Prev: Problem with assigning permissions with CACLS in VBScript
Next: Active Directory keeps stopping
From: tarolvey on 14 Dec 2006 16:40
Hi all,
I am trying to upgrade my windows 2000 AD on my infrastructure master
server (holds all rolls).I was able to run forestprep without error but when
I run domainprep I receive the following error (see below) and have been
unable to resolve it, I have reinstalled service pack 4 and I am connected to
a SUS server that has been updating the server frequently.
I am running as domain admin and I do not have an exchange
server, I have succesfully updated my test domain,but can not figure out what
is causing the error in my active domain, the event logs are clean
replication is not an issue nor is missing sysvol entry in the registry if
anyone can suggest a specific patch or something else that I can try I would
greatly appreciate it.
Thanks!

Adprep created the log file ADPrep.log under
C:\WINNT\system32\debug\adprep\logs\20060906135606 directory.



Adprep copied file L:\I386\schema.ini from installation point to local
machine under directory C:\WINNT.



Adprep successfully made the LDAP connection to the local domain controller
NEGUS.



Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is (null).



LDAP API ldap_search_s() finished, return code is 0x0



Adprep successfully retrieved information from the local directory service.



Adprep successfully initialized global variables.

[Status/Consequence]

Adprep is continuing.



Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is cn=DomainUpdates,cn=System,DC=oz,DC=lds.



LDAP API ldap_add_s() finished, return code is 0x44



Adprep attempted to create the directory service object
cn=DomainUpdates,cn=System,DC=oz,DC=lds.

[Status/Consequence]

The object exists so Adprep did not attempt to rerun this operation but is
continuing.



Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is cn=Operations,cn=DomainUpdates,cn=System,DC=oz,DC=lds.



LDAP API ldap_add_s() finished, return code is 0x44



Adprep attempted to create the directory service object
cn=Operations,cn=DomainUpdates,cn=System,DC=oz,DC=lds.

[Status/Consequence]

The object exists so Adprep did not attempt to rerun this operation but is
continuing.



Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=ab402345-d3c3-455d-9ff7-40268a1099b6,cn=Operations,cn=DomainUpdates,cn=System,DC=oz,DC=lds.



LDAP API ldap_search_s() finished, return code is 0x20



Adprep verified the state of operation
cn=ab402345-d3c3-455d-9ff7-40268a1099b6,cn=Operations,cn=DomainUpdates,cn=System,DC=oz,DC=lds.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.



Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is CN=WMIPolicy,CN=System,DC=oz,DC=lds.



LDAP API ldap_add_s() finished, return code is 0x13



Adprep was unable to create the object CN=WMIPolicy,CN=System,DC=oz,DC=lds
in Active Directory.

[Status/Consequence]

This Adprep operation failed.

[User Action]

Check the log file adprep.log in the system root System32\Debug\Adprep\Logs
directory for more information. Restart Adprep.

Adprep encountered an LDAP error.

Error code: 0x13. Server extended error code: 0x51b, Server error message:
0000051B: AtrErr: DSID-031506FD, #1:
0: 0000051B: DSID-031506FD, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att
20119 (nTSecurityDescriptor)
..



Adprep was unable to update domain-wide information.

[Status/Consequence]

Adprep requires access to existing domain-wide information from the
infrastructure master in order to complete this operation.

[User Action]

Check the log file, Adprep.log, in the
C:\WINNT\system32\debug\adprep\logs\20060906135606 directory for more
information.




--

From: Danny Sanders on 14 Dec 2006 16:57
See if this helps
http://support.microsoft.com/kb/887435/en-us

