Error Mirgating from DC 2003 to DC 2008


  • Im receiving an error when I do the DCprep /forest on the 2003 box

    Adprep checked to verify whether operation cn=9d17b863-18c3-497d-9bde-45ddb95fcb65,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=corningdata,DC=com has completed.


    The operation GUID already exists so Adprep did not attempt to rerun this operation but is continuing.
    Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is cn=11c39bed-4bee-45f5-b195-8da0e05b573a,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=corningdata,DC=com.
    LDAP API ldap_search_s() finished, return code is 0x20
    Adprep verified the state of operation cn=11c39bed-4bee-45f5-b195-8da0e05b573a,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=corningdata,DC=com.


    The operation has not run or is not currently running. It will be run next.
    ADPREP was unable to modify the default security descriptor on object CN=ms-DS-Managed-Service-Account,CN=Schema,CN=Configuration,DC=corningdata,DC=com.


    Adprep attempts to merge the existing default security descriptors with the new access control entry (ACE).

    [User Action]

    Check the log file ADPrep.log in the C:\WINDOWS\debug\adprep\logs\20131002113859 directory for more information.
    Adprep encountered an LDAP error.

    Error code: 0x20. Server extended error code: 0x208d, Server error message: 0000208D: NameErr: DSID-031001CD, problem 2001 (NO_OBJECT), data 0, best match of:
    Adprep set the value of registry key System\CurrentControlSet\Services\NTDS\Parameters\Schema Update Allowed to 1
    Adprep was unable to update forest information.


    Adprep requires access to existing forest-wide information from the schema master in order to complete this operation.

    [User Action]

    Check the log file, ADPrep.log, in the C:\WINDOWS\debug\adprep\logs\20131002113859 directory for more information.

    Friday, October 04, 2013 5:50 PM


All replies