Error library

Migration error fixes

Paste the error message or code. Each fix explains the cause, the steps and links to the official documentation.

98 errors13 platformsChecked 4 Nov 2026

You've reached the limit of email aliases for a single email address

A Jira Cloud Migration Assistant pre-migration check found more than 10 user aliases tied to one primary email address.

Atlassian
JCMA 124: The board '<board name>' is assigned invalid administrators: '<group name>'.

A Jira board lists administrator groups that are not valid, so the Jira Cloud Migration Assistant cannot prepare it for migration.

Atlassian
We couldn't import Permission Scheme 'XYZ scheme'. Reason: IllegalStateException: Errors: {holder.parameter=User 'user.name' does not exist}

A Jira permission scheme names a user who does not exist, so the Jira Cloud Migration Assistant cannot import the scheme.

Atlassian
Exception occurred in the server app

A Marketplace app hit an error on the server side during app migration, which can stall or time out the app migration.

Atlassian
Failed to add user to groups due to requesting user lacking permissions

The Confluence migration could not add users to groups because the account running it is not an admin on the cloud site.

Atlassian
Failed to execute export for query

The Confluence Cloud Migration Assistant could not export space data from the server, usually due to disk space, memory or open file limits.

Atlassian
SUBMITTING FAILURE Failed to Submit the Job to Server: Unknown failed reason when submitting a job. 0x01610002

A Migration Manager agent could not submit a migration job to SharePoint, which Microsoft links to antivirus software on the agent machine.

SharePoint and OneDrive
Current user doesn't have access to source file share

The Migration Manager agent cannot read the source file share because it is not a network share or the agent account lacks permission.

SharePoint and OneDrive
Destination site or web doesn't exist

Migration Manager cannot find the destination SharePoint site, subsite or OneDrive you set for the task.

SharePoint and OneDrive
MAUTHMOVERAPP

Migration Manager cannot read the cloud source because the Microsoft 365 migration app is not authorised in the source account.

SharePoint and OneDrive
MAUTHACCESSTOKENINVALID

Migration Manager could not call the Google Drive API because the access token is invalid or expired.

SharePoint and OneDrive
AADSTS50005: User tried to log in to a device from a platform (Unknown) that's currently not supported through Conditional Access policy

azcopy login is blocked because a Conditional Access policy only allows sign-in from certain device types.

Azure
dial tcp: lookup proxy.x.x: no such host

AzCopy cannot reach Azure because the proxy server it has been told to use cannot be found.

Azure
x509: certificate signed by unknown authority

AzCopy does not trust the TLS certificate it receives, usually because a proxy is inspecting the traffic.

Azure
403 This request is not authorized to perform this operation - CannotVerifyCopySource

An AzCopy copy between two storage accounts fails because the destination account cannot reach the source over the network.

Azure
503 Server Busy

Azure Storage is throttling AzCopy because the transfer is sending more requests or data than the account allows.

Azure
command not found: aws

Your shell cannot find the aws program, so the AWS CLI is not installed properly or is not on your PATH.

AWS
An error occurred (AccessDenied) when calling the ListBuckets operation: Access denied.

The AWS CLI ran, but the identity it used is not allowed to call the S3 API the command needs.

AWS
An error occurred (InvalidAccessKeyId) when calling the ListBuckets operation: The AWS Access Key Id you provided does not exist in our records.

The access key the AWS CLI sent is not a valid key, so AWS rejected the request.

AWS
An error occurred (SignatureDoesNotMatch) when calling the ListBuckets operation: The request signature we calculated does not match the signature you provided. Check your key and signing method.

AWS could not verify the request signature, usually because the computer clock is wrong or the secret key is mishandled.

AWS
[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed

The AWS CLI does not trust the TLS certificate it receives, often because a corporate proxy is inspecting traffic.

AWS
GatewayServiceException: The operation failed with the error 'Memory allocation failed. Out of memory.'

Agentless VMware replication fails because the NFC buffer on the ESXi host is too small for the number of disks being replicated.

Azure Migrate
The last replication cycle for the virtual machine failed. Encountered timeout event.

