Windows App cannot start after ADMT 3.2 security translation runs in Windows 8, Windows 8.1 and Windows 10

Symptoms
Consider the following scenario:

  • You create a user account in domain A.
  • You link a Microsoft Account (MSA) to the user account.
  • You log on to a Windows 8-based, Windows 8.1-based, or Windows 10-based computer by using the user account, and then you install a Windows app.
  • You use Active Directory Migration Tool (ADMT) 3.2 to migrate the user account from domain A to domain B.
  • You run a security translation to update the permissions settings on the client computer by using the user’s new domain SID.
  • You log off and then log back on by using the migrated user account.
In this scenario, the following issues occur:

  • Security translation fails and generates error 1314 in the ADMT log on the client on which the security translation agent ran. The log entry resembles the following.

    DecimalHexSymbolicFriendly
    13140x522ERROR_PRIVELEGE_NOT_HELDA required privilege is not held by the client.
  • Built-in and store applications can't start on Windows 8-based, Windows 8.1-based, or Windows 10-based computers.
  • Clicking the Start button does not open the Start menu on Windows 10-based computers.
  • If you switch to Tablet mode and then switch back to the previous mode in Windows 10, the Start menu continues to work but other built-in and store applications do not start.

  • Search is unresponsive.
  • The Settings application does not start on Windows 10-based computers when you click the Settings icon directly or use the Windows+I keyboard shortcut. This application works the first time that it is started, and it also works when you use the Display settings shortcut menu on the desktop.
  • You cannot view .jpg files because the modern application that is assigned in the file associations tool does not start. When this occurs, you receive the following error message:

    Invalid value for registry
    Error message
  • When you click the Store application in the Windows taskbar of a Windows 10-based computer, the command fails, and you receive the following error message:

    This app can't install.
Workaround
To work around this issue, follow these steps:

  1. Migrate user accounts on a pre-Windows 8 operating system to the destination domain before you upgrade the accounts to Windows 10.
  2. For Windows apps that are installed from the Windows Store, uninstall and then reinstall the app.
  3. Protect application data: Back up and restore data as required to avoid data loss. Data can be copied or restored to a new or different user account that is not yet subject to security translation.
Properties

Article ID: 3145204 - Last Review: 10/28/2016 08:14:00 - Revision: 3.0

Windows 10 Version 1607, Windows 8.1 Enterprise, Windows 8.1, Windows 8.1 Pro, Windows 8, Windows 8 Pro, Windows 8 Enterprise

  • kbexpertiseadvanced kbsurveynew kbtshoot KB3145204
Feedback