Solved

I recently had this problem. I had a office environment in which I repeatedly tried--and failed--to update the schema for SMS by running the command

Posted on 2006-06-14
12
840 Views
Last Modified: 2010-08-05
I Create one user in smsadmin giave permition in domain admin, schema admin, domain controler and enterprice admin after i  tray to run this command extadsch.exe.

extadsch.exe
After I ran the command, the log file contained the following information

<06-14-2006 14:36:00> Failed to create attribute cn=MS-SMS-Site-Code.  Error code = 8206.
<06-14-2006 14:36:32> Failed to create attribute cn=mS-SMS-Assignment-Site-Code.  Error code = 8206.
<06-14-2006 14:37:03> Failed to create attribute cn=MS-SMS-Site-Boundaries.  Error code = 8206.
<06-14-2006 14:37:35> Failed to create attribute cn=MS-SMS-Roaming-Boundaries.  Error code = 8206.
<06-14-2006 14:38:06> Failed to create attribute cn=MS-SMS-Default-MP.  Error code = 8206.
<06-14-2006 14:38:38> Failed to create attribute cn=mS-SMS-Device-Management-Point.  Error code = 8206.
<06-14-2006 14:39:10> Failed to create attribute cn=MS-SMS-MP-Name.  Error code = 8206.
<06-14-2006 14:39:41> Failed to create attribute cn=MS-SMS-MP-Address.  Error code = 8206.
<06-14-2006 14:40:13> Failed to create attribute cn=MS-SMS-Ranged-IP-Low.  Error code = 8206.
<06-14-2006 14:40:44> Failed to create attribute cn=MS-SMS-Ranged-IP-High.  Error code = 8206.
<06-14-2006 14:40:44> Failed to create class cn=MS-SMS-Management-Point.  Error code = 8202.
<06-14-2006 14:40:44> Failed to create class cn=MS-SMS-Server-Locator-Point.  Error code = 8202.
<06-14-2006 14:40:44> Failed to create class cn=MS-SMS-Site.  Error code = 8202.
<06-14-2006 14:40:44> Failed to create class cn=MS-SMS-Roaming-Boundary-Range.  Error code = 8202.
<06-14-2006 14:40:44> Failed to extend the Active Directory schema.

Regards

Globrin
0
Comment
Question by:Globrin
  • 7
  • 5
12 Comments
 
LVL 26

Expert Comment

by:Leon Fester
ID: 16901124
Is this a new/existing site?

Consider running the site repair utility. It should allow you to change the security mode. During the same wizard you'll be prompted and asked if you wish to extend the AD Schema.

Please backup SQL Database before doing ANYthing on SMS Server.
0
 

Author Comment

by:Globrin
ID: 16901268
what is site repair utility,  I am installing on my single domain/forest.

0
 
LVL 26

Expert Comment

by:Leon Fester
ID: 16901286
In the Systems Management Server program group on the installed machine, you should find SMS Site Repair Wizard and SMS Setup.

If it's a new installation then run the SMS Setup Wizard(from the program group)
In the Wizard select the Advanced Security Option.

If it's an exisiting installation that has since failed, then run the SMS Site Repair Wizard.
0
 

Author Comment

by:Globrin
ID: 16901586
I am installing SMS server first time, when I install it as new installation and select advance security mode it says, can not update active directory schema, you can run it later by sms cd by extadsch.exe utility.
0
 
LVL 26

Expert Comment

by:Leon Fester
ID: 16901763
Is your AD working correctly?
Find some tools to test your AD installation.

http://technet2.microsoft.com/WindowsServer/en/Library/aa376482-83f8-41e3-96fc-870ed0ea0c0b1033.mspx?mfr=true
0
 

Author Comment

by:Globrin
ID: 16901917
I will check and get back to you
0
 

Author Comment

by:Globrin
ID: 16910444

My Environment is as follows.  We have setup our domain globrin.local . we have two office India and UK. so we have made two sites India and UK. And we have created a site link India-UK between these two sites. We do have VPN connectivity between India and UK site. We have scheduled the replication between these two sites.Now UK DC has been corrupted due to some reason and can not be repaired.

when I am trying to run dcdiag command on my India ( domain controller) the following messages are showing:

 Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

Z:\>dcdiag

Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests

   Testing server: India\GLOBRIN-IN-DC
      Starting test: Connectivity
         ......................... GLOBRIN-IN-DC passed test Connectivity