An agentless VMware replication cycle timed out because the source server is busy.

Azure Migrate
The provided manifest file is invalid: Invalid OVF manifest entry

Deploying the Azure Migrate appliance OVA in vSphere fails because the download is corrupt or incomplete.

Azure Migrate
Failed to connect to the Azure Migrate project. Check the error detail and follow the remediation steps by clicking Retry.

The appliance cannot register with the Azure Migrate project.

Azure Migrate
Agent not seen

AWS Application Migration Service (MGN) is not hearing from the replication agent on the source server.

AWS
NOT_CONVERGING (Not converging)

MGN replication backlog keeps growing because data is written to the source faster than it can be sent.

AWS
SNAPSHOTS_FAILURE (Snapshot failure)

MGN cannot take a consistent EBS snapshot of the replicated disks.

AWS
VPCIdNotSpecified error

An MGN test or cutover launch fails because the EC2 launch template does not name a valid subnet.

AWS
TooManyBadItemsPermanentException

The mailbox move stopped because it found more corrupt or missing items than the move request allows.

Exchange Online
StalledDueToTarget_Processor

A hybrid move from Exchange Server stalls and the move report shows MapiFxProxyTransientException: the data export was cancelled due to a timeout.

Exchange Online
MigrationPermanentException: Cannot find a recipient that has mailbox GUID

Moving a cloud mailbox back on-premises fails because the on-premises remote mailbox does not have the matching ExchangeGUID.

Exchange Online
MigrationPermanentException: Target user already has a primary mailbox

Offboarding a mailbox from Exchange Online to on-premises fails because the on-premises user still has mailbox attributes set.

Exchange Online
DataConsistencyScore Investigate (skipped items need approval)

The migration found some data loss and will not complete until an admin reviews and approves the skipped items.

Exchange Online
LargeItemLimit: migration fails on large items

The migration request fails or skips messages that are bigger than the maximum message size allowed in the target mailbox.

Exchange Online
We weren't able to connect to the remote server. Please verify that the migration endpoint settings are correct

A cutover migration cannot create its Outlook Anywhere migration endpoint, often with Error 0x6ba (The RPC server is unavailable).

Exchange Online
CrossTenantMigrationWithoutLicensePermanentException

A cross-tenant mailbox move fails because the user does not have a Cross-tenant User Data Migration licence.

Exchange Online
MailboxNotInCrossTenantMigrationScopeException

A cross-tenant mailbox move fails because the source mailbox is not in the scope the source tenant published for migration.

Exchange Online
NotAcceptedDomainException

A cross-tenant mailbox move fails because the target MailUser has a proxy address in a domain the target tenant does not own.

Exchange Online
MailboxExceedsTargetQuotaPermanentException

A cross-tenant mailbox move fails because the source mailbox is larger than the quota the mailbox will have in the target tenant.

Microsoft 365 tenant-to-tenant
MissingExchangeGuidException

A cross-tenant mailbox move fails because the target MailUser does not have the ExchangeGuid of the source mailbox.

Microsoft 365 tenant-to-tenant
UserAlreadyBeingMigratedException: The user 'Name' already has a pending request.

A hybrid move to Exchange Online fails because an active or orphaned move request already exists for the user.

Exchange Online
The operation couldn't be performed because '<mailbox display name>' matches multiple entries.

A hybrid remote move fails because a soft-deleted or inactive mailbox in Exchange Online has the same email address.

Exchange Online
The call to 'https://<ServerName>/EWS/mrsproxy.svc' failed. Error details: Access is denied.

Hybrid moves to Exchange Online fail because the on-premises hybrid server computer account is in a protected Active Directory group.

Exchange Online
Transient error CommunicationErrorTransientException has occurred. The system will retry

Hybrid mailbox moves keep retrying because an on-premises Forefront TMG server is blocking HTTP requests from Microsoft 365.

Exchange Online
We had trouble signing in to this account. Confirm that you're using the correct user name and password.

An IMAP migration to Exchange Online cannot sign in to the source mailbox with the user name and password in the CSV file.

