Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

I recently had this problem. I had a office environment in which I repeatedly tried--and failed--to update the schema for SMS by running the command

Posted on 2006-06-14
12
843 Views
Last Modified: 2010-08-05
I Create one user in smsadmin giave permition in domain admin, schema admin, domain controler and enterprice admin after i  tray to run this command extadsch.exe.

extadsch.exe
After I ran the command, the log file contained the following information

<06-14-2006 14:36:00> Failed to create attribute cn=MS-SMS-Site-Code.  Error code = 8206.
<06-14-2006 14:36:32> Failed to create attribute cn=mS-SMS-Assignment-Site-Code.  Error code = 8206.
<06-14-2006 14:37:03> Failed to create attribute cn=MS-SMS-Site-Boundaries.  Error code = 8206.
<06-14-2006 14:37:35> Failed to create attribute cn=MS-SMS-Roaming-Boundaries.  Error code = 8206.
<06-14-2006 14:38:06> Failed to create attribute cn=MS-SMS-Default-MP.  Error code = 8206.
<06-14-2006 14:38:38> Failed to create attribute cn=mS-SMS-Device-Management-Point.  Error code = 8206.
<06-14-2006 14:39:10> Failed to create attribute cn=MS-SMS-MP-Name.  Error code = 8206.
<06-14-2006 14:39:41> Failed to create attribute cn=MS-SMS-MP-Address.  Error code = 8206.
<06-14-2006 14:40:13> Failed to create attribute cn=MS-SMS-Ranged-IP-Low.  Error code = 8206.
<06-14-2006 14:40:44> Failed to create attribute cn=MS-SMS-Ranged-IP-High.  Error code = 8206.
<06-14-2006 14:40:44> Failed to create class cn=MS-SMS-Management-Point.  Error code = 8202.
<06-14-2006 14:40:44> Failed to create class cn=MS-SMS-Server-Locator-Point.  Error code = 8202.
<06-14-2006 14:40:44> Failed to create class cn=MS-SMS-Site.  Error code = 8202.
<06-14-2006 14:40:44> Failed to create class cn=MS-SMS-Roaming-Boundary-Range.  Error code = 8202.
<06-14-2006 14:40:44> Failed to extend the Active Directory schema.

Regards

Globrin
0
Comment
Question by:Globrin
  • 7
  • 5
12 Comments
 
LVL 26

Expert Comment

by:Leon Fester
ID: 16901124
Is this a new/existing site?

Consider running the site repair utility. It should allow you to change the security mode. During the same wizard you'll be prompted and asked if you wish to extend the AD Schema.

Please backup SQL Database before doing ANYthing on SMS Server.
0
 

Author Comment

by:Globrin
ID: 16901268
what is site repair utility,  I am installing on my single domain/forest.

0
 
LVL 26

Expert Comment

by:Leon Fester
ID: 16901286
In the Systems Management Server program group on the installed machine, you should find SMS Site Repair Wizard and SMS Setup.

If it's a new installation then run the SMS Setup Wizard(from the program group)
In the Wizard select the Advanced Security Option.

If it's an exisiting installation that has since failed, then run the SMS Site Repair Wizard.
0
Connect further...control easier

With the ATEN CE624, you can now enjoy a high-quality visual experience powered by HDBaseT technology and the convenience of a single Cat6 cable to transmit uncompressed video with zero latency and multi-streaming for dual-view applications where remote access is required.

 

Author Comment

by:Globrin
ID: 16901586
I am installing SMS server first time, when I install it as new installation and select advance security mode it says, can not update active directory schema, you can run it later by sms cd by extadsch.exe utility.
0
 
LVL 26

Expert Comment

by:Leon Fester
ID: 16901763
Is your AD working correctly?
Find some tools to test your AD installation.

http://technet2.microsoft.com/WindowsServer/en/Library/aa376482-83f8-41e3-96fc-870ed0ea0c0b1033.mspx?mfr=true
0
 

Author Comment

by:Globrin
ID: 16901917
I will check and get back to you
0
 

Author Comment

by:Globrin
ID: 16910444

My Environment is as follows.  We have setup our domain globrin.local . we have two office India and UK. so we have made two sites India and UK. And we have created a site link India-UK between these two sites. We do have VPN connectivity between India and UK site. We have scheduled the replication between these two sites.Now UK DC has been corrupted due to some reason and can not be repaired.

when I am trying to run dcdiag command on my India ( domain controller) the following messages are showing:

 Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

Z:\>dcdiag

Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests

   Testing server: India\GLOBRIN-IN-DC
      Starting test: Connectivity
         ......................... GLOBRIN-IN-DC passed test Connectivity

