adprep32 /rodcprep problem

-

hi,

we planning migrate our windows server 2003 enterprise 32bit windows server 2008 r2.

currently have 2 domain controller. here list:

1) srv-pdc (primary domain controller)

2) srv-bdc (secondary domai controller)

both running windows server 2003 enterprise

we perform following steps during migration process:

1)raise domain forest level windows server 2003

"prepare active directory schema"

2)run adprep windows server 2008 dvd (adprep32 /forestprep) - run successfully 

3) adprep32 /domainprep - run successfully

4) adprep32 /rodcprep - error 

please review log:

 

[2011/05/09:19:04:36.078]

adprep created log file adprep.log under c:\windows\debug\adprep\logs\20110509190436 directory.

[2011/05/09:19:04:36.093]

adprep connected domain fsmo: srv-pdc.mydomain.com.

[2011/05/09:19:04:36.093]

adprep call following ldap api. ldap_search_s(). base entry start search (null).

[2011/05/09:19:04:36.093]

ldap api ldap_search_s() finished, return code 0x0 

[2011/05/09:19:04:36.093]

adprep retrieved information local active directory domain services.

[2011/05/09:19:04:36.109]

adprep initialized global variables.

 

[status/consequence]

 

adprep continuing.

[2011/05/09:19:04:36.109]

adprep call following ldap api. ldap_search_s(). base entry start search cn=partitions,cn=configuration,dc=mydomain,dc=com.

[2011/05/09:19:04:36.109]

ldap api ldap_search_s finished, return code 0x0 

[2011/05/09:19:04:36.109]

adprep detected operation on partition dc=domaindnszones,dc=mydomain,dc=com has been performed. skipping next partition.

 

==============================================================================

[2011/05/09:19:04:36.109]

==============================================================================

 

adprep found partition dc=forestdnszones,dc=mydomain,dc=com, , update permissions.

[2011/05/09:19:04:36.125]

adprep call following ldap api. ldap_search_s(). base entry start search cn=infrastructure,dc=forestdnszones,dc=mydomain,dc=com.

[2011/05/09:19:04:36.125]

ldap api ldap_search_s finished, return code 0x0 

[2011/05/09:19:04:36.125]

adprep connected replica dc srv-bdc.mydomain.com holds partition dc=forestdnszones,dc=mydomain,dc=com.

[2011/05/09:19:04:36.140]

adprep call following ldap api. ldap_search_s(). base entry start search dc=forestdnszones,dc=mydomain,dc=com.

[2011/05/09:19:04:36.140]

ldap api ldap_search_s() finished, return code 0xa 

[2011/05/09:19:04:36.140]

adprep unable modify security descriptor on object dc=forestdnszones,dc=mydomain,dc=com.

 

[status/consequence] 

 

adprep unable merge existing security descriptor new access control entry (ace).

 

[user action] 

 

check log file adprep.log in c:\windows\debug\adprep\logs\20110509190436 directory more information.

[2011/05/09:19:04:36.156]

adprep encountered ldap error. 

 

error code: 0xa. server extended error code: 0x202b, server error message: 0000202b: referr: dsid-0310063c, data 0, 1 access points

 ref 1: 'forestdnszones.mydomain.com'

.

[2011/05/09:19:04:36.156]

adprep failed operation on partition dc=forestdnszones,dc=mydomain,dc=com. skipping next partition.

 

==============================================================================

[2011/05/09:19:04:36.156]

adprep detected operation on partition dc=mydomain,dc=com has been performed. skipping next partition.

 

==============================================================================

[2011/05/09:19:04:36.171]

adprep completed errors. not partitions updated. see adprep.log in c:\windows\debug\adprep\logs\20110509190436 directory more information.

 

 

 

to update partititions, current logged on user needs member of enterprise admins group.  if not case, please correct problem, , restart adprep.

we already verified users member of enterprise , domain admin.
please me resolve issue. 

 
thanks in advance
shoaib

 

 

 



i'm idiot.

context of vb script supplied ms article (http://support.microsoft.com/kb/949257) needs changed update other partitions.

i.e. update domaindnszones:

cscript fixfsmo.vbs dc=domaindnszones,dc=contoso,dc=com

, update forestdnszones:

cscript fixfsmo.vbs dc=forestdnszones,dc=contoso,dc=com

-----------------

after ran /rodcprep process completed without error

thanks replies.

shoaib



Windows Server  >  Migration



Comments

Post a Comment

Popular posts from this blog

CRL Revocation always failed

-
hi all, i try configure radius server nps, somehow certificate authentication client failed with reason: reason = revocation function unable check revocation because revocation server offline. then check certificate client, certutil -f -urlfetch -verify client7.cer, result follow: issuer:     cn=entca     dc=intra     dc=domain     dc=co     dc=sg subject:     cn=computer.intra.domain.co.sg cert serial number: 1c5b00de000000000041 dwflags = ca_verify_flags_allow_untrusted_root (0x1) dwflags = ca_verify_flags_ignore_offline (0x2) dwflags = ca_verify_flags_full_chain_revocation (0x8) dwflags = ca_verify_flags_console_trace (0x20000000) dwflags = ca_verify_flags_dump_chain (0x40000000) chainflags = cert_chain_revocation_check_chain (0x20000000) hcce_local_machine cert_chain_policy_base -------- cert_chain_context -------- chaincontext.dwinfostatus = ce...
Read more

Failed to query the results of bpa xpath

-
Image
i have new server installed hyper v, iis , domain services roles on it.  i checking event log , see warning multiple times, idea how rid of it?? failed query results of bpa xpath: microsoft/windows/fileservices:$reports$\*\result.xml:/resultdatabase/result. error: device attached system not functioning., last error: system cannot find path specified.. follow me on twitter <<< levalencia blog <<< hi, similar issue discussed in forum: to rid of warnings: 1. go dashboard 2. click on add roles , features 3. click next "before begin step" 4. select "role based or feature based installation" , click next 5. select given server server pool , click next 6. in server roles step make sure following checked:   file , storage services > file , iscsi services > file server, click next 7.click next through rest of steps , install server role 8. rerun bpa scan described earlier for more information please refer foll...
Read more

0x300000d errors in Microsoft Remote Desktop client

-
we use rd connect home users office. @ server side remote desktop gateway configured on 2008r2 server. experience following:   for years worked fine, starting last year users apple macbook experienced connection errors after new version of microsoft remote desktop in app store , automatic update. after couple of weeks error disappaered when new updates released. since 6 8 weeks problem again. because don’t have macbook cannot reproduce problem.   starting couple of weeks samsung s6 experiencing problems, here version 8.1.37.135 installed, error displayed is: can’t connect tot remote pc because remote desktop gateway server temporaraily unavailable. try connecting later or contact network administrator assistance. error code  0x300000d   because has worked fine years expect issues on client can configuration error on gateway server.   who pin point real cause?   however, testing other rd gateway server works ok settings identically....
Read more