ADprep /domainprep fails
in [Active Directory]
|
From: janglim on 26 Aug 2007 23:13 Hello All, I am preparing an SBS2000 server for upgrade. I ran adprep / forestprep without error, but I cannot get /domainprep to complete. The final portion of the log is: ------------------------------------------ Adprep was unable to modify the security descriptor on object CN=User,CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=rcco,DC=local. [Status/Consequence] ADPREP was unable to merge the existing security descriptor with the new access control entry (ACE). [User Action] Check the log file Adprep.log in the system root System32\Debug\Adprep \Logs directory for more information. Adprep encountered an LDAP error. Error code: 0x0. Server extended error code: 0x0, Server error message: (null). Adprep was unable to update domain-wide information. [Status/Consequence] Adprep requires access to existing domain-wide information from the infrastructure master in order to complete this operation. [User Action] Check the log file, Adprep.log, in the C:\WINNT\system32\debug\adprep \logs\20070826180815 directory for more information. ------------------------------------------------------------ Some measures I have tried or verified so far: 1. This is the only DC in the domain - it is the infrastructure master 2. I have verified that the reg key defining sysvol location is present and correct 3. I have verified that the "schema updates allowed" (or similar) box is checked 4. I have checked that the default domain controller GPO security policy "manage auditing and security log" lists administrators. 5. I am logged on as administrator, which is member of Administrators, Domain Admins, Enterprise Admins, and Schema Admins any thoughts? thanks, joe
From: Meinolf Weber on 27 Aug 2007 06:11 Hello janglim(a)wt.net, Check out this article about a newer adprep version: http://support.microsoft.com/kb/324392 Best regards Meinolf Weber (Myweb) Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. > Adprep was unable to modify the security descriptor on object >
From: Meinolf Weber on 27 Aug 2007 06:13 Hello janglim(a)wt.net, Also please post the logfile if possible, maybe something is stated more detailed. Best regards Meinolf Weber (Myweb) Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. > Adprep was unable to modify the security descriptor on object >
From: janglim on 27 Aug 2007 11:56 Thanks Meinolf, I'll have to go back through the info on the later version of adprep. I believe I have the latest though - I am getting it from the SBS2003 install set that includes R2 technologies. Here is the full log text: Adprep created the log file ADPrep.log under C:\WINNT\system32\debug \adprep\logs\20070824185735 directory. Adprep copied file D:\I386\schema.ini from installation point to local machine under directory C:\WINNT. Adprep successfully made the LDAP connection to the local domain controller FLO. Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is (null). LDAP API ldap_search_s() finished, return code is 0x0 Adprep successfully retrieved information from the local directory service. Adprep successfully initialized global variables. [Status/Consequence] Adprep is continuing. Adprep was about to call the following LDAP API. ldap_add_s(). The entry to add is cn=DomainUpdates,cn=System,DC=rcco,DC=local. LDAP API ldap_add_s() finished, return code is 0x44 Adprep attempted to create the directory service object cn=DomainUpdates,cn=System,DC=rcco,DC=local. [Status/Consequence] The object exists so Adprep did not attempt to rerun this operation but is continuing. Adprep was about to call the following LDAP API. ldap_add_s(). The entry to add is cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local. LDAP API ldap_add_s() finished, return code is 0x44 Adprep attempted to create the directory service object cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local. [Status/Consequence] The object exists so Adprep did not attempt to rerun this operation but is continuing. Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is cn=ab402345- d3c3-455d-9ff7-40268a1099b6,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local. LDAP API ldap_search_s() finished, return code is 0x0 Adprep checked to verify whether operation cn=ab402345- d3c3-455d-9ff7-40268a1099b6,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local has completed. [Status/Consequence] The operation GUID already exists so Adprep did not attempt to rerun this operation but is continuing. Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is cn=bab5f54d-06c8-48de-9b87- d78b796564e4,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local. LDAP API ldap_search_s() finished, return code is 0x0 Adprep checked to verify whether operation cn=bab5f54d-06c8-48de-9b87- d78b796564e4,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local has completed. [Status/Consequence] The operation GUID already exists so Adprep did not attempt to rerun this operation but is continuing. Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is cn=f3dd09dd-25e8-4f9c-85df-12d6d2f2f2f5,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local. LDAP API ldap_search_s() finished, return code is 0x0 Adprep checked to verify whether operation cn=f3dd09dd-25e8-4f9c-85df-12d6d2f2f2f5,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local has completed. [Status/Consequence] The operation GUID already exists so Adprep did not attempt to rerun this operation but is continuing. Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is cn=2416c60a-fe15-4d7a-a61e- dffd5df864d3,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local. LDAP API ldap_search_s() finished, return code is 0x0 Adprep checked to verify whether operation cn=2416c60a-fe15-4d7a-a61e- dffd5df864d3,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local has completed. [Status/Consequence] The operation GUID already exists so Adprep did not attempt to rerun this operation but is continuing. Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is cn=7868d4c8-ac41-4e05- b401-776280e8e9f1,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local. LDAP API ldap_search_s() finished, return code is 0x0 Adprep checked to verify whether operation cn=7868d4c8-ac41-4e05- b401-776280e8e9f1,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local has completed. [Status/Consequence] The operation GUID already exists so Adprep did not attempt to rerun this operation but is continuing. Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is cn=860c36ed-5241-4c62-a18b- cf6ff9994173,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local. LDAP API ldap_search_s() finished, return code is 0x0 Adprep checked to verify whether operation cn=860c36ed-5241-4c62-a18b- cf6ff9994173,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local has completed. [Status/Consequence] The operation GUID already exists so Adprep did not attempt to rerun this operation but is continuing. Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is cn=0e660ea3-8a5e-4495-9ad7- ca1bd4638f9e,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local. LDAP API ldap_search_s() finished, return code is 0x0 Adprep checked to verify whether operation cn=0e660ea3-8a5e-4495-9ad7- ca1bd4638f9e,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local has completed. [Status/Consequence] The operation GUID already exists so Adprep did not attempt to rerun this operation but is continuing. Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is cn=a86fe12a-0f62-4e2a-b271- d27f601f8182,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local. LDAP API ldap_search_s() finished, return code is 0x0 Adprep checked to verify whether operation cn=a86fe12a-0f62-4e2a-b271- d27f601f8182,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local has completed. [Status/Consequence] The operation GUID already exists so Adprep did not attempt to rerun this operation but is continuing. Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is cn=d85c0bfd-094f-4cad- a2b5-82ac9268475d,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local. LDAP API ldap_search_s() finished, return code is 0x0 Adprep checked to verify whether operation cn=d85c0bfd-094f-4cad- a2b5-82ac9268475d,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local has completed. [Status/Consequence] The operation GUID already exists so Adprep did not attempt to rerun this operation but is continuing. Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is cn=6ada9ff7- c9df-45c1-908e-9fef2fab008a,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local. LDAP API ldap_search_s() finished, return code is 0x20 Adprep verified the state of operation cn=6ada9ff7- c9df-45c1-908e-9fef2fab008a,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local. [Status/Consequence] The operation has not run or is not currently running. It will be run next. Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is CN=User,CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=rcco,DC=local. LDAP API ldap_search_s() finished, return code is 0x0 Adprep was unable to modify the security descriptor on object CN=User,CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=rcco,DC=local. [Status/Consequence] ADPREP was unable to merge the existing security descriptor with the new access control entry (ACE). [User Action] Check the log file Adprep.log in the system root System32\Debug\Adprep \Logs directory for more information. Adprep encountered an LDAP error. Error code: 0x0. Server extended error code: 0x0, Server error message: (null). Adprep was unable to update domain-wide information. [Status/Consequence] Adprep requires access to existing domain-wide information from the infrastructure master in order to complete this operation. [User Action] Check the log file, Adprep.log, in the C:\WINNT\system32\debug\adprep \logs\20070824185735 directory for more information. On Aug 27, 3:13 am, Meinolf Weber (Myweb) <meiweb(nospam)@gmx.de> wrote: > Hello jang...(a)wt.net, > > Also please post the logfile if possible, maybe something is stated more > detailed. > > Best regards > > Meinolf Weber (Myweb) > Disclaimer: This posting is provided "AS IS" with no warranties, and confers > no rights. >