Doing primary tests

   Testing server: India\GLOBRIN-IN-DC
      Starting test: Replications
         [Replications Check,GLOBRIN-IN-DC] A recent replication attempt failed:

            From GLOBRIN-UK-DC to GLOBRIN-IN-DC
            Naming Context: DC=ForestDnsZones,DC=Globrin,DC=local
            The replication generated an error (1256):
            The remote system is not available. For information about network tr
oubleshooting, see Windows Help.
            The failure occurred at 2006-06-15 16:27:46.
            The last success occurred at 2006-02-02 06:17:57.
            802 failures have occurred since the last success.
         [GLOBRIN-UK-DC] DsBindWithSpnEx() failed with error 1722,
         The RPC server is unavailable..
         [Replications Check,GLOBRIN-IN-DC] A recent replication attempt failed:

            From GLOBRIN-UK-DC to GLOBRIN-IN-DC
            Naming Context: DC=DomainDnsZones,DC=Globrin,DC=local
            The replication generated an error (1256):
            The remote system is not available. For information about network tr
oubleshooting, see Windows Help.
            The failure occurred at 2006-06-15 16:27:46.
            The last success occurred at 2006-02-02 06:17:57.
            802 failures have occurred since the last success.
         [Replications Check,GLOBRIN-IN-DC] A recent replication attempt failed:

            From GLOBRIN-UK-DC to GLOBRIN-IN-DC
            Naming Context: CN=Schema,CN=Configuration,DC=Globrin,DC=local
            The replication generated an error (1722):
            The RPC server is unavailable.
            The failure occurred at 2006-06-15 16:27:48.
            The last success occurred at 2006-02-02 06:17:56.
            819 failures have occurred since the last success.
            The source remains down. Please check the machine.
         [Replications Check,GLOBRIN-IN-DC] A recent replication attempt failed:

            From GLOBRIN-UK-DC to GLOBRIN-IN-DC
            Naming Context: CN=Configuration,DC=Globrin,DC=local
            The replication generated an error (1722):
            The RPC server is unavailable.
            The failure occurred at 2006-06-15 16:27:47.
            The last success occurred at 2006-02-02 06:17:56.
            819 failures have occurred since the last success.
            The source remains down. Please check the machine.
         [Replications Check,GLOBRIN-IN-DC] A recent replication attempt failed:

            From GLOBRIN-UK-DC to GLOBRIN-IN-DC
            Naming Context: DC=Globrin,DC=local
            The replication generated an error (1722):
            The RPC server is unavailable.
            The failure occurred at 2006-06-15 16:27:46.
            The last success occurred at 2006-02-02 06:17:56.
            819 failures have occurred since the last success.
            The source remains down. Please check the machine.
         REPLICATION-RECEIVED LATENCY WARNING
         GLOBRIN-IN-DC:  Current time is 2006-06-15 16:53:24.
            DC=ForestDnsZones,DC=Globrin,DC=local
               Last replication recieved from GLOBRIN-UK-DC at 2006-02-02 06:18:
21.
               WARNING:  This latency is over the Tombstone Lifetime of 60 days!

            DC=DomainDnsZones,DC=Globrin,DC=local
               Last replication recieved from GLOBRIN-UK-DC at 2006-02-02 06:18:
20.
               WARNING:  This latency is over the Tombstone Lifetime of 60 days!

            CN=Schema,CN=Configuration,DC=Globrin,DC=local
               Last replication recieved from GLOBRIN-UK-DC at 2006-02-02 06:18:
20.
               WARNING:  This latency is over the Tombstone Lifetime of 60 days!

            CN=Configuration,DC=Globrin,DC=local
               Last replication recieved from GLOBRIN-UK-DC at 2006-02-02 06:18:
19.
               WARNING:  This latency is over the Tombstone Lifetime of 60 days!

            DC=Globrin,DC=local
               Last replication recieved from GLOBRIN-UK-DC at 2006-02-02 06:18:
20.
               WARNING:  This latency is over the Tombstone Lifetime of 60 days!

