Adprep was unable to modify the security descriptor on object

Asked By stacy 0 points N/A Posted on - 10/03/2011

When I am trying to use Adprep, it encountered an LDAP error. The error indicates "Adprep was unable to modify the security descriptor on object".

They are the following:

CN=DomainControllerAuthentication,CN=Certificate Templates,CN=Public Key Services,CN=Services,CN=Configuration,DC=xeroxtoledo,DC=com.

CN=DirectoryEmailReplication,CN=Certificate Templates,CN=Public Key Services,CN=Services,CN=Configuration,DC=xeroxtoledo,DC=com.

CN=KerberosAuthentication,CN=Certificate Templates,CN=Public Key Services,CN=Services,CN=Configuration,DC=xeroxtoledo,DC=com.

The credentials I used while using Windows Server 2008 is mydomain.

Can anybody help me fix this issue?

• Status: Open
• Question Views: 2548
• Answer Count: 1
• Vote Up 0 Vote Down

• Answer Accepted: No
• Question Category: Windows 2008

Answered By stephen1 10 points N/A #85733

Adprep was unable to modify the security descriptor on object

Hey Stacy,

Even I had the same problem as you were facing. I figured out the reason why it was so.

When I used the adprep tools, I pulled them from a Server 2008 x32 DVD and this Server 2008 box has Server 2008 R2 x64 on it. So when I ran adprep on the 2003 PDC, the schema version was updated to 44 – when all along I needed it to be 47. So once I found that out, I pulled the adprep folder from the Server 2008 R2 x64 DVD and copied to the 2003 PDC and used adprep32.

Hope, it will help you.

About stephen1

Questions
1

Answers
7

Best Answers
2

• Vote Up 0 Vote Down

• Posted on - 10/17/2011
• Question Category: Windows 2008