AD-Novice
asked on
adprep ldap errors
I am trying to upgrade my active directory scheme from a windows 2003 version to support a windows 2008 R2 server.
When I run adprep /domainprep, I receive the following error:
Adprep encountered an LDAP error.
Error code: 0x20. Server extended error code: 0x208d, Server error message: 0000
208D: NameErr: DSID-031001CD, problem 2001 (NO_OBJECT), data 0, best match of:
'CN=GCS\0ADEL:d846d18f-b42 4-4d10-83f c-5c41108a d8ff,CN=Se rvers,CN=D efault
-First-Site-Name,CN=Sites, CN=Configu ration,DC= ad,DC=doma in,DC=com'
From what little I can tell about the error, Ldap is looking for a domain controller (or record) that does not exist. The domain controller in question (GCS) was forcibly removed from the domain after a catastrophic failure of the host. The "metadata cleanup" procedures were used to remove this domain controller from the domain.
My Guess is that the bad domain controller has not been completely removed from the domain. How do I cleanup / repair the domain so that the adprep command will run successfully?
--
Matthew Davis
When I run adprep /domainprep, I receive the following error:
Adprep encountered an LDAP error.
Error code: 0x20. Server extended error code: 0x208d, Server error message: 0000
208D: NameErr: DSID-031001CD, problem 2001 (NO_OBJECT), data 0, best match of:
'CN=GCS\0ADEL:d846d18f-b42
-First-Site-Name,CN=Sites,
From what little I can tell about the error, Ldap is looking for a domain controller (or record) that does not exist. The domain controller in question (GCS) was forcibly removed from the domain after a catastrophic failure of the host. The "metadata cleanup" procedures were used to remove this domain controller from the domain.
My Guess is that the bad domain controller has not been completely removed from the domain. How do I cleanup / repair the domain so that the adprep command will run successfully?
--
Matthew Davis
ASKER
The 2003 box is 64 bit
You need to run metadata cleanup again
Make sure you have deleted all DNS records for this failed DC including any SRV records
You need to used adprep32 as well when upgrade schema
https://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/A_3644-Windows-2008-Server-R2-adprep-adprep32.html
Make sure all fsmo roles are on a functioning DC as well
Make sure you have deleted all DNS records for this failed DC including any SRV records
You need to used adprep32 as well when upgrade schema
https://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/A_3644-Windows-2008-Server-R2-adprep-adprep32.html
Make sure all fsmo roles are on a functioning DC as well
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Totally missed the 64-bit part
Thanks
Mike