NCSecDesc error running dcdiag

J

JDTHREE [MVP]

I've got a machine running MS Virtual Machine 2004, with several VM's
running in it to test my impending upgrade from Exchange 5.5 to
Exchange 2003.

For testing, I have a Windows 2000 AD server, several clients, and a
windows 2003 member server. The 2003 server is the one I'm running
dcdiag from, the one that will have Exchange 2003 installed on it.

All tests pass, but I'm getting an error with NCSecDesc. Searched the
various newsgroups and found only two so far that mentioned it, but no
fixes. Searching at support.microsoft.com/search doesn't give me
anything on this particular error.

The error is about ntauthority\enterprise domain controllers doesn't
have replicating directory changes all access rights for the naming
context cn=schema,cn=configuration,dc=virtual,dc=com

same thing about builtin\administrators.

then it repeats with the same error, but without the cn=schema at the
beginning for both.

What's odd is that this is my second run at testing this, and it
worked fine the first time. I've restored my VM's to a pre-2003
exchange saved state to run the upgrade again, to test a different
thing, and am hitting this.

Any help appreciated.

John
 
J

JDTHREE [MVP]

I've got a machine running MS Virtual Machine 2004, with several VM's
running in it to test my impending upgrade from Exchange 5.5 to
Exchange 2003.

For testing, I have a Windows 2000 AD server, several clients, and a
windows 2003 member server. The 2003 server is the one I'm running
dcdiag from, the one that will have Exchange 2003 installed on it.

All tests pass, but I'm getting an error with NCSecDesc. Searched the
various newsgroups and found only two so far that mentioned it, but no
fixes. Searching at support.microsoft.com/search doesn't give me
anything on this particular error.

The error is about ntauthority\enterprise domain controllers doesn't
have replicating directory changes all access rights for the naming
context cn=schema,cn=configuration,dc=virtual,dc=com

same thing about builtin\administrators.

then it repeats with the same error, but without the cn=schema at the
beginning for both.

What's odd is that this is my second run at testing this, and it
worked fine the first time. I've restored my VM's to a pre-2003
exchange saved state to run the upgrade again, to test a different
thing, and am hitting this.

Any help appreciated.

John

An addition to this - when I run DCPROMO on the DC itself, it runs
fine. I'm using the same domain account on both servers.

john
 
J

JDTHREE [MVP]

Anyone? Bueller? :)

John

An addition to this - when I run DCPROMO on the DC itself, it runs
fine. I'm using the same domain account on both servers.

john
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top