Error: incorrect username or password during AD import job

Products

• Information Centric Analytics

Issue/Introduction

The Bay Dynamics AD Connector Job fails and logs the following errors:

[1:ERROR] Program.Main() Exception caught in ActiveDirectoryImporter  System.Runtime.InteropServices.COMException (0x8007052E): The user name or password is incorrect.

 

[1:ERROR] Program.Main() ActiveDirectoryImporter import was not successful.  Process Exit Code 1.  The step failed.

Environment

Version : 6.x

Component : Active Directory Import Utility

Cause

This failure can be caused by any of the following conditions:

1. The account name used to query the Active Directory (AD) domain controller is invalid
2. The password for the account used to query the AD domain controller is invalid (typically expired)
3. The password for the account used to query the AD domain controller has not been updated correctly and encrypted

Resolution

To update the password used by the Active Directory Import Utility to query AD domain controllers, follow this procedure:

1. Open SQL Server Management Studio (SSMS)
2. Connect to the Database Engine hosting the ActiveDirectoryDW relational database
3. In Object Explorer, navigate to Databases > ActiveDirectoryDW > Tables
4. Right-click the table dbo.Server and select Select Top 1000 Rows
5. Note the ServerID of the AD server to be updated
6. In Object Explorer, navigate to SQL Server Agent > Jobs
7. Right-click the Bay Dynamics AD Connector Job and select Properties
   The Job Properties - Bay Dynamics AD Connector Job window opens
8. In the Job Properties - Bay Dynamics AD Connector Job window, select the Steps page
9. On the Steps page, click the Edit button
   The Command window opens
10. In the Command window, note the path to the ImportADUsersAndComputers.exe executable
11. Open a command prompt as an administrator
12. Navigate to the path identified in step 9
13. Edit the following command to use the ServerID from step 4 and the new password for the account:

    ImportADUsersAndComputers.exe -setapipassword <ServerID> <password>

    NOTE: If the AD password contains special characters, enclose the password in double quotation marks (for example, "<password>")

14. Execute the command