locked
Server extended error code 0x20b1 on WS2012R2 ADPREP /FORESTPREP

    Question

  • Hi,

    Attempted to upgrade a WS2012 Hyper-V server in my lab that's also a DC. Of course I have to run FORESTPREP and DOMAINPREP.

    When I run FORESTPREP, it successfully walks through the schema updates, but fails when it attempts to modify an (apparently new) claim type of "AuthenticationSilo":

    "Adprep was unable to modify some attributes on object CN=ad://ext/AuthenticationSilo,CN=Claim Types,CN=Claims Configuration,CN=Services,CN=Configuration,DC=deuby,DC=net.

    Adprep encountered an LDAP error.

    Error code: 0x13. Server extended error code: 0x20b1, Server error message: 000020B1: AtrErr: DSID-030F112A, #1:
     0: 000020B1: DSID-030F112A, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 9086f (msDS-ClaimIsValueSpaceRestricted)"

    I checked the claim types, and this is definitely new. In the past I created a "Department Number" claim type, and now AuthenticationSilo is there as well.

    Size restrictions don't allow me to post the entire ADPREP log.

    Thanks,

    Sean

    Tuesday, August 27, 2013 3:34 PM

All replies