Adprep was unable to modify the security descriptor on object

Asked By 0 points N/A Posted on -
qa-featured

When I am trying to use Adprep, it encountered an LDAP error. The error indicates "Adprep was unable to modify the security descriptor on object".

They are the following:

CN=DomainControllerAuthentication,CN=Certificate Templates,CN=Public Key Services,CN=Services,CN=Configuration,DC=xeroxtoledo,DC=com.

CN=DirectoryEmailReplication,CN=Certificate Templates,CN=Public Key Services,CN=Services,CN=Configuration,DC=xeroxtoledo,DC=com.

CN=KerberosAuthentication,CN=Certificate Templates,CN=Public Key Services,CN=Services,CN=Configuration,DC=xeroxtoledo,DC=com.

The credentials I used while using Windows Server 2008 is mydomain.

Can anybody help me fix this issue?

SHARE
Answered By 10 points N/A #85733

Adprep was unable to modify the security descriptor on object

qa-featured

Hey Stacy,

Even I had the same problem as you were facing. I figured out the reason why it was so.

When I used the adprep tools, I pulled them from a Server 2008 x32 DVD and this Server 2008 box has Server 2008 R2 x64 on it. So when I ran adprep on the 2003 PDC, the schema version was updated to 44 – when all along I needed it to be 47. So once I found that out, I pulled the adprep folder from the Server 2008 R2 x64 DVD and copied to the 2003 PDC and used adprep32.

Hope, it will help you.

About stephen1
Questions
1
Answers
7
Best Answers
2

Client denied by server configuration

Previous

Error 503-Service unavailable while using WAS

Next

Related Questions