Contact Sales
To contact our sales team, you can use the form below. Do not use this form for tickets or help desk, click here to create a ticket.
Neil Langston
neil@powersyncpro.com
0
Article
Last Month
Common Bulk Enrollment Token (BPRT) Issues & Troubleshooting
Published April 8th, 2025 by Neil Langston
Introduction When configuring PowerSyncPro to migrate devices into an Entra target directory, you must generate a Bulk Enrollment Token (BPRT). Rather than relying on legacy package files, PowerSyncPro streamlines this process by connecting directly to Microsoft Graph to retrieve the token. However, administrators may still occasionally encounter au
Create PowerSyncPro Entra ID App Registration
Published November 27th, 2024 by Neil Langston
Creating the PowerSyncPro Entra ID App Registration PowerSyncPro uses a Microsoft Entra ID app registration to authenticate and interact with your tenant. This registration defines what PowerSyncPro is permitted to read or modify, and provides the credentials used to establish the connection. Depending on your deployment — whether you are synchronis
How do I publish PowerSyncPro endpoints?
Published June 6th, 2025 by Neil Langston
Considerations: This document will be important to you if.. You require Migration Agent for the migration of Windows Workstations You require one or more of: Password Sync Agent, Proxy Agent or Remote Sync Agent. This might be projects to synchronise Active Directory (AD). Or you may need to sync users and computers for a Migration Agent project
Documentation & binaries
Published July 6th, 2023 by Neil Langston
Before you start Please ensure you have read the PowerSyncPro – Prerequisites document and installation guide, and are building a supported scenario for PSP. PowerSyncPro TM Directory Synchronisation Prerequisites https://downloads.powersyncpro.com/current/PSPSync-Prerequisites.pdf Installation Guide https://downloads.powersyncpro.com/curren
Agent Register initial request failed: Machine not in PSP
Published September 5th, 2025 by Neil Langston
You see the following error(s) on the workstation event viewer or in the failed communications view in the PowerSyncPro server, and you cannot add the workstation to the batch. Agent Register initial request failed: Machine not in PSP Failed to complete initial register call: Machine not found The good news is the workstation has successfully commun
Sync profile has a * (asterisk) next to it
Published July 19th, 2023 by Neil Langston
You have made a change in PSP which requires a “What If” review and approval before the job can complete. For example When you make changes to a sync profile, or many other places in PSP, there is a failsafe to ensure you will not cause unintended changes to your environment. You need to review the “what if” report to ensure that the changes y
3.3 Documentation Repository
Published April 13th, 2026 by Neil Langston
Navigate to our documentation page PowerSyncPro - Downloads and Documentation for the latest. DirSync Prerequisites Release Notes Installation Guide Configuration Guide Installer - PowerSyncPro Server and Service Installer - Remote Sync Agent Installer - Remote Password Agent Installer - Remote Proxy Agent Migration Agent Prerequisites Installat
Bulk Token Retrieval Failed (AADSTS90092)
Published October 25th, 2023 by Neil Langston
In rare circumstances your tenant may be missing important components to enable the creation of the Bulk Enrolment Token when configuring your Directories. The errors can be: “Bulk Token Retrieval Failed” "AADSTS90092: Non-retryable error has occurred" To fix this, you may need to create a Service Principal called Microsoft.Azure.SyncFabric . Check
How to apply a license to the PowerSyncPro server.
Published April 1st, 2026 by Neil Langston
Introduction PowerSyncPro is free to download, install and configure as IaaS software, we also have a marketplace image. You can simulate configuring your environment and review the actions PowerSyncPro would take if licensed by witnessing the powerful What-If feature. To migrate workstations using Migration Agent or “export” object (write/update/cr
User Choice Protection Driver (UCPD) causing Explorer or icon flickering issues.
Published May 20th, 2025 by Neil Langston
Resolved in May 2025 This issue was resolved in build 3.1.25141.2 released on 22nd May 2025, if you have a newer version of Migration Agent you do not need to do anything. In May 2025 Microsoft started rolling out a new enhancement into Windows to prevent the default applications being modified, this is called the User Choice Protection Driver o
Migration Agent is not starting or registering on a device
Published June 25th, 2024 by Neil Langston
Event viewer & agent reporting Application Event viewer is your friend here, look for any errors, problems are likely to be there on the device. Within the server navigation in Migration Agent, use the reports section to review where there might be problems “Agents”: Is the device registered “Agent logs”: see granular information on the progre
Workgroup workstation migration process
Published December 4th, 2024 by Neil Langston
PowerSyncPro Migration Agent can convert a device from a workgroup to e.g. Entra Joined retaining the user profile. NOTE: Ensure the version of the Windows is licensed as Professional, so it can connect to your corporate network. Home editions do not allow this. As in any project, you should also consult your device management team and identity a
Best practice for using userAccountControl in scoping
Published June 25th, 2024 by Neil Langston
A robust and more reliable way to identify the userAccountControl state in scoping is by using its property flags in your complex expression. For example, if you want to scope on the userAccountControl attribute to 0x0202 in hexadecimal (0x002 + 0x0200) in decimal, it's 514 (2 + 512) = ACCOUNTDISABLE, you would use the decimal value 2. (you can re
"Is not null" and "is not empty" not working as expected.
