Guest
|
 Posted:
Sat Aug 06, 2005 6:16 am Post subject:
ADprep Error (INSUFF_ACCESS_RIGHTS) -- and its solution |
|
|
I had this error, shown in Adprep.log on one of the child domain DCs:
Adprep encountered an LDAP error. Error code: 0x32. Server extended
error code: 0x2098, Server error message: 00002098: SecErr:
DSID-0315141D, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
I could not find any help in any user group or site. Had to open a
ticket with Micrsoft PSS.
The problem was that local administrators of that child domain did not
have any permissions on Group Policy object of the domain controller.
By default they should have Full Control. (Admins of root domain did
have this permission.) So when local "domain admins" were added in the
Security tab of Group Policy, ADPrep /domainprep could run without a
problem.
Am posting here so others don't have to call Microsoft.
Jay Kulsh (Ajay Kulshreshtha)
Los Angeles |
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in
