ForestPrep (Full Version)

All Forums >> [Microsoft Exchange 2000] >> Installation



Message

solsch -> ForestPrep (28.Oct.2005 4:30:28 AM)

Hi there

I am currently trying to upgrade to Exchange 2000 from 5.5. Built a new server, and intend to run them both side by side, moving users across as and when.

This is a single domain network, with two DCs - one of which runs Exchange 5.5. ADC is installed on the new server (not a DC) and a Recipient Connection Agreement is set up and appears OK. Problem appears when running ForestPrep. We get right to the end of the progress bar before it stops with the message

quote:

 Setup failed while installing sub-component Microsoft Exchange Organization-Level Container Object with error code 0xC1034A3D...


From Log File (just the relevant section):

[12:55:17] Configuring administrative rights
[12:55:17] Entering ScInstallLDIFScript
[12:55:19] Leaving ScInstallLDIFScript
[12:55:19]  ScAclDeletedObjectsCT (K:\admin\src\libs\logic\delegaterole.cxx:2499)
         Error code 0X80070005 (5): Access denied.
[12:55:19]  ScAclDeletedObjectsCT (K:\admin\src\libs\logic\delegaterole.cxx:2499)
         Error code 0XC1034A3D (19005): The operation failed.  Either you do not have sufficient permissions to perform the operation, or you need to wait for permissions to be replicated and try again later.
[12:55:19]  CAtomOrgLevelCt::ScAddDSObjects (K:\admin\src\udog\exsetdata\components\server\a_orglevelct.cxx:324)
         Error code 0XC1034A3D (19005): The operation failed.  Either you do not have sufficient permissions to perform the operation, or you need to wait for permissions to be replicated and try again later.
[12:55:19] Leaving CAtomOrgLevelCt::ScAddDSObjects
[12:55:19]  CAtomOrgLevelCt::ScAdd (K:\admin\src\udog\exsetdata\components\server\a_orglevelct.cxx:142)
         Error code 0XC1034A3D (19005): The operation failed.  Either you do not have sufficient permissions to perform the operation, or you need to wait for permissions to be replicated and try again later.
[12:55:19] Leaving CAtomOrgLevelCt::ScAdd
[12:55:19] mode = 'ForestPrep' (61965) CBaseAtom::ScSetup (K:\admin\src\udog\setupbase\basecomp\baseatom.cxx:775)
         Error code 0XC1034A3D (19005): The operation failed.  Either you do not have sufficient permissions to perform the operation, or you need to wait for permissions to be replicated and try again later.
 

Would appear to suggest a problem with permissions somewhere, but I am at a total loss. I wouldn't have thought replication would be an issue, as it's now been 24 hours since my last attempt. The account being used to install is a member of Domain, Enterprise and Schema Admins groups, and has Admin rights on the 5.5 Site and Configuration. The same error message appears whether running forestprep on the new server or the DC that is operations master for the Schema.

Both DCs are at SP4. NetDiag and nlTest don't report any problems. DCDiag gives a single error about SYSVOL ("The SYSVOL can prevent the AD from starting"), but nevertheless everything passes.

Can anyone offer any advice? I'm running out of things to try...  Thanks.


Edit: Closest Technet article I've found is this one -> http://support.microsoft.com/default.aspx?scid=kb;en-us;322830
Is this likely to solve the problem? I'm reluctant to try this suggested solution as it involves restarting the DC.



mmarnell -> RE: ForestPrep (31.Oct.2005 2:45:07 PM)

If the user account that installed Exchange server belongs to the schema admins, enterprise admins, and local admins for that machine, you do not need to run forestprep at all.  Run domainprep and then you should be all set.

This is only true because you have a single domain.

Mike



solsch -> RE: ForestPrep (4.Nov.2005 4:40:27 AM)

Thanks for your assistance. I've tried to bypass forestprep, but the installation still could not complete.

Nothing on the internet about this error, but searching google groups brought up this suggestion.  I've tried it and and it worked for me. I've included it here in case anybody else experiences this particular problem:


You reported that the Exchange 2000 setup /forestprep stops with error
0xC1034A3D.

You will also see this error in the Exchange Setup Progress.log:

 [11:05:44]  ScAclDeletedObjectsCT
(K:\admin\src\libs\logic\delegaterole.cxx:2499)
            Error code 0X80070005 (5): Access denied.

 [11:05:44]  ScAclDeletedObjectsCT
(K:\admin\src\libs\logic\delegaterole.cxx:2499)
            Error code 0XC1034A3D (19005): The operation failed.  Either you
do not have sufficient permissions to perform the operation, or you need to
wait for permissions to be replicated and try again later.

To resolve this issue follow the steps below:

1. Open Active Directory Users and Computers. Right mouse click on the
domain name and go to "Properties".

2. Go to the "Group Policy" tab, select Default Domain Policy and click on
"Edit".

Note: If your Exchange 2000 Server is a domain controller, then you must
select the Default Domain Controllers Policy by right mouse clicking the
"Domain Controllers" folder in your domain.

3. Go to Computer Configuration, Windows Settings, Security Settings, Local
Policies, User Rights Assignment.

4. On the right hand side, look for these five policies; Act as part of the
operating system, log on as a batch job, log on locally, log on as a
service, log on to the network.

5. Open each one and look for SIDs that don't resolve to an alias. These
SIDs indicate a problem. Add the Administrator account if not present.

6. Go to properties of the "Take ownership of files or other objects". Add
the Administrator account if not present.

7. Close the group policy and click on "OK".

8. Install the Adminpak.msi from WINNT\SYSTEM32.

9. Click on Start, Run and type MMC. Click OK. Add the "Active Directory
Schema" snap in.

10. Right mouse click on "Active Directory Schema" Go to "Operation Master"
and enable the check box "The Schema may be modified on this domain
controller".

After this you must perform a restart of this server and rerun forestprep.
You should be now be able to finish the setup /forestprep for Exchange 2000
without any errors.

--

"Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only."

Regards,
Siby Joseph



Page: [1]