From: Meinolf Weber on 27 Aug 2007 12:30 Hello janglim(a)wt.net, Check out this article (very long but a lot of infos): http://zubiworld.spaces.live.com/blog/cns!540F18DCB3D2FECC!412.entry Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. > Thanks Meinolf, > > I'll have to go back through the info on the later version of adprep. > I believe I have the latest though - I am getting it from the SBS2003 > install set that includes R2 technologies. > > Here is the full log text: > Adprep created the log file ADPrep.log under C:\WINNT\system32\debug > \adprep\logs\20070824185735 directory. > Adprep copied file D:\I386\schema.ini from installation point to local > machine under directory C:\WINNT. > > Adprep successfully made the LDAP connection to the local domain > controller FLO. > > Adprep was about to call the following LDAP API. ldap_search_s(). The > base entry to start the search is (null). > > LDAP API ldap_search_s() finished, return code is 0x0 > > Adprep successfully retrieved information from the local directory > service. > > Adprep successfully initialized global variables. > > [Status/Consequence] > > Adprep is continuing. > > Adprep was about to call the following LDAP API. ldap_add_s(). The > entry to add is cn=DomainUpdates,cn=System,DC=rcco,DC=local. > > LDAP API ldap_add_s() finished, return code is 0x44 > > Adprep attempted to create the directory service object > cn=DomainUpdates,cn=System,DC=rcco,DC=local. > > [Status/Consequence] > > The object exists so Adprep did not attempt to rerun this operation > but is continuing. > > Adprep was about to call the following LDAP API. ldap_add_s(). The > entry to add is > cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local. > > LDAP API ldap_add_s() finished, return code is 0x44 > > Adprep attempted to create the directory service object > cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local. > > [Status/Consequence] > > The object exists so Adprep did not attempt to rerun this operation > but is continuing. > > Adprep was about to call the following LDAP API. ldap_search_s(). The > base entry to start the search is cn=ab402345- > d3c3-455d-9ff7-40268a1099b6,cn=Operations,cn=DomainUpdates,cn=System,D > C=rcco,DC=local. > > LDAP API ldap_search_s() finished, return code is 0x0 > > Adprep checked to verify whether operation cn=ab402345- > d3c3-455d-9ff7-40268a1099b6,cn=Operations,cn=DomainUpdates,cn=System,D > C=rcco,DC=local has completed. > > [Status/Consequence] > > The operation GUID already exists so Adprep did not attempt to rerun > this operation but is continuing. > > Adprep was about to call the following LDAP API. ldap_search_s(). The > base entry to start the search is cn=bab5f54d-06c8-48de-9b87- > d78b796564e4,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local > . > > LDAP API ldap_search_s() finished, return code is 0x0 > > Adprep checked to verify whether operation cn=bab5f54d-06c8-48de-9b87- > d78b796564e4,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local > has completed. > > [Status/Consequence] > > The operation GUID already exists so Adprep did not attempt to rerun > this operation but is continuing. > > Adprep was about to call the following LDAP API. ldap_search_s(). The > base entry to start the search is > cn=f3dd09dd-25e8-4f9c-85df-12d6d2f2f2f5,cn=Operations,cn=DomainUpdates > ,cn=System,DC=rcco,DC=local. > > LDAP API ldap_search_s() finished, return code is 0x0 > > Adprep checked to verify whether operation > cn=f3dd09dd-25e8-4f9c-85df-12d6d2f2f2f5,cn=Operations,cn=DomainUpdates > ,cn=System,DC=rcco,DC=local has completed. > > [Status/Consequence] > > The operation GUID already exists so Adprep did not attempt to rerun > this operation but is continuing. > > Adprep was about to call the following LDAP API. ldap_search_s(). The > base entry to start the search is cn=2416c60a-fe15-4d7a-a61e- > dffd5df864d3,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local > . > > LDAP API ldap_search_s() finished, return code is 0x0 > > Adprep checked to verify whether operation cn=2416c60a-fe15-4d7a-a61e- > dffd5df864d3,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local > has completed. > > [Status/Consequence] > > The operation GUID already exists so Adprep did not attempt to rerun > this operation but is continuing. > > Adprep was about to call the following LDAP API. ldap_search_s(). The > base entry to start the search is