“Add error on entry starting on line 56: Insufficient Rights” when running LDIFDE to import the “ConfigMgr_ad_schema.ldf”

I’m trying to run the LDIFDE command-line utility to import the contents of the ConfigMgr_ad_schema.ldf file for ConfigMgr 2012 into Active Directory but it’s failing with the following:

Connecting to “DCCM12R2.FAQShopCM12R2.com”
Logging in as current user using SSPI
Importing directory from file “ConfigMgr_ad_schema.ldf”
Loading entries
1: CN=mS-SMS-Capabilities,CN=Schema,CN=Configuration,DC=FAQShopCM12R2, DC=com

Add error on entry starting on line 56: Insufficient Rights
The server side error is: 0x5 Access is denied.
The extended server error is:
00000005: SecErr: DSID-03152610, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

0 entries modified successfully.
An error has occurred in the program

This is the command-line I’m using which others have used successfully:
ldifde –i –f ConfigMgr_ad_schema.ldf –v –j C:\Users\CmAdmin

You need a subscription to access the answer.


This content is restricted to subscribers

Login to leave your feedback!

Leave a Reply