Exchange Online
The connection to the server imap.contoso.com could not be completed.

An IMAP migration endpoint or batch cannot reach the source mail server because the server name is wrong or does not resolve in public DNS.

Exchange Online
MigrationPermanentException: Special credentials are required in order to access this IMAP account.

A Gmail or Google Workspace mailbox migration to Microsoft 365 fails because the Google account needs an app password for IMAP.

Exchange Online
S001 SourceAuthDenied

Google's data import from Exchange Online could not sign in to the Microsoft 365 source, or access was denied.

Google Workspace
T002 OAuthException

The import cannot write to Google Workspace because domain-wide delegation is missing scopes or access was revoked.

Google Workspace
T012 QuotaExceeded

The target Google Workspace user ran out of storage during the import.

Google Workspace
T010 ObjectSizeLimitFailure

An email, contact or other item was too large for Google Workspace to import.

Google Workspace
0x80041007 Invalid/non-existent Google User

Google Workspace Migration for Microsoft Exchange (GWMME) cannot find or access the target Google user.

Google Workspace
403 Forbidden: You exceeded your daily API quota levels

Google Workspace Migrate hit the daily API quota for the project it uses.

Google Workspace
429 Too Many Requests

Google Workspace Migrate is sending more requests than a source or target system will accept.

Google Workspace
Scan file failure: Target path is too long

SPMT or Migration Manager skipped a file because its full path in SharePoint would be too long.

SharePoint and OneDrive
Scan file failure: The folder name is invalid

A folder could not be migrated because its name is not allowed in SharePoint or OneDrive.

SharePoint and OneDrive
Scan File Failure: Not enough disk space to pack the file

The migration computer ran out of space in its working folder while packaging a file for upload.

SharePoint and OneDrive
0x0111000A Scan File Failure: File size exceeds limit

SPMT skipped a file because it is bigger than the tool or service allows.

SharePoint and OneDrive
0x0131000F Failed to Read the file. File is checked out.

SPMT could not read a file from a SharePoint Server source because someone has it checked out.

SharePoint and OneDrive
0x01110010 Invalid characters in the file name

Migration Manager skipped a file whose name contains characters SharePoint does not allow.

SharePoint and OneDrive
OneDrive error 0x8004de40

The OneDrive sync app cannot sign in because it is having trouble connecting to the cloud.

SharePoint and OneDrive
Cross-tenant OneDrive migration Failed: OneDrive already exists in target tenant

A native cross-tenant OneDrive move shows Failed because the user already has a OneDrive in the target tenant.

SharePoint and OneDrive
InvalidSoftMatch

Entra Connect tried to soft match an on-premises object to a cloud object that is already linked to a different on-premises object.

Entra ID
AttributeValueMustBeUnique

A sync export failed because the mail, proxyAddresses, signInName or userPrincipalName value already belongs to another object.

Entra ID
ObjectTypeMismatch

Soft matching found a user, group or contact of a different type with the same address.

Entra ID
LargeObject: The provisioned object is too large. Trim the number of attribute values on this object

An object exceeds an Entra ID size or count limit, most often because of too many userCertificate values.

Entra ID
InvalidHardMatch: Hard match operation blocked due to security hardening

Entra ID blocked Entra Connect from taking over a cloud user because that user is protected.

Entra ID
Existing Admin Role Conflict

A synced user has the same userPrincipalName as a cloud user that holds an admin role, so Entra Connect will not soft match them.

Entra ID
You're missing out! Ask your admin to enable Microsoft Teams

Users cannot sign in to Teams because Teams is not turned on for them.

Microsoft Teams
Migration for this conversation is in progress. Messages may be out of order during this time

A Teams channel or chat is stuck in migration mode after a message import.

Microsoft Teams
Unable to remove this domain. Use Get-MsolUser -DomainName to retrieve a list of objects that are blocking removal

Microsoft 365 will not remove a domain because users, groups, email addresses or SIP addresses still use it (DomainNotEmptyException).

Microsoft 365 tenant-to-tenant
Domain is already in use (verified in another directory)

You cannot add a custom domain to the new tenant because it is still verified in another Microsoft 365 or Entra tenant.