cn=7868d4c8-ac41-4e05- > b401-776280e8e9f1,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC= > local. > > LDAP API ldap_search_s() finished, return code is 0x0 > > Adprep checked to verify whether operation cn=7868d4c8-ac41-4e05- > b401-776280e8e9f1,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC= > local has completed. > > [Status/Consequence] > > The operation GUID already exists so Adprep did not attempt to rerun > this operation but is continuing. > > Adprep was about to call the following LDAP API. ldap_search_s(). The > base entry to start the search is cn=860c36ed-5241-4c62-a18b- > cf6ff9994173,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local > . > > LDAP API ldap_search_s() finished, return code is 0x0 > > Adprep checked to verify whether operation cn=860c36ed-5241-4c62-a18b- > cf6ff9994173,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local > has completed. > > [Status/Consequence] > > The operation GUID already exists so Adprep did not attempt to rerun > this operation but is continuing. > > Adprep was about to call the following LDAP API. ldap_search_s(). The > base entry to start the search is cn=0e660ea3-8a5e-4495-9ad7- > ca1bd4638f9e,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local > . > > LDAP API ldap_search_s() finished, return code is 0x0 > > Adprep checked to verify whether operation cn=0e660ea3-8a5e-4495-9ad7- > ca1bd4638f9e,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local > has completed. > > [Status/Consequence] > > The operation GUID already exists so Adprep did not attempt to rerun > this operation but is continuing. > > Adprep was about to call the following LDAP API. ldap_search_s(). The > base entry to start the search is cn=a86fe12a-0f62-4e2a-b271- > d27f601f8182,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local > . > > LDAP API ldap_search_s() finished, return code is 0x0 > > Adprep checked to verify whether operation cn=a86fe12a-0f62-4e2a-b271- > d27f601f8182,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local > has completed. > > [Status/Consequence] > > The operation GUID already exists so Adprep did not attempt to rerun > this operation but is continuing. > > Adprep was about to call the following LDAP API. ldap_search_s(). The > base entry to start the search is cn=d85c0bfd-094f-4cad- > a2b5-82ac9268475d,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC= > local. > > LDAP API ldap_search_s() finished, return code is 0x0 > > Adprep checked to verify whether operation cn=d85c0bfd-094f-4cad- > a2b5-82ac9268475d,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC= > local has completed. > > [Status/Consequence] > > The operation GUID already exists so Adprep did not attempt to rerun > this operation but is continuing. > > Adprep was about to call the following LDAP API. ldap_search_s(). The > base entry to start the search is cn=6ada9ff7- > c9df-45c1-908e-9fef2fab008a,cn=Operations,cn=DomainUpdates,cn=System,D > C=rcco,DC=local. > > LDAP API ldap_search_s() finished, return code is 0x20 > > Adprep verified the state of operation cn=6ada9ff7- > c9df-45c1-908e-9fef2fab008a,cn=Operations,cn=DomainUpdates,cn=System,D > C=rcco,DC=local. > > [Status/Consequence] > > The operation has not run or is not currently running. It will be run > next. > > Adprep was about to call the following LDAP API. ldap_search_s(). The > base entry to start the search is > CN=User,CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=Syste > m,DC=rcco,DC=local. > > LDAP API ldap_search_s() finished, return code is 0x0 > > Adprep was unable to modify the security descriptor on object > CN=User,CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=Syste > m,DC=rcco,DC=local. > > [Status/Consequence] > > ADPREP was unable to merge the existing security descriptor with the > new access control entry (ACE). > > [User Action] > > Check the log file Adprep.log in the system root System32\Debug\Adprep > \Logs directory for more information. > > Adprep encountered an LDAP error. > > Error code: 0x0. Server extended error code: 0x0, Server error > message: (null). > > Adprep was unable to update domain-wide information. > > [Status/Consequence] > > Adprep requires access to existing domain-wide information from the > infrastructure master in order to complete this operation. > > [User Action] > > Check the log file, Adprep.log, in the C:\WINNT\system32\debug\adprep > \logs\20070824185735 directory for more information. > > On Aug 27, 3:13 am, Meinolf Weber (Myweb) <meiweb(nospam)@gmx.de> > wrote: > >> Hello jang...(a)wt.net, >> >> Also please post the logfile if possible, maybe something is stated >> more detailed. >> >> Best regards >> >> Meinolf Weber (Myweb) >> Disclaimer: This posting is provided "AS IS" with no warranties, and >> confers >> no rights.
|
Pages: 1 Prev: replication help Next: computer cannot be managed.the network path not found |