Active Directory (CM12 TR) Archives - FAQShop

“Add error on entry starting on line 56: Referral” when running LDIFDE to import the “SCCM_ad_schema.ldf”

Cliff Hobbs — Thu, 16 Apr 2015 15:53:16 +0000

FAQShop.com -

“Add error on entry starting on line 56: Referral” when running LDIFDE to import the “ConfigMgr_ad_schema.ldf”

I’m trying to run the LDIFDE command-line utility to import the contents of the ConfigMgr_ad_schema.ldf file for ConfigMgr 2012 into Active Directory but it’s failing with the following:

Connecting to “DCCM12R2.FAQShopCM12R2.com”
Logging in as current user using SSPI
Importing directory from file “ConfigMgr_ad_schema.ldf”
Loading entries
1: CN=mS-SMS-Capabilities,CN=Schema,CN=Configuration,DC=faqshop, DC=com

Add error on entry starting on line 56: Referral
The server side error is: 0x202b A referral was returned from the server.
The extended server error is:
0000202B: RefErr: DSID-0310082F, data 0, 1 access points
ref 1: ‘faqshop.com’

0 entries modified successfully.
An error has occurred in the program

This is the command-line I’m using which others have used successfully:
ldifde –i –f ConfigMgr_ad_schema.ldf –v –j C:\Users\CmAdmin

You need a subscription to access the answer.

This content is restricted to subscribers

The post “Add error on entry starting on line 56: Referral” when running LDIFDE to import the “SCCM_ad_schema.ldf” appeared first on FAQShop.

“Add error on entry starting on line 56: Insufficient Rights” when running LDIFDE to import the “ConfigMgr_ad_schema.ldf”

Cliff Hobbs — Thu, 16 Apr 2015 13:45:43 +0000

FAQShop.com -

“Add error on entry starting on line 56: Insufficient Rights” when running LDIFDE to import the “ConfigMgr_ad_schema.ldf”

I’m trying to run the LDIFDE command-line utility to import the contents of the ConfigMgr_ad_schema.ldf file for ConfigMgr 2012 into Active Directory but it’s failing with the following:

Add error on entry starting on line 56: Insufficient Rights
The server side error is: 0x5 Access is denied.
The extended server error is:
00000005: SecErr: DSID-03152610, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

0 entries modified successfully.
An error has occurred in the program

This is the command-line I’m using which others have used successfully:
ldifde –i –f ConfigMgr_ad_schema.ldf –v –j C:\Users\CmAdmin

You need a subscription to access the answer.

This content is restricted to subscribers

The post “Add error on entry starting on line 56: Insufficient Rights” when running LDIFDE to import the “ConfigMgr_ad_schema.ldf” appeared first on FAQShop.

“Failed to extend the Active Directory schema. Your Windows NT logon ID does not have the necessary privileges to extend the Active Directory schema.”

Cliff Hobbs — Thu, 26 Mar 2015 14:42:03 +0000

FAQShop.com -

“Failed to extend the Active Directory schema. Your Windows NT logon ID does not have the necessary privileges to extend the Active Directory schema.”

I am trying to extend the Active Directory (AD), Schema for ConfigMgr 2012.

However, when I run extadsch.exe I don’t see the

Successfully extended the Active Directory schema

message, I get the following:

W:\SMSSETUP\BIN\X64>extadsch.exe

Microsoft System Center 2012 Configuration Manager v5.00 (Build 7958)
Copyright (C) 2011 Microsoft Corp.

Failed to extend the Active Directory schema. Your Windows NT logon ID does not
have the necessary privileges to extend the Active Directory schema, please find
details in “C:\ExtADSch.log”.

W:\SMSSETUP\BIN\X64>

If I look in the C:\ExtADSch.log however, I see the following:

Modifying Active Directory Schema – with SMS extensions.
DS Root:CN=Schema,CN=Configuration,DC=
Failed to create attribute cn=MS-SMS-Site-Code. Error code = 5.
Failed to create attribute cn=mS-SMS-Assignment-Site-Code. Error code = 5.
Failed to create attribute cn=MS-SMS-Site-Boundaries. Error code = 5.
Failed to create attribute cn=MS-SMS-Roaming-Boundaries. Error code = 5.
Failed to create attribute cn=MS-SMS-Default-MP. Error code = 5.
Failed to create attribute cn=mS-SMS-Device-Management-Point. Error code = 5.
Failed to create attribute cn=MS-SMS-MP-Name. Error code = 5.
Failed to create attribute cn=MS-SMS-MP-Address. Error code = 5.
Failed to create attribute cn=mS-SMS-Health-State. Error code = 5.
Failed to create attribute cn=mS-SMS-Source-Forest. Error code = 5.
Failed to create attribute cn=MS-SMS-Ranged-IP-Low. Error code = 5.
Failed to create attribute cn=MS-SMS-Ranged-IP-High. Error code = 5.
Failed to create attribute cn=mS-SMS-Version. Error code = 5.
Failed to create attribute cn=mS-SMS-Capabilities. Error code = 5.
Failed to create class cn=MS-SMS-Management-Point. Error code = 8202.
Failed to create class cn=MS-SMS-Server-Locator-Point. Error code = 8202.
Failed to create class cn=MS-SMS-Site. Error code = 8202.
Failed to create class cn=MS-SMS-Roaming-Boundary-Range. Error code = 8202.
Failed to extend the Active Directory schema. Your Windows NT logon ID does not have the necessary privileges to extend the Active Directory schema, please find details in “C:\ExtADSch.log”

You need a subscription to access the answer.

This content is restricted to subscribers

The post “Failed to extend the Active Directory schema. Your Windows NT logon ID does not have the necessary privileges to extend the Active Directory schema.” appeared first on FAQShop.