I’m sorry that reply you late. Based on your description, the error message you provided suggests the data is invalid. CN is changed via ldap_rename_ext_s since it is the RDN naming attribute
for the user class. They are managed by the DSA. It seems there some problems when you run ADPREP. So, would you please refer to the following article, do troubleshooting for it?
Microsoft is conducting an online survey to understand your opinion of the Technet Web site. If you choose to participate, the online survey will be presented to you when you leave the Technet Web site.