hth
DDS
"tarolvey" <tarolvey(a)discussions.microsoft.com> wrote in message
news:25607A39-DDAE-461C-B70A-051C0DA1E9D4(a)microsoft.com...
> Hi all,
> I am trying to upgrade my windows 2000 AD on my infrastructure
> master
> server (holds all rolls).I was able to run forestprep without error but
> when
> I run domainprep I receive the following error (see below) and have been
> unable to resolve it, I have reinstalled service pack 4 and I am connected
> to
> a SUS server that has been updating the server frequently.
> I am running as domain admin and I do not have an exchange
> server, I have succesfully updated my test domain,but can not figure out
> what
> is causing the error in my active domain, the event logs are clean
> replication is not an issue nor is missing sysvol entry in the registry if
> anyone can suggest a specific patch or something else that I can try I
> would
> greatly appreciate it.
> Thanks!
>
> Adprep created the log file ADPrep.log under
> C:\WINNT\system32\debug\adprep\logs\20060906135606 directory.
>
>
>
> Adprep copied file L:\I386\schema.ini from installation point to local
> machine under directory C:\WINNT.
>
>
>
> Adprep successfully made the LDAP connection to the local domain
> controller
> NEGUS.
>
>
>
> Adprep was about to call the following LDAP API. ldap_search_s(). The base
> entry to start the search is (null).
>
>
>
> LDAP API ldap_search_s() finished, return code is 0x0
>
>
>
> Adprep successfully retrieved information from the local directory
> service.
>
>
>
> Adprep successfully initialized global variables.
>
> [Status/Consequence]
>
> Adprep is continuing.
>
>
>
> Adprep was about to call the following LDAP API. ldap_add_s(). The entry
> to
> add is cn=DomainUpdates,cn=System,DC=oz,DC=lds.
>
>
>
> LDAP API ldap_add_s() finished, return code is 0x44
>
>
>
> Adprep attempted to create the directory service object
> cn=DomainUpdates,cn=System,DC=oz,DC=lds.
>
> [Status/Consequence]
>
> The object exists so Adprep did not attempt to rerun this operation but is
> continuing.
>
>
>
> Adprep was about to call the following LDAP API. ldap_add_s(). The entry
> to
> add is cn=Operations,cn=DomainUpdates,cn=System,DC=oz,DC=lds.
>
>
>
> LDAP API ldap_add_s() finished, return code is 0x44
>
>
>
> Adprep attempted to create the directory service object
> cn=Operations,cn=DomainUpdates,cn=System,DC=oz,DC=lds.
>
> [Status/Consequence]
>
> The object exists so Adprep did not attempt to rerun this operation but is
> continuing.
>
>
>
> Adprep was about to call the following LDAP API. ldap_search_s(). The base
> entry to start the search is
> cn=ab402345-d3c3-455d-9ff7-40268a1099b6,cn=Operations,cn=DomainUpdates,cn=System,DC=oz,DC=lds.
>
>
>
> LDAP API ldap_search_s() finished, return code is 0x20
>
>
>
> Adprep verified the state of operation
> cn=ab402345-d3c3-455d-9ff7-40268a1099b6,cn=Operations,cn=DomainUpdates,cn=System,DC=oz,DC=lds.
>
> [Status/Consequence]
>
> The operation has not run or is not currently running. It will be run
> next.
>
>
>
> Adprep was about to call the following LDAP API. ldap_add_s(). The entry
> to
> add is CN=WMIPolicy,CN=System,DC=oz,DC=lds.
>
>
>
> LDAP API ldap_add_s() finished, return code is 0x13
>
>
>
> Adprep was unable to create the object CN=WMIPolicy,CN=System,DC=oz,DC=lds
> in Active Directory.
>
> [Status/Consequence]
>
> This Adprep operation failed.
>
> [User Action]
>
> Check the log file adprep.log in the system root
> System32\Debug\Adprep\Logs
> directory for more information. Restart Adprep.
>
> Adprep encountered an LDAP error.
>
> Error code: 0x13. Server extended error code: 0x51b, Server error message:
> 0000051B: AtrErr: DSID-031506FD, #1:
> 0: 0000051B: DSID-031506FD, problem 1005 (CONSTRAINT_ATT_TYPE), data 0,
> Att
> 20119 (nTSecurityDescriptor)
> .
>
>
>
> Adprep was unable to update domain-wide information.
>
> [Status/Consequence]
>
> Adprep requires access to existing domain-wide information from the
> infrastructure master in order to complete this operation.
>
> [User Action]
>
> Check the log file, Adprep.log, in the
> C:\WINNT\system32\debug\adprep\logs\20060906135606 directory for more
> information.
>
>
>
>
> --
>


From: Paul Bergson [MVP-DS] on 15 Dec 2006 08:52
Run diagnostics against your Active Directory domain.

If you don't have the tools installed, install them from your server install
disk.
d:\support\tools\setup.exe

Run dcdiag, netdiag and repadmin in verbose mode.
-> dcdiag /e /c /v /s:DC_Name /f:c:\dcdiag.log
-> netdiag.exe /v > c:\netdiag.log (On each dc)
-> repadmin.exe /showrepl dc* /verbose /all /intersite > c:\repl.txt

If you download a gui script I wrote it should be simple to set and run
(DCDiag and NetDiag). It also has the option to run individual tests
without having to learn all the switch options. The details will be output
in notepad text files that pop up automagically.

The script is located in the download section on my website at
http://www.pbbergs.com

Just select both dcdiag and netdiag make sure verbose is set. (Leave the
default settings for dcdiag as set when selected)

When complete search for fail, error and warning messages.