Doing primary tests

   Testing server: India\GLOBRIN-IN-DC
      Starting test: Replications
         [Replications Check,GLOBRIN-IN-DC] A recent replication attempt failed:

            From GLOBRIN-UK-DC to GLOBRIN-IN-DC
            Naming Context: DC=ForestDnsZones,DC=Globrin,DC=local
            The replication generated an error (1256):
            The remote system is not available. For information about network tr
oubleshooting, see Windows Help.
            The failure occurred at 2006-06-15 16:27:46.
            The last success occurred at 2006-02-02 06:17:57.
            802 failures have occurred since the last success.
         [GLOBRIN-UK-DC] DsBindWithSpnEx() failed with error 1722,
         The RPC server is unavailable..
         [Replications Check,GLOBRIN-IN-DC] A recent replication attempt failed:

            From GLOBRIN-UK-DC to GLOBRIN-IN-DC
            Naming Context: DC=DomainDnsZones,DC=Globrin,DC=local
            The replication generated an error (1256):
            The remote system is not available. For information about network tr
oubleshooting, see Windows Help.
            The failure occurred at 2006-06-15 16:27:46.
            The last success occurred at 2006-02-02 06:17:57.
            802 failures have occurred since the last success.
         [Replications Check,GLOBRIN-IN-DC] A recent replication attempt failed:

            From GLOBRIN-UK-DC to GLOBRIN-IN-DC
            Naming Context: CN=Schema,CN=Configuration,DC=Globrin,DC=local
            The replication generated an error (1722):
            The RPC server is unavailable.
            The failure occurred at 2006-06-15 16:27:48.
            The last success occurred at 2006-02-02 06:17:56.
            819 failures have occurred since the last success.
            The source remains down. Please check the machine.
         [Replications Check,GLOBRIN-IN-DC] A recent replication attempt failed:

            From GLOBRIN-UK-DC to GLOBRIN-IN-DC
            Naming Context: CN=Configuration,DC=Globrin,DC=local
            The replication generated an error (1722):
            The RPC server is unavailable.
            The failure occurred at 2006-06-15 16:27:47.
            The last success occurred at 2006-02-02 06:17:56.
            819 failures have occurred since the last success.
            The source remains down. Please check the machine.
         [Replications Check,GLOBRIN-IN-DC] A recent replication attempt failed:

            From GLOBRIN-UK-DC to GLOBRIN-IN-DC
            Naming Context: DC=Globrin,DC=local
            The replication generated an error (1722):
            The RPC server is unavailable.
            The failure occurred at 2006-06-15 16:27:46.
            The last success occurred at 2006-02-02 06:17:56.
            819 failures have occurred since the last success.
            The source remains down. Please check the machine.
         REPLICATION-RECEIVED LATENCY WARNING
         GLOBRIN-IN-DC:  Current time is 2006-06-15 16:53:24.
            DC=ForestDnsZones,DC=Globrin,DC=local
               Last replication recieved from GLOBRIN-UK-DC at 2006-02-02 06:18:
21.
               WARNING:  This latency is over the Tombstone Lifetime of 60 days!

            DC=DomainDnsZones,DC=Globrin,DC=local
               Last replication recieved from GLOBRIN-UK-DC at 2006-02-02 06:18:
20.
               WARNING:  This latency is over the Tombstone Lifetime of 60 days!

            CN=Schema,CN=Configuration,DC=Globrin,DC=local
               Last replication recieved from GLOBRIN-UK-DC at 2006-02-02 06:18:
20.
               WARNING:  This latency is over the Tombstone Lifetime of 60 days!

            CN=Configuration,DC=Globrin,DC=local
               Last replication recieved from GLOBRIN-UK-DC at 2006-02-02 06:18:
19.
               WARNING:  This latency is over the Tombstone Lifetime of 60 days!

            DC=Globrin,DC=local
               Last replication recieved from GLOBRIN-UK-DC at 2006-02-02 06:18:
20.
               WARNING:  This latency is over the Tombstone Lifetime of 60 days!

