adprep /domainprep /gpprep for 3rd DC fails

-

i have win2k3 forest 1 2k8 dc , 1 2k3 dc.  i want to replace the last 2k3 dc 2k8 dc.  i run adprep /domainprep /gpprep infractursture master, win2k3 dc, , error tells me in adprep.log.   go there , following.  so waht preventing me promoting third dc can replace old w2k3 dc.

adprep call following ldap api. ldap_add_s(). entry add cn=domainupdates,cn=system,dc=cic,dc=scic,dc=com.

[2011/09/21:08:42:32.110]

ldap api ldap_add_s() finished, return code 0x44 

[2011/09/21:08:42:32.110]

adprep attempted create active directory domain services object cn=domainupdates,cn=system,dc=cic,dc=scic,dc=com.

 

[status/consequence]

 

the object exists adprep did not attempt rerun operation continuing. 

[2011/09/21:08:42:32.110]

adprep call following ldap api. ldap_add_s(). entry add cn=operations,cn=domainupdates,cn=system,dc=cic,dc=scic,dc=com.

[2011/09/21:08:42:32.110]

ldap api ldap_add_s() finished, return code 0x44 

everythign else looks @ end of adprep.log get

adprep encountered ldap error. 

 

error code: 0x13. server extended error code: 0x51b, server error message: 0000051b: atrerr: dsid-03150b61, #1:

0: 0000051b: dsid-03150b61, problem 1005 (constraint_att_type), data 0, att 20119 (ntsecuritydescriptor)

then run dcdiag , get 

  * file replication service sysvol ready test 

         the registry lookup failed determine state of sysvol.  the

 

         error returned  was 5 (access denied.).  check frs event log to

 

         see if sysvol has been shared. 

         ......................... mydc failed test frssysvol

hello,

no. don't need each time.

please refer other thread same problem: http://social.technet.microsoft.com/forums/en-us/winserverds/thread/5016d4b6-0819-4e01-a299-320d5bb78dbc/#dc81362c-6ac9-4495-b7c5-76aa67d95360

 

 

this posting provided "as is" no warranties or guarantees , , confers no rights.

microsoft student partner 2010 / 2011
microsoft certified professional
microsoft certified systems administrator: security
microsoft certified systems engineer: security
microsoft certified technology specialist: windows server 2008 active directory, configuration
microsoft certified technology specialist: windows server 2008 network infrastructure, configuration
microsoft certified technology specialist: windows server 2008 applications infrastructure, configuration
microsoft certified technology specialist: windows 7, configuring
microsoft certified professional: enterprise administrator
microsoft certified professional: server administrator



Windows Server  >  Windows Server General Forum



Comments

Post a Comment

Popular posts from this blog

WIMMount (HSM) causing cluster storage to go redirected (2012r2 DC)

-
looking options resolve error , prevent in future. thanks help. hardware: 2 node dell hv cluster running2012r2 dc 8 nic/ea in multiplex mode 4x hyper-v 4x hosts storage: 2x synology nas, accessed through iscsi hosts , cluster relevant logs: log name:      microsoft-windows-failoverclustering/diagnostic source:        microsoft-windows-failoverclustering date:          event id:      2050 task category: none level:         warning keywords:       user:          system computer:      l description: [dcm] filter wimmount found @ unsafe altitude 180700 log name:      system source:        microsoft-windows-failoverclustering date:         event id:      5125 task category: cluster shared volume level:         warning keywords:       user:          system computer: description: cluster shared volume 'volume1' ('cluster disk 1') has identified 1 or more active filter drivers on device stack interfere csv operatio
Read more

Failed to delete the test record dcdiag-test-record in zone test.com

-
ps c:\users\administrator.test> dcdiag /test:dns directory server diagnosis performing initial setup:    trying find home server...    home server = dc02    * identified ad forest.    done gathering initial info. doing initial required tests    testing server: default-first-site-name\dc02       starting test: connectivity          ......................... dc02 passed test connectivity doing primary tests    testing server: default-first-site-name\dc02       starting test: dns          dns tests running , not hung. please wait few minutes...          ......................... dc02 passed test dns    running partition tests on : forestdnszones    running partition tests on : domaindnszones    running partition tests on : schema    running partition tests on : configuration    running partition tests on : test    running enterprise tests on : test.com       starting test: dns          test results domain
Read more

Azure MFA with Azure AD and RDS

-
i have setup following lab in azure , need help. a server (domain controller) , remote desktop services. and server multi factor authentication server. i have setup following one http://www.rdsgurus.com/uncategorized/step-by-step-using-windows-server-2012-r2-rd-gateway-with-azure-multifactor-authentication/ and when im connecting got following error. the user "domain\username", on client computer "xxx.xxx.xxx.xxx", did not meet connection authorization policy requirements , therefore not authorized access rd gateway server. authentication method used was: "ntlm" , connection protocol used: "rpc-http". following error occurred: "23003". also on security log i've got following authentication details: connection request policy name: ts gateway authorization policy network policy name: - authentication provider: radius proxy authentication server: test.test.local authentication type: - eap t
Read more