Active Roles Synchronization Service fails with "@errorMessage:Can't find extension with Id = PowerShell script" (4308740)

Active Roles Synchronization Service fails with "@errorMessage:Can't find extension with Id = PowerShell script"

Active Roles Synchronization jobs fails with error: @errorMessage:Can't find extension with Id = PowerShell script ActiveRoles.SyncService.QcDbConnection.QcDbConnection.CreateCommand.

 

The Active Roles SyncService.log will have the following errors present:

Debug --> @errorMessage:Can't find extension with Id = PowerShell script ActiveRoles.SyncService.QcDbConnection.QcDbConnection.CreateCommand

Failed to calculate operation! ActiveRoles.SyncService.Server.Calculators.OperationCalculator.CalculateOperation System.ApplicationException: Can't find extension with Id = PowerShell script

The Active Roles Synchronization Service will instantiate a dedicated PowerShell runspace in order to execute every single script with a context that is specific for the in-process object.

The Active Roles Synchronization Service host has a computationally expensive PowerShell profile present.

This profile is executed when any PowerShell runspace is opened on the Active Roles Synchronization Service host and the overhead associated with executing this profile is causing the multiple runspaces leveraged by the Active Roles Synchronization Service to fail.

Enhancement ID 456767 has been created so that PowerShell runspaces created by both the Active Roles Synchronization Service and the Active Roles Administration Service do not load profiles from the hosts.

WORKAROUND

Check the following profile files on the Active Roles Synchronization Service host and remove any customizations from these files:

All Users, All Hosts
$PSHOME\Profile.ps1

All Users, Current Host
$PSHOME\Microsoft.PowerShell_profile.ps1

Current User, All Hosts
$HOME\Documents\PowerShell\Profile.ps1

Current user, Current Host
$HOME\Documents\PowerShell\Microsoft.PowerShell_profile.ps1

If scripts executed by the Active Roles Synchronization Service require any of the cmdlets executed by the PowerShell profile, add those cmdlets into the specific scripts were they are needed.


STATUS

An Enhancement Request has been created to update this functionality in Active Roles.

Product Management will evaluate the request and this feature may become available in a future release of the product.

There are no guarantees that this specific enhancement request will be implemented in a future release.

For more information regarding our Enhancement Request policy, refer to our Global Support Guide on the Support Portal at: https://support.oneidentity.com/essentials/support-guide/

456767