         ......................... GLOBRIN-IN-DC passed test Replications
      Starting test: NCSecDesc
         ......................... GLOBRIN-IN-DC passed test NCSecDesc
      Starting test: NetLogons
         ......................... GLOBRIN-IN-DC passed test NetLogons
      Starting test: Advertising
         ......................... GLOBRIN-IN-DC passed test Advertising
      Starting test: KnowsOfRoleHolders
         ......................... GLOBRIN-IN-DC passed test KnowsOfRoleHolders
      Starting test: RidManager
         ......................... GLOBRIN-IN-DC passed test RidManager
      Starting test: MachineAccount
         ......................... GLOBRIN-IN-DC passed test MachineAccount
      Starting test: Services
         ......................... GLOBRIN-IN-DC passed test Services
      Starting test: ObjectsReplicated
         ......................... GLOBRIN-IN-DC passed test ObjectsReplicated
      Starting test: frssysvol
         ......................... GLOBRIN-IN-DC passed test frssysvol
      Starting test: frsevent
         There are warning or error events within the last 24 hours after the
         SYSVOL has been shared.  Failing SYSVOL replication problems may cause
         Group Policy problems.
         ......................... GLOBRIN-IN-DC failed test frsevent
      Starting test: kccevent
         An Warning Event occured.  EventID: 0x8025082C
            Time Generated: 06/15/2006   16:42:44
            (Event String could not be retrieved)
         An Warning Event occured.  EventID: 0x8025082C
            Time Generated: 06/15/2006   16:42:44
            (Event String could not be retrieved)
         An Warning Event occured.  EventID: 0x8025082C
            Time Generated: 06/15/2006   16:42:44
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC0000748
            Time Generated: 06/15/2006   16:42:44
            (Event String could not be retrieved)
         An Warning Event occured.  EventID: 0x8025082C
            Time Generated: 06/15/2006   16:42:44
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC0000748
            Time Generated: 06/15/2006   16:42:44
            (Event String could not be retrieved)
         An Warning Event occured.  EventID: 0x8025082C
            Time Generated: 06/15/2006   16:42:44
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC0000748
            Time Generated: 06/15/2006   16:42:44
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC0000748
            Time Generated: 06/15/2006   16:42:44
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC0000748
            Time Generated: 06/15/2006   16:42:44
            (Event String could not be retrieved)
         ......................... GLOBRIN-IN-DC failed test kccevent
      Starting test: systemlog
         ......................... GLOBRIN-IN-DC passed test systemlog
      Starting test: VerifyReferences
         ......................... GLOBRIN-IN-DC passed test VerifyReferences

   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom

   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom

   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom

   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom

   Running partition tests on : Globrin
      Starting test: CrossRefValidation
         ......................... Globrin passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Globrin passed test CheckSDRefDom

   Running enterprise tests on : Globrin.local
      Starting test: Intersite
         ......................... Globrin.local passed test Intersite
      Starting test: FsmoCheck
         ......................... Globrin.local passed test FsmoCheck

Z:\>


Now tell me how to proceed from here.
0
 

Author Comment

by:Globrin
ID: 16932562
We are waiting ur replay, our sms server implimanation is pending.
0
 
LVL 26

Accepted Solution

by:
Leon Fester earned 250 total points
ID: 16932637
"Now UK DC has been corrupted due to some reason and can not be repaired."

If your AD is not working, and cannot be repaired then I would recommend that you do NOT!!!! install SMS. Do NOT!!! extend AD Schema(well you cannot really, since it gives errors).

You DO!!! need to FIX your AD.

You've got a time-bomb, don't let it explode or you'll be forced to not only fix, but rebuild your AD. The fact that you haven't been able to fix the AD would lead me to think that you do not even have a backup of your AD? SMS is heavily dependant on AD. I wouldn't do anything on your AD unless it is working 100%. If your AD goes your whole network will fall over, think of how much more problems you'll have from your bosses if they cannot get mail for a few days.

My answer to your SMS Question??? Fix your AD First. The last time your replication worked was
"The last success occurred at 2006-02-02 06:17:57." And where I come from...an un resolved error like that could lead to dismissal or other disciplinary action.
0
 

Author Comment

by:Globrin
ID: 17089431
Thanks dvt_localboy

We have decided to not install sms and we install wsus now.

Is there any method by which we can implement SMS in our domain ?

Regarding

Globrin
0
 
LVL 26

Expert Comment

by:Leon Fester
ID: 17089555
Like I said before, and it's not for any other reason other than the headaches you could have later...

SMS is heavily dependant on Active Directory. And if you're having problems now, then they will be doubly compounded when you've got SMS running.

Should you AD fail for any reason then no users will be able to login, SMS won't be working...what role did you forsee SMS fullfiling within your domain?

I'd rather then suggest a non-AD dependant application.
0
 

Author Comment

by:Globrin
ID: 17089566
Lot of thanks for your suggestion
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
Most of the applications these days are on Cloud. Cloud is ubiquitous with many service providers in the market. Since it has many benefits such as cost reduction, software updates, remote access, disaster recovery and much more.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question