--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"tarolvey" <tarolvey(a)discussions.microsoft.com> wrote in message
news:25607A39-DDAE-461C-B70A-051C0DA1E9D4(a)microsoft.com...
> Hi all,
> I am trying to upgrade my windows 2000 AD on my infrastructure
> master
> server (holds all rolls).I was able to run forestprep without error but
> when
> I run domainprep I receive the following error (see below) and have been
> unable to resolve it, I have reinstalled service pack 4 and I am connected
> to
> a SUS server that has been updating the server frequently.
> I am running as domain admin and I do not have an exchange
> server, I have succesfully updated my test domain,but can not figure out
> what
> is causing the error in my active domain, the event logs are clean
> replication is not an issue nor is missing sysvol entry in the registry if
> anyone can suggest a specific patch or something else that I can try I
> would
> greatly appreciate it.
> Thanks!
>
> Adprep created the log file ADPrep.log under
> C:\WINNT\system32\debug\adprep\logs\20060906135606 directory.
>
>
>
> Adprep copied file L:\I386\schema.ini from installation point to local
> machine under directory C:\WINNT.
>
>
>
> Adprep successfully made the LDAP connection to the local domain
> controller
> NEGUS.
>
>
>
> Adprep was about to call the following LDAP API. ldap_search_s(). The base
> entry to start the search is (null).
>
>
>
> LDAP API ldap_search_s() finished, return code is 0x0
>
>
>
> Adprep successfully retrieved information from the local directory
> service.
>
>
>
> Adprep successfully initialized global variables.
>
> [Status/Consequence]
>
> Adprep is continuing.
>
>
>
> Adprep was about to call the following LDAP API. ldap_add_s(). The entry
> to
> add is cn=DomainUpdates,cn=System,DC=oz,DC=lds.
>
>
>
> LDAP API ldap_add_s() finished, return code is 0x44
>
>
>
> Adprep attempted to create the directory service object
> cn=DomainUpdates,cn=System,DC=oz,DC=lds.
>
> [Status/Consequence]
>
> The object exists so Adprep did not attempt to rerun this operation but is
> continuing.
>
>
>
> Adprep was about to call the following LDAP API. ldap_add_s(). The entry
> to
> add is cn=Operations,cn=DomainUpdates,cn=System,DC=oz,DC=lds.
>
>
>
> LDAP API ldap_add_s() finished, return code is 0x44
>
>
>
> Adprep attempted to create the directory service object
> cn=Operations,cn=DomainUpdates,cn=System,DC=oz,DC=lds.
>
> [Status/Consequence]
>
> The object exists so Adprep did not attempt to rerun this operation but is
> continuing.
>
>
>
> Adprep was about to call the following LDAP API. ldap_search_s(). The base
> entry to start the search is
> cn=ab402345-d3c3-455d-9ff7-40268a1099b6,cn=Operations,cn=DomainUpdates,cn=System,DC=oz,DC=lds.
>
>
>
> LDAP API ldap_search_s() finished, return code is 0x20
>
>
>
> Adprep verified the state of operation
> cn=ab402345-d3c3-455d-9ff7-40268a1099b6,cn=Operations,cn=DomainUpdates,cn=System,DC=oz,DC=lds.
>
> [Status/Consequence]
>
> The operation has not run or is not currently running. It will be run
> next.
>
>
>
> Adprep was about to call the following LDAP API. ldap_add_s(). The entry
> to
> add is CN=WMIPolicy,CN=System,DC=oz,DC=lds.
>
>
>
> LDAP API ldap_add_s() finished, return code is 0x13
>
>
>
> Adprep was unable to create the object CN=WMIPolicy,CN=System,DC=oz,DC=lds
> in Active Directory.
>
> [Status/Consequence]
>
> This Adprep operation failed.
>
> [User Action]
>
> Check the log file adprep.log in the system root
> System32\Debug\Adprep\Logs
> directory for more information. Restart Adprep.
>
> Adprep encountered an LDAP error.
>
> Error code: 0x13. Server extended error code: 0x51b, Server error message:
> 0000051B: AtrErr: DSID-031506FD, #1:
> 0: 0000051B: DSID-031506FD, problem 1005 (CONSTRAINT_ATT_TYPE), data 0,
> Att
> 20119 (nTSecurityDescriptor)
> .
>
>
>
> Adprep was unable to update domain-wide information.
>
> [Status/Consequence]
>
> Adprep requires access to existing domain-wide information from the
> infrastructure master in order to complete this operation.
>
> [User Action]
>
> Check the log file, Adprep.log, in the
> C:\WINNT\system32\debug\adprep\logs\20060906135606 directory for more
> information.
>
>
>
>
> --
>


 | 
Pages: 1
Prev: Problem with assigning permissions with CACLS in VBScript
Next: Active Directory keeps stopping