Published June 25th, 2024 by Neil Langston
In active directory, an attribute value can have many states. Null and blank (is empty) are two different states for an attribute value. PowerSyncPro can handle this circumstance, by combining both states to ensure you have the flexibility when you want to use Null independently on a different expression. For example, if you want to employeeID a
I've configured an SSL certificate in PowerSyncPro but my browser is not HTTPS
Published October 5th, 2023 by Neil Langston
There are two places which are distinctly separate which have the possibility of a certificate, one compulsory and one optional: Compulsory: Secure Migration Agent Communication, this is a certificate which is you generate in PowerSyncPro Migration Agent Server configuration which supersedes the PreSharedKey (PSK) when the device is registered, th
Licensing of PowerSyncPro
Published October 5th, 2023 by Neil Langston
PowerSyncPro should be implemented by a certified Partner to ensure your project is successful. This is important as you are configuring identity and devices which are the bedrock of your environment. Please contact us so we can put you in contact with a certified partner for your geography, or if you already have a partner, we are happy to on board
How to create a command line package to Run.
Published October 17th, 2024 by Neil Langston
At the start-up or completion of your runbook you can run a script that as the local SYSTEM Account. You will need to package the script within a zip file for it to execute. Size of cmdline.cmd PowerSyncPro is not designed as software delivery or the distribution of files, you should keep your script and cmdline.cmd file as small and efficient as
Setup Migration Agent to reconfigure Azure Information Protection
Published August 4th, 2023 by Neil Langston
If you would like to remove AIP (Azure Information Protection) from your workstation you need to obtain the correct information to populate into your runbook to remove AIP from the device. Here is the Migration Agent Runbook option for AIP. To obtain the correct information, you'll need to run the following cmdlets with Global Admin in both your
PowerSyncPro top 10 features
Published July 25th, 2023 by Neil Langston
PowerSyncPro Migration Agent 1. Migrates Windows 10/11 devices2. Migrates between Active Directories and/or Microsoft 365 tenants (AAD Join states)3. Re-permission Windows User profiles4. Reconfigure Microsoft Desktop Applications: Outlook, Teams, OneDrive, OneNote, Office Apps - reconfigure any application as it also has custom scripting capabili
Setting up and Utilizing a Group Managed Service Account (gMSA)
Published June 19th, 2024 by Neil Langston
A Group Managed Service Account (gMSA) provides a domain-managed identity whose password is automatically generated and rotated by Active Directory, eliminating the need to store or manually manage service account credentials. This improves security over traditional service accounts and offers better auditing, least-privilege control, and network au
legacyExchangeDN and other mail attributes - implicit writes
Published September 29th, 2023 by Neil Langston
Default processing PSP will always process the following attributes when Mail-Enable is selected. mail mailNickname proxyAddresses groupType reportToOrignator If those attributes are present on the source object, they will be written to target. The legacyExchangeDN is written to the proxyAddresses attribute as an x500 address. If they are not prese
No License for Domain
Published July 19th, 2023 by Neil Langston
You want to export (make changes) in your environment however, you see “No License for Domain” PSP is in a fully featured simulation mode. In other words, you have not purchased a license. or, the directory you are connecting to is not part of your license. or, you have not installed the license All features are available to you - apart from Expo
Cannot manipulate targetValue in complex expression.
Published October 4th, 2023 by Neil Langston
You want to manipulate the target value when performing directory synchronisation and modifying attributes. Directory synchronisation in PowerSyncPro focusses on using source attribute values to determine what the target value should be. The resultant target value for an attribute can be calculated from the result of a complex expression or simpl
Restrict access to Logon page from the internet.
Published May 22nd, 2025 by Neil Langston
How does PowerSyncPro Migration Agent communicate with the PowerSyncPro server? For the vast majority of our customers and partners, PowerSyncPro is presented to the internet for Migration Agent over HTTPS onto their own hosted PowerSyncPro server. This is so that PowerSyncPro Migration Agent installed on your workstations can perform the following
Microsoft errors from the field
Published December 12th, 2024 by Neil Langston
With any workstation migration, the device is at the whim of many controlling factors, to name a few: GPO, Active Directory, Intune, DNS, network, VPN, installed software, conditional access, tenant configuration, permissions, enterprise apps, Entra ID, and more. We have other articles related to Intune enrolment which may also help guide you to a
SMTP entries do not flow
Published July 20th, 2023 by Neil Langston
If you find SMTP domains are not flowing from source to target in an attribute like proxyaddresses, you need to add the domains into “SMTP Domains”. If your smtp domain is not listed it will not flow. One exception is that the mail attribute will always become the primary SMTP entry in proxyAddresses. Domains are removed before mappings. He
Requirements validation on the PowerSyncPro Server
Published November 27th, 2024 by Neil Langston
You can easily check all requirements are installed on your PowerSyncPro server by running the script below. This script gives you the possibility to performing checks for both Directory Synchronisation and orchestrating device migrations using Migration Agent. Furthermore, if you do not have a firewall enabled, you can also ignore any firewall port
Win32Exception (1): Incorrect function.
Published July 19th, 2024 by Neil Langston
Error: Category: AgentBase EventId: 0 Error calling GetAzureAdJoinInformation Exception: System.ComponentModel.Win32Exception (1): Incorrect function. Cause: You have installed the migration agent on a machine which is not joined to an Azure/Entra domain or an Active directory domain. Currently we do not support WORKGROUP based migrations. If you
Load More