Provisioning Task fails with Event 41129 - Unable to get AD path for SID [S-X-X-XX-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-XXXXXX] - HRESULT [80070057]

Problem

Provisioning Task fails and logs an Event 41129 as seen below. 

Error Message

Event :  41129

Source :  Enterprise Vault

Category : Exchange Provisioning Task

Description: The Exchange mailbox provisioning task failed to read required information from Active Directory. The task has stopped. Ensure that the Active Directory server is operational and the account the task is using to log on has read access to the required objects. Then run the task again.

Task: Exchange Provisioning Task for domain.local

Group member: DOMAIN\Email Archiving

AD server: GC://10.0.0.1

Error: Unable to get AD path for SID [S-1-5-21-2281559424-4145653854-1186780546-111277] - HRESULT [80070057]

V-437-41129

See below excerpt of Dtrace process EVExchangePolicySyncTask:

1992 14:45:06.398  [2848] (EvExchangePolicySyncTask) <868> EV:M DirectoryHelper::CrackDsName() - Method failed with error [87]
1993 14:45:06.398  [2848] (EvExchangePolicySyncTask) <868> EV-H {EXCHANGEPOLICYSYNCHRONIZATION.EN_US} Fatal exception raised while processing provisioning group [Test Provisioning Group] / [DOMAIN\Email Archiving] - Unable to get AD path for SID [S-1-5-21-2281559424-4145653854-1186780546-111277] - HRESULT [80070057]. Stack trace:    at KVS.EnterpriseVault.ExchangePolicySync.ExchangePolicySynchronization.GetADObjectFromSID(String objSID)|   at KVS.EnterpriseVault.ExchangePolicySync.ExchangePolicySynchronization.ProcessGroup(PolicyTargetInfo targetInfo, Boolean& bMbxsReturned)|   at KVS.EnterpriseVault.ExchangePolicySync.ExchangePolicySynchronization.RunSynchronization(ExchangePolicySyncTaskEntry taskEntry, CheckControlEventsDelegate checkControlEvents, Boolean reportMode)
1994 14:45:06.398  [2848] (EvExchangePolicySyncTask) <868> EV~E |Event ID: 41129 The Exchange mailbox provisioning task failed to read required information from Active Directory. The task has stopped. Ensure that the Active Directory server is operational and the account the task is using to log on has read access to the required objects. Then run the task again.|Task: Exchange Provisioning Task for domain.local|Domain: domain.local|Provisioning group: Test Provisioning Group|Group member: DOMAIN\Email Archiving|AD server: GC://10.0.0.1|Error: Unable to get AD path for SID [S-1-5-21-2281559424-4145653854-1186780546-111277] - HRESULT [80070057]

 

Cause

Earlier in the dtrace, the line below indicates the issue:

60 14:45:03.398  [2848] (EvExchangePolicySyncTask) <868> EV-M {EXCHANGEPOLICYSYNCHRONIZATION.EN_US} Using GC override [10.0.0.1]

This means that the setting "Use specified Global Catalog server" on the Properties of the Exchange Domain target is configured with the value in the brackets (in this case, 10.0.0.1).

This is incorrect. The "Use specified Global Catalog server" setting requires the fully qualified domain name (FQDN) of the Global Catalog server, rather than the IP address.

Solution

Change the IP address specified in the "Use specified Global Catalog server" setting to the FQDN.