Microsoft 365 tenant-to-tenant
Not enough licenses (group-based licensing)

Group-based licensing could not assign a product to some members because the tenant has run out of that licence.

Microsoft 365 tenant-to-tenant
Conflicting service plans (licence assignment)

A licence cannot be assigned because one of its service plans clashes with a plan the user already has from another product.

Microsoft 365 tenant-to-tenant
Usage location isn't allowed (licence assignment)

A licence was not assigned because the user has no usage location or one where the service is not offered.

Microsoft 365 tenant-to-tenant
Duplicate proxy addresses (Exchange Online licence fails)

Assigning an Exchange Online licence fails because another object already has the same proxy address.

Microsoft 365 tenant-to-tenant
Cross-tenant synchronization does not update the mail attribute

Entra cross-tenant synchronization leaves the mail attribute unchanged on a target user who has an Exchange licence.

Microsoft 365 tenant-to-tenant
Error establishing a database connection

WordPress cannot connect to its MySQL or MariaDB database, so no page loads.

WordPress
There has been a critical error on this website. Please check your site admin email inbox for instructions.

A PHP fatal error stopped WordPress loading. Some sites show a blank white screen instead.

WordPress
WordPress 404 Not Found on all pages except the home page after migration

The home page loads but every post and page returns 404, because the rewrite rules did not come across.

WordPress
ERR_TOO_MANY_REDIRECTS (WordPress behind a proxy or CDN with HTTPS)

The browser reports a redirect loop after you move WordPress behind a load balancer, reverse proxy or CDN that handles SSL.

WordPress
WordPress redirects to the old domain after migration

The migrated site sends visitors or the admin login back to the old address because the site URLs in the database were not updated.

WordPress
The uploaded file exceeds the upload_max_filesize directive in php.ini

Uploads, including large site backups for import, fail because PHP limits the size of each uploaded file.

WordPress
Briefly unavailable for scheduled maintenance. Please check back in a minute.

The site is stuck in maintenance mode after an update or migration was interrupted.

WordPress
Allowed memory size exhausted

PHP ran out of memory while loading WordPress, often on a new host with a lower memory limit.

WordPress
550 5.7.23 The message was rejected because of Sender Policy Framework violation

The recipient's server bounced your message because it failed the SPF check for your domain.

DNS and email
550 5.7.1 (Exchange Online NDR)

A security or delivery restriction is blocking the message. After a cutover this is often a bad MX or SPF record or a connector problem.

DNS and email
spf=permerror (The message required too many lookups)

SPF returns a permanent error because the domain has more than one SPF record or the record needs more than 10 DNS lookups.

DNS and email
dmarc=fail action=oreject

The message failed DMARC and the sending domain's policy is reject, so the receiver rejected it.

DNS and email
DKIM CnameMissing (DKIM toggle will not enable in Microsoft 365)

Microsoft 365 cannot turn on DKIM signing for a custom domain because it cannot find the selector CNAME records.

DNS and email
550 5.7.367 Remote server returned not permitted to relay

Mail forwarded or relayed by Exchange Online was rejected by the next server, often with 554 5.7.1 Relaying denied.

DNS and email
Microsoft 365 can't verify your domain (TXT record not found)

Domain setup in Microsoft 365 will not verify because it cannot see the MS= TXT record.

DNS and email
Compatible TPM cannot be found

The TPM management console cannot see a TPM, so the PC fails the Windows 11 TPM 2.0 check.

Windows
Secure Boot not available (PC in Legacy BIOS / CSM mode)

The PC fails the Windows 11 Secure Boot check because the firmware boots in Legacy or CSM mode.

Windows
0xC1900101

The Windows upgrade rolled back because of a driver problem.

Windows
0xC1900200 – 0x20008 / 0xC1900202 – 0x20008

Windows setup stopped because the PC may not meet the minimum requirements for Windows 11.

Windows
0x80070070 – 0x50011 / 0x50012 / 0x60000

The Windows upgrade failed because the PC does not have enough free disk space.

Windows