         ......................... GLOBRIN-IN-DC passed test Replications
      Starting test: NCSecDesc
         ......................... GLOBRIN-IN-DC passed test NCSecDesc
      Starting test: NetLogons
         ......................... GLOBRIN-IN-DC passed test NetLogons
      Starting test: Advertising
         ......................... GLOBRIN-IN-DC passed test Advertising
      Starting test: KnowsOfRoleHolders
         ......................... GLOBRIN-IN-DC passed test KnowsOfRoleHolders
      Starting test: RidManager
         ......................... GLOBRIN-IN-DC passed test RidManager
      Starting test: MachineAccount
         ......................... GLOBRIN-IN-DC passed test MachineAccount
      Starting test: Services
         ......................... GLOBRIN-IN-DC passed test Services
      Starting test: ObjectsReplicated
         ......................... GLOBRIN-IN-DC passed test ObjectsReplicated
      Starting test: frssysvol
         ......................... GLOBRIN-IN-DC passed test frssysvol
      Starting test: frsevent
         There are warning or error events within the last 24 hours after the
         SYSVOL has been shared.  Failing SYSVOL replication problems may cause
         Group Policy problems.
         ......................... GLOBRIN-IN-DC failed test frsevent
      Starting test: kccevent
         An Warning Event occured.  EventID: 0x8025082C
            Time Generated: 06/15/2006   16:42:44
            (Event String could not be retrieved)
         An Warning Event occured.  EventID: 0x8025082C
            Time Generated: 06/15/2006   16:42:44
            (Event String could not be retrieved)
         An Warning Event occured.  EventID: 0x8025082C
            Time Generated: 06/15/2006   16:42:44
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC0000748
            Time Generated: 06/15/2006   16:42:44
            (Event String could not be retrieved)
         An Warning Event occured.  EventID: 0x8025082C
            Time Generated: 06/15/2006   16:42:44
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC0000748
            Time Generated: 06/15/2006   16:42:44
            (Event String could not be retrieved)
         An Warning Event occured.  EventID: 0x8025082C
            Time Generated: 06/15/2006   16:42:44
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC0000748
            Time Generated: 06/15/2006   16:42:44
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC0000748
            Time Generated: 06/15/2006   16:42:44
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0xC0000748
            Time Generated: 06/15/2006   16:42:44
            (Event String could not be retrieved)
         ......................... GLOBRIN-IN-DC failed test kccevent
      Starting test: systemlog
         ......................... GLOBRIN-IN-DC passed test systemlog
      Starting test: VerifyReferences
         ......................... GLOBRIN-IN-DC passed test VerifyReferences

   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom

   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom

   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom

   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom

   Running partition tests on : Globrin
      Starting test: CrossRefValidation
         ......................... Globrin passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Globrin passed test CheckSDRefDom

   Running enterprise tests on : Globrin.local
      Starting test: Intersite
         ......................... Globrin.local passed test Intersite
      Starting test: FsmoCheck
         ......................... Globrin.local passed test FsmoCheck

Z:\>


Now tell me how to proceed from here.
0
 

Author Comment

by:Globrin
ID: 16932562
We are waiting ur replay, our sms server implimanation is pending.
0
 
LVL 26

Accepted Solution

by:
Leon Fester earned 250 total points
ID: 16932637
"Now UK DC has been corrupted due to some reason and can not be repaired."

If your AD is not working, and cannot be repaired then I would recommend that you do NOT!!!! install SMS. Do NOT!!! extend AD Schema(well you cannot really, since it gives errors).

You DO!!! need to FIX your AD.

You've got a time-bomb, don't let it explode or you'll be forced to not only fix, but rebuild your AD. The fact that you haven't been able to fix the AD would lead me to think that you do not even have a backup of your AD? SMS is heavily dependant on AD. I wouldn't do anything on your AD unless it is working 100%. If your AD goes your whole network will fall over, think of how much more problems you'll have from your bosses if they cannot get mail for a few days.

My answer to your SMS Question??? Fix your AD First. The last time your replication worked was
"The last success occurred at 2006-02-02 06:17:57." And where I come from...an un resolved error like that could lead to dismissal or other disciplinary action.
0
 

Author Comment

by:Globrin
ID: 17089431
Thanks dvt_localboy

We have decided to not install sms and we install wsus now.

Is there any method by which we can implement SMS in our domain ?

Regarding

Globrin
0
 
LVL 26

Expert Comment

by:Leon Fester
ID: 17089555
Like I said before, and it's not for any other reason other than the headaches you could have later...

SMS is heavily dependant on Active Directory. And if you're having problems now, then they will be doubly compounded when you've got SMS running.

Should you AD fail for any reason then no users will be able to login, SMS won't be working...what role did you forsee SMS fullfiling within your domain?

I'd rather then suggest a non-AD dependant application.
0
 

Author Comment

by:Globrin
ID: 17089566
Lot of thanks for your suggestion
0

Join & Write a Comment

Synchronize a new Active Directory domain with an existing Office 365 tenant
If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now