ADprep /domainprep fails

  • Thread starter Thread starter janglim
  • Start date Start date
J

janglim

Hello All,

I am preparing an SBS2000 server for upgrade. I ran adprep /
forestprep without error, but I cannot get /domainprep to complete.

The final portion of the log is:

------------------------------------------
Adprep was unable to modify the security descriptor on object
CN=User,CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=rcco,DC=local.

[Status/Consequence]

ADPREP was unable to merge the existing security descriptor with the
new access control entry (ACE).

[User Action]

Check the log file Adprep.log in the system root System32\Debug\Adprep
\Logs directory for more information.

Adprep encountered an LDAP error.

Error code: 0x0. Server extended error code: 0x0, Server error
message: (null).



Adprep was unable to update domain-wide information.

[Status/Consequence]

Adprep requires access to existing domain-wide information from the
infrastructure master in order to complete this operation.

[User Action]

Check the log file, Adprep.log, in the C:\WINNT\system32\debug\adprep
\logs\20070826180815 directory for more information.
------------------------------------------------------------

Some measures I have tried or verified so far:

1. This is the only DC in the domain - it is the infrastructure
master
2. I have verified that the reg key defining sysvol location is
present and correct
3. I have verified that the "schema updates allowed" (or similar) box
is checked
4. I have checked that the default domain controller GPO security
policy "manage auditing and security log" lists administrators.
5. I am logged on as administrator, which is member of
Administrators, Domain Admins, Enterprise Admins, and Schema Admins


any thoughts?

thanks,
joe
 
Hello (e-mail address removed),

Also please post the logfile if possible, maybe something is stated more
detailed.

Best regards

Meinolf Weber (Myweb)
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
 
Thanks Meinolf,

I'll have to go back through the info on the later version of adprep.
I believe I have the latest though - I am getting it from the SBS2003
install set that includes R2 technologies.

Here is the full log text:
Adprep created the log file ADPrep.log under C:\WINNT\system32\debug
\adprep\logs\20070824185735 directory.



Adprep copied file D:\I386\schema.ini from installation point to local
machine under directory C:\WINNT.



Adprep successfully made the LDAP connection to the local domain
controller FLO.



Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is (null).



LDAP API ldap_search_s() finished, return code is 0x0



Adprep successfully retrieved information from the local directory
service.



Adprep successfully initialized global variables.

[Status/Consequence]

Adprep is continuing.



Adprep was about to call the following LDAP API. ldap_add_s(). The
entry to add is cn=DomainUpdates,cn=System,DC=rcco,DC=local.



LDAP API ldap_add_s() finished, return code is 0x44



Adprep attempted to create the directory service object
cn=DomainUpdates,cn=System,DC=rcco,DC=local.

[Status/Consequence]

The object exists so Adprep did not attempt to rerun this operation
but is continuing.



Adprep was about to call the following LDAP API. ldap_add_s(). The
entry to add is
cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local.



LDAP API ldap_add_s() finished, return code is 0x44



Adprep attempted to create the directory service object
cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local.

[Status/Consequence]

The object exists so Adprep did not attempt to rerun this operation
but is continuing.



Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is cn=ab402345-
d3c3-455d-9ff7-40268a1099b6,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local.



LDAP API ldap_search_s() finished, return code is 0x0



Adprep checked to verify whether operation cn=ab402345-
d3c3-455d-9ff7-40268a1099b6,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local
has completed.

[Status/Consequence]

The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.



Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is cn=bab5f54d-06c8-48de-9b87-
d78b796564e4,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local.



LDAP API ldap_search_s() finished, return code is 0x0



Adprep checked to verify whether operation cn=bab5f54d-06c8-48de-9b87-
d78b796564e4,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local
has completed.

[Status/Consequence]

The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.



Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
cn=f3dd09dd-25e8-4f9c-85df-12d6d2f2f2f5,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local.



LDAP API ldap_search_s() finished, return code is 0x0



Adprep checked to verify whether operation
cn=f3dd09dd-25e8-4f9c-85df-12d6d2f2f2f5,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local
has completed.

[Status/Consequence]

The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.



Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is cn=2416c60a-fe15-4d7a-a61e-
dffd5df864d3,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local.



LDAP API ldap_search_s() finished, return code is 0x0



Adprep checked to verify whether operation cn=2416c60a-fe15-4d7a-a61e-
dffd5df864d3,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local
has completed.

[Status/Consequence]

The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.



Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is cn=7868d4c8-ac41-4e05-
b401-776280e8e9f1,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local.



LDAP API ldap_search_s() finished, return code is 0x0



Adprep checked to verify whether operation cn=7868d4c8-ac41-4e05-
b401-776280e8e9f1,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local
has completed.

