US English (US)
GB English (UK)

Contact Us

If you still have questions or prefer to get help directly from an agent, please submit a request.
We’ll get back to you as soon as possible.

Please fill out the contact form below and we will reply as soon as possible.

  • Create ticket
English (US)
US English (US)
GB English (UK)
Neil

Neil Langston

neil@powersyncpro.com

1

Article
Last Month

Neil articles

All Categories
  • All Categories
  • Getting Started
  • FAQs
  • API Documentation
  • Integrations
  • Migration Agent
  • Directory Synchronisation
  • Remote DC agent
  • Remote Password Sync Agent

Microsoft errors from the field

Published December 12th, 2024 by Neil Langston

With any workstation migration, the device is at the whim of many controlling factors, to name a few: GPO, Active Directory, Intune, DNS, network, VPN, installed software, conditional access, tenant configuration, permissions, enterprise apps, Entra ID, and more.   We have other articles related to Intune enrolment which may also help guide you to a

368 Views 1 min

PowerSyncPro top 10 features

Published July 25th, 2023 by Neil Langston

PowerSyncPro Migration Agent   1. Migrates Windows 10/11 devices2. Migrates between Active Directories and/or Microsoft 365 tenants (AAD Join states)3. Re-permission Windows User profiles4. Reconfigure Microsoft Desktop Applications: Outlook, Teams, OneDrive, OneNote, Office Apps - reconfigure any application as it also has custom scripting capabili

1329 Views 1 min

Requirements for AD to AD password sync

Published October 6th, 2023 by Neil Langston

PowerSyncPro can bidirectionally copy the RC4 hash between Active Directory (AD) domains to allow the user to log on with the same password on both sides.    If a Microsoft Tenant is involved to another tenant and AADC is used to sync AD to Azure AD. We can do a bidirectional sync here to allow Self Service Password Reset (SSPR) to be used in a targ

1173 Views 1 min

Group managed service account

Published June 19th, 2024 by Neil Langston

You can use the common commands below to create and use a gMSA for your PowerSyncPro Dirsync Server installation   For detailed gMSA information please reffer to this article Getting Started with Group Managed Service Accounts in Windows Server | Microsoft Learn   Update the highlighted sections according to your environment and setup.   Install AD

716 Views 1 min

Documentation & binaries

Published July 6th, 2023 by Neil Langston

  Before you start Please ensure you have read the PowerSyncPro – Prerequisites document and installation guide, and are building a supported scenario for PSP.      PowerSyncPro TM Directory Synchronisation  Prerequisites https://downloads.powersyncpro.com/current/PSPSync-Prerequisites.pdf Installation Guide https://downloads.powersyncpro.com/curren

1456 Views 1 min

SMTP entries do not flow

Published July 20th, 2023 by Neil Langston

If you find SMTP domains are not flowing from source to target in an attribute like proxyaddresses, you need to add the domains into “SMTP Domains”.   If your smtp domain is not listed it will not flow.   One exception is that the mail attribute will always become the primary SMTP entry in proxyAddresses.    Domains are removed before mappings.   He

1042 Views 1 min

Workgroup workstation migration process

Published December 4th, 2024 by Neil Langston

PowerSyncPro Migration Agent can convert a device from a workgroup to e.g. Entra Joined retaining the user profile.    NOTE: ensure the version of the Windows 10 or 11 is Pro, so it can connect to your corporate network. Home editions do not allow this. As in any project, you should also consult your device management team and identity access teams

390 Views 3 min

Bulk Token Retrieval Failed (AADSTS90092)

Published October 25th, 2023 by Neil Langston

In rare circumstances your tenant may be missing important components to enable token creation when creating a package file for use in PowerSyncPro Migration Agent.   You will likely be changing the join state of your Windows devices when using Windows Imaging and Configuration Designer (WICD).   The errors can be “Bulk Token Retrieval Failed” "AADS

1581 Views 1 min

Create PowerSyncPro EntraID Application

Published November 27th, 2024 by Neil Langston

To smooth the creation of your PowerSyncPro EntraID Application in the source or target tenant the script below will create the full requirements for directory synchronisation (read & write) and enable features for creating the bulk enrolment token for device migrations to become cloud native (Entra Joined). Requirements: An activated Global Adm

414 Views 1 min

legacyExchangeDN implicit writes

Published September 29th, 2023 by Neil Langston

legacyExchangeDN has to be written as an x500 address in the proxyAddresses attribute in the target directory to maintain replyability and calendaring when also migrating mailbox data. legacyExchangeDN is written implicitly by PowerSyncPro Directory Synchronisation as part of default processing when Mail-Enable is selected. Default processing PSP wi

1173 Views 1 min

I've configured an SSL certificate in PowerSyncPro but my browser is not HTTPS

Published October 5th, 2023 by Neil Langston

There are two places which are distinctly separate which have the possibility of a certificate, one compulsory and one optional:   Compulsory: Secure Migration Agent Communication, this is a certificate which is you generate in PowerSyncPro Migration Agent Server configuration which supersedes the PreSharedKey (PSK) when the device is registered, th

1567 Views 1 min

AADSTS135010 UserPrincipal doesn't have the key ID configured

Published April 8th, 2025 by Neil Langston

The other error related to this is: Authorisation code not received from authorize endpoint call.   We have seen this error when the organisation has a restriction on “Users may join devices to Microsoft Entra” and they come to generate the bulk enrolment token (BPRT) for Entra Joining devices within the PowerSyncPro directory setup for Entra ID.  

