SID History problem

Hello, 

we appear to have a problem with quest on-demand migration. 

There is a source domain A and target domain B both having the requirements set according to various quest articles (auditing, registry settings for LSA to listen over TCP/IP and others). Recently, test objects from other source domain (let's call it C for clarity) were migrated successfully including sID history - meaning the migration C → B worked well. 

When trying to migrate A → B,  the workflow log is full of Failed to add objectSid of admig2 in <source domain "A" > using <FQDN of PDC in source domain "A"> to sIDHistory of admig2 in <target domain> using <FQDN of target domain's PDC>. (Access is denied)",,12/05/2024 10:34:17

I am out of ideas where to look - does anyone have any advice?

Thanks a lot