeholder password when creating user accounts, therefore avoiding the error.
• Right after the user is created, Quick Connect will copy the password hash over therefore replacing the placeholder password with the required password from the source domain.

 

 

pwdHash attribute does not exist in Active Directory and therefore it's value cannot be obtained or written directly. Quick Connect allows reading and writing password hash value for Active Directory users with a proprietary mechanism referred to as pwdHash synchronization. That mechanism requires Capture Agents to be deployed to both source and target domain controllers as the password hash value cannot be extracted or written remotely.