123 Views 1 min

Cannot manipulate targetvalue in complex expression.

Published October 4th, 2023 by Neil Langston

targetvalue is calculated as the result of a complex expression or simple expression, it cannot be manipulated within the code of the expression you have created. So you would not be able to use targetvalue.split for example. You can use code on other attributes, and also use code on the sourcevalue, like for example source.split.   So whilst you ca

992 Views 1 min

No License for Domain

Published July 19th, 2023 by Neil Langston

You want to export (make changes) in your environment however, you see “No License for Domain”   PSP is in a fully featured simulation mode. In other words, you have not purchased a license. or, the directory you are connecting to is not part of your license.  or, you have not installed the license all features are available to you apart from Export

1767 Views 1 min

Migration Agent is not starting or registering on a device

Published June 25th, 2024 by Neil Langston

  Event viewer & agent reporting Application Event viewer is your friend here, look for any errors, problems are likely to be there on the device. Within the server navigation in Migration Agent, use the reports section to review where there might be problems “Agents”: Is the device registered “Agent logs”: see granular information on the progre

950 Views 2 min

Licensing of PowerSyncPro

Published October 5th, 2023 by Neil Langston

PowerSyncPro should be implemented by a certified Partner to ensure your project is successful. This is important as you are configuring identity and devices which are the bedrock of your environment.   Please contact us so we can put you in contact with a certified partner for your geography, or if you already have a partner, we are happy to on boa

1363 Views 1 min

Enable rights over the AD Recycle Bin

Published September 7th, 2023 by Neil Langston

Enable the AD Recycle Bin if it is not already enabled Enable-ADOptionalFeature 'Recycle Bin Feature' -Scope ForestOrConfigurationSet -Target [your forest] Create a Global Security Group e.g. “Restore_Objects” Add the PSP Service Account to this Group Run the following commands (replacing “Restore_Objects” with the group name you created) dsacls "dc

1237 Views 1 min

How to create a command line package to Run.

Published October 17th, 2024 by Neil Langston

At the startup or completion of your runbook you can run a script under SYSTEM.   You will need to package the script within a zip file for it to execute.   There are lots of options here, if you wish to run powershell to create a folder here is an example   Create a file called “ cmdline.cmd ” this will be run using command prompt. (it must be name

323 Views 1 min

Sync profile has a * (asterisk) next to it

Published July 19th, 2023 by Neil Langston

You have made a change in PSP which requires a “What If” review and approval before the job can complete.   For example   When you make changes to a sync profile, or many other places in PSP, there is a failsafe to ensure you will not cause unintended changes to your environment.   You need to review the “what if” report to ensure that the changes y

1142 Views 1 min

Setup Migration Agent to reconfigure Azure Information Protection

Published August 4th, 2023 by Neil Langston

If you would like to remove AIP (Azure Information Protection) from your workstation you need to obtain the correct information to populate into your runbook to remove AIP from the device.   Here is the Migration Agent Runbook option for AIP.   To obtain the correct information, you'll need to run the following cmdlets with Global Admin in both your

1055 Views 1 min

Best practice for using userAccountControl in scoping

Published June 25th, 2024 by Neil Langston

A robust and more reliable way to identify the userAccountControl state in scoping is by using its property flags in your complex expression.   For example, if you want to scope on the userAccountControl attribute to 0x0202 in hexadecimal (0x002 + 0x0200) in decimal, it's 514 (2 + 512) = ACCOUNTDISABLE, you would use the decimal value 2. (you can re

713 Views 1 min

Requirements validation on the PowerSyncPro Server

Published November 27th, 2024 by Neil Langston

You can easily check all requirements are installed on your PowerSyncPro server by running the script below. This script gives you the possibility to performing checks for both Directory Synchronisation and orchestrating device migrations using Migration Agent. Furthermore, if you do not have a firewall enabled, you can also ignore any firewall port

418 Views 1 min

"Is not null" and "is not empty" not working as expected.

Published June 25th, 2024 by Neil Langston

In active directory, an attribute value can have many states. Null and blank (is empty) are two different states for an attribute value.   PowerSyncPro can handle this circumstance, by combining both states to ensure you have the flexibility when you want to use Null independently on a different expression.   For example, if you want to employeeID a

681 Views 1 min

Win32Exception (1): Incorrect function.

Published July 19th, 2024 by Neil Langston

Error: Category: AgentBase EventId: 0 Error calling GetAzureAdJoinInformation Exception: System.ComponentModel.Win32Exception (1): Incorrect function. Cause: You have installed the migration agent on a machine which is not joined to an Azure/Entra domain or an Active directory domain. Currently we do not support WORKGROUP based migrations.   If you

549 Views 1 min
Load More

Subscribe to Newsletter

Drop your email in the box below to sign up. We promise to keep our updates relevant and useful – and we’ll never share your details.

PowerSyncPro is the ultimate product for easing the pain and frustration during mergers, acquisitions, divestitures, and consolidations.

Terms & Conditions

  • FAQs
  • Privacy Policy
  • Cookies
  • Anti Slavery Notice

PowerSyncPro

  • Case Studies
  • Contact sales
  • Meet the Team
  • EULA

Get Connected

Room 73, Wrest House, Wrest Park, Silsoe, Bedford, England, MK45 4HR
info@powersyncpro.com

Twitter Youtube Linkedin

Knowledge Base Software powered by Helpjuice

Expand