[Status/Consequence]

The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.



Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is cn=860c36ed-5241-4c62-a18b-
cf6ff9994173,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local.



LDAP API ldap_search_s() finished, return code is 0x0



Adprep checked to verify whether operation cn=860c36ed-5241-4c62-a18b-
cf6ff9994173,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local
has completed.

[Status/Consequence]

The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.



Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is cn=0e660ea3-8a5e-4495-9ad7-
ca1bd4638f9e,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local.



LDAP API ldap_search_s() finished, return code is 0x0



Adprep checked to verify whether operation cn=0e660ea3-8a5e-4495-9ad7-
ca1bd4638f9e,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local
has completed.

[Status/Consequence]

The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.



Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is cn=a86fe12a-0f62-4e2a-b271-
d27f601f8182,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local.



LDAP API ldap_search_s() finished, return code is 0x0



Adprep checked to verify whether operation cn=a86fe12a-0f62-4e2a-b271-
d27f601f8182,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local
has completed.

[Status/Consequence]

The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.



Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is cn=d85c0bfd-094f-4cad-
a2b5-82ac9268475d,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local.



LDAP API ldap_search_s() finished, return code is 0x0



Adprep checked to verify whether operation cn=d85c0bfd-094f-4cad-
a2b5-82ac9268475d,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local
has completed.

[Status/Consequence]

The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.



Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is cn=6ada9ff7-
c9df-45c1-908e-9fef2fab008a,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local.



LDAP API ldap_search_s() finished, return code is 0x20



Adprep verified the state of operation cn=6ada9ff7-
c9df-45c1-908e-9fef2fab008a,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local.

[Status/Consequence]

The operation has not run or is not currently running. It will be run
next.



Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
CN=User,CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=rcco,DC=local.



LDAP API ldap_search_s() finished, return code is 0x0



Adprep was unable to modify the security descriptor on object
CN=User,CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=rcco,DC=local.

[Status/Consequence]

ADPREP was unable to merge the existing security descriptor with the
new access control entry (ACE).

[User Action]

Check the log file Adprep.log in the system root System32\Debug\Adprep
\Logs directory for more information.

Adprep encountered an LDAP error.

Error code: 0x0. Server extended error code: 0x0, Server error
message: (null).



Adprep was unable to update domain-wide information.

[Status/Consequence]

Adprep requires access to existing domain-wide information from the
infrastructure master in order to complete this operation.

[User Action]

Check the log file, Adprep.log, in the C:\WINNT\system32\debug\adprep
\logs\20070824185735 directory for more information.
 
Hello (e-mail address removed),

Check out this article (very long but a lot of infos):
http://zubiworld.spaces.live.com/blog/cns!540F18DCB3D2FECC!412.entry

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
Thanks Meinolf,

I'll have to go back through the info on the later version of adprep.
I believe I have the latest though - I am getting it from the SBS2003
install set that includes R2 technologies.

Here is the full log text:
Adprep created the log file ADPrep.log under C:\WINNT\system32\debug
\adprep\logs\20070824185735 directory.
Adprep copied file D:\I386\schema.ini from installation point to local
machine under directory C:\WINNT.

Adprep successfully made the LDAP connection to the local domain
controller FLO.

Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is (null).

LDAP API ldap_search_s() finished, return code is 0x0

Adprep successfully retrieved information from the local directory
service.

Adprep successfully initialized global variables.

[Status/Consequence]

Adprep is continuing.

Adprep was about to call the following LDAP API. ldap_add_s(). The
entry to add is cn=DomainUpdates,cn=System,DC=rcco,DC=local.

LDAP API ldap_add_s() finished, return code is 0x44

Adprep attempted to create the directory service object
cn=DomainUpdates,cn=System,DC=rcco,DC=local.

[Status/Consequence]

The object exists so Adprep did not attempt to rerun this operation
but is continuing.

Adprep was about to call the following LDAP API. ldap_add_s(). The
entry to add is
cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local.

LDAP API ldap_add_s() finished, return code is 0x44

Adprep attempted to create the directory service object
cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local.

[Status/Consequence]

The object exists so Adprep did not attempt to rerun this operation
but is continuing.

Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is cn=ab402345-
d3c3-455d-9ff7-40268a1099b6,cn=Operations,cn=DomainUpdates,cn=System,D
C=rcco,DC=local.

LDAP API ldap_search_s() finished, return code is 0x0

Adprep checked to verify whether operation cn=ab402345-
d3c3-455d-9ff7-40268a1099b6,cn=Operations,cn=DomainUpdates,cn=System,D
C=rcco,DC=local has completed.

[Status/Consequence]

The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.

Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is cn=bab5f54d-06c8-48de-9b87-
d78b796564e4,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local
.

LDAP API ldap_search_s() finished, return code is 0x0

Adprep checked to verify whether operation cn=bab5f54d-06c8-48de-9b87-
d78b796564e4,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local
has completed.

[Status/Consequence]

The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.

Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
cn=f3dd09dd-25e8-4f9c-85df-12d6d2f2f2f5,cn=Operations,cn=DomainUpdates
,cn=System,DC=rcco,DC=local.

LDAP API ldap_search_s() finished, return code is 0x0

Adprep checked to verify whether operation
cn=f3dd09dd-25e8-4f9c-85df-12d6d2f2f2f5,cn=Operations,cn=DomainUpdates
,cn=System,DC=rcco,DC=local has completed.

[Status/Consequence]

The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.

Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is cn=2416c60a-fe15-4d7a-a61e-
dffd5df864d3,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local
.

LDAP API ldap_search_s() finished, return code is 0x0

Adprep checked to verify whether operation cn=2416c60a-fe15-4d7a-a61e-
dffd5df864d3,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local
has completed.

[Status/Consequence]

The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.

Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is cn=7868d4c8-ac41-4e05-
b401-776280e8e9f1,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=
local.

LDAP API ldap_search_s() finished, return code is 0x0

Adprep checked to verify whether operation cn=7868d4c8-ac41-4e05-
b401-776280e8e9f1,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=
local has completed.

[Status/Consequence]

The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.

Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is cn=860c36ed-5241-4c62-a18b-
cf6ff9994173,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local
.

LDAP API ldap_search_s() finished, return code is 0x0

Adprep checked to verify whether operation cn=860c36ed-5241-4c62-a18b-
cf6ff9994173,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local
has completed.

[Status/Consequence]

The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.

Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is cn=0e660ea3-8a5e-4495-9ad7-
ca1bd4638f9e,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local
.

LDAP API ldap_search_s() finished, return code is 0x0

Adprep checked to verify whether operation cn=0e660ea3-8a5e-4495-9ad7-
ca1bd4638f9e,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local
has completed.

[Status/Consequence]

The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.

Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is cn=a86fe12a-0f62-4e2a-b271-
d27f601f8182,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local
.

LDAP API ldap_search_s() finished, return code is 0x0

Adprep checked to verify whether operation cn=a86fe12a-0f62-4e2a-b271-
d27f601f8182,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=local
has completed.

[Status/Consequence]

The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.

Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is cn=d85c0bfd-094f-4cad-
a2b5-82ac9268475d,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=
local.

LDAP API ldap_search_s() finished, return code is 0x0

Adprep checked to verify whether operation cn=d85c0bfd-094f-4cad-
a2b5-82ac9268475d,cn=Operations,cn=DomainUpdates,cn=System,DC=rcco,DC=
local has completed.

[Status/Consequence]

The operation GUID already exists so Adprep did not attempt to rerun
this operation but is continuing.

Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is cn=6ada9ff7-
c9df-45c1-908e-9fef2fab008a,cn=Operations,cn=DomainUpdates,cn=System,D
C=rcco,DC=local.

LDAP API ldap_search_s() finished, return code is 0x20

Adprep verified the state of operation cn=6ada9ff7-
c9df-45c1-908e-9fef2fab008a,cn=Operations,cn=DomainUpdates,cn=System,D
C=rcco,DC=local.

[Status/Consequence]

The operation has not run or is not currently running. It will be run
next.

Adprep was about to call the following LDAP API. ldap_search_s(). The
base entry to start the search is
CN=User,CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=Syste
m,DC=rcco,DC=local.

LDAP API ldap_search_s() finished, return code is 0x0

Adprep was unable to modify the security descriptor on object
CN=User,CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=Syste
m,DC=rcco,DC=local.

[Status/Consequence]

ADPREP was unable to merge the existing security descriptor with the
new access control entry (ACE).

[User Action]

Check the log file Adprep.log in the system root System32\Debug\Adprep
\Logs directory for more information.

Adprep encountered an LDAP error.

Error code: 0x0. Server extended error code: 0x0, Server error
message: (null).

Adprep was unable to update domain-wide information.

[Status/Consequence]

Adprep requires access to existing domain-wide information from the
infrastructure master in order to complete this operation.

[User Action]

Check the log file, Adprep.log, in the C:\WINNT\system32\debug\adprep
\logs\20070824185735 directory for more information.

Hello (e-mail address removed),

Also please post the logfile if possible, maybe something is stated
more detailed.

Best regards

Meinolf Weber (Myweb)
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers
no rights.
Click to expand...
Click to expand...
 
Back
Top