Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » ADprep failing with reference to a policy directory that doesn't exist
ADprep failing with reference to a policy directory that doesn't exist [message #160630] Thu, 03 September 2009 02:05 Go to next message
Peter Lawton  is currently offline Peter Lawton  United Kingdom
Messages: 17
Registered: September 2009
Junior Member
I'm trying to run "adprep /domainprep /gpprep" and it's erroring with:-

Windows cannot determine existing permissions on Group Policy Object
Directory
< C:\Windows\SYSVOL_DFSR\sysvol\domain.org.uk\Policies\{31B2F3 40-016D-11D2-945F-00C04FB984F9} >.
Upgrade of domain Group Policy Objects failed. (The system cannot find
the file specified. )

The strange thing is that there is no directory
C:\Windows\SYSVOL_DFSR\sysvol\domain.org.uk\Policies\{31B2F3 40-016D-11D2-945F-00C04FB984F9}

Where is this being referenced so I can delete the reference and
successfully run adprep?

Many thanks

Peter Lawton
Re: ADprep failing with reference to a policy directory that doesn'texist [message #160631 is a reply to message #160630] Thu, 03 September 2009 02:18 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Peter,

Do you have the sysvol/netlogon foldera on the DC where you run the command
and can access them?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I'm trying to run "adprep /domainprep /gpprep" and it's erroring
> with:-
>
> Windows cannot determine existing permissions on Group Policy Object
> Directory
> < C:\Windows\SYSVOL_DFSR\sysvol\domain.org.uk\Policies\{31B2F3 40-016D-1
> 1D2-945F-00C04FB984F9}>. Upgrade of domain Group Policy Objects
> failed. (The system cannot find the file specified. )
>
> The strange thing is that there is no directory
> C:\Windows\SYSVOL_DFSR\sysvol\domain.org.uk\Policies\{31B2F3 40-016D-11
> D2-945F-00C04FB984F9}
>
> Where is this being referenced so I can delete the reference and
> successfully run adprep?
>
> Many thanks
>
> Peter Lawton
>
Re: ADprep failing with reference to a policy directory that doesn'texist [message #160632 is a reply to message #160631] Thu, 03 September 2009 02:58 Go to previous messageGo to next message
Peter Lawton  is currently offline Peter Lawton  United Kingdom
Messages: 17
Registered: September 2009
Junior Member
Meinolf Weber [MVP-DS] wrote:
> Hello Peter,
>
> Do you have the sysvol/netlogon foldera on the DC where you run the
> command and can access them?
>
> Best regards

There are several of other folders in
C:\Windows\SYSVOL_DFSR\sysvol\domain.org.uk\Policies\{...... }
Just not the particular one it's complaining about with a name starting
{31B2F340 .....

What I'm trying to find out is where the missing folder name is stored
so I can delete it so adprep will stop looking for it. I assume it's in
AD soemwhere and I can delete it using ADSIEDIT, I just don't know
exactly where to start looking and AD is a big place.

Peter Lawton

>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> I'm trying to run "adprep /domainprep /gpprep" and it's erroring
>> with:-
>>
>> Windows cannot determine existing permissions on Group Policy Object
>> Directory
>> < C:\Windows\SYSVOL_DFSR\sysvol\domain.org.uk\Policies\{31B2F3 40-016D-1
>> 1D2-945F-00C04FB984F9}>. Upgrade of domain Group Policy Objects
>> failed. (The system cannot find the file specified. )
>>
>> The strange thing is that there is no directory
>> C:\Windows\SYSVOL_DFSR\sysvol\domain.org.uk\Policies\{31B2F3 40-016D-11
>> D2-945F-00C04FB984F9}
>>
>> Where is this being referenced so I can delete the reference and
>> successfully run adprep?
>>
>> Many thanks
>>
>> Peter Lawton
>>
>
>
Re: ADprep failing with reference to a policy directory that doesn'texist [message #160633 is a reply to message #160632] Thu, 03 September 2009 03:06 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Peter,

Which OS version and SP/patch level are you talking about? How many DCs are
in the domain? Please run repadmin /showrepl to check for replciation errors,
also dcdiag /v on the DCs and post the unedited output.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Meinolf Weber [MVP-DS] wrote:
>
>> Hello Peter,
>>
>> Do you have the sysvol/netlogon foldera on the DC where you run the
>> command and can access them?
>>
>> Best regards
>>
> There are several of other folders in
> C:\Windows\SYSVOL_DFSR\sysvol\domain.org.uk\Policies\{...... }
> Just not the particular one it's complaining about with a name
> starting
> {31B2F340 .....
> What I'm trying to find out is where the missing folder name is stored
> so I can delete it so adprep will stop looking for it. I assume it's
> in AD soemwhere and I can delete it using ADSIEDIT, I just don't know
> exactly where to start looking and AD is a big place.
>
> Peter Lawton
>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> I'm trying to run "adprep /domainprep /gpprep" and it's erroring
>>> with:-
>>>
>>> Windows cannot determine existing permissions on Group Policy Object
>>> Directory
>>> < C:\Windows\SYSVOL_DFSR\sysvol\domain.org.uk\Policies\{31B2F3 40-016D
>>> -1 1D2-945F-00C04FB984F9}>. Upgrade of domain Group Policy Objects
>>> failed. (The system cannot find the file specified. )
>>>
>>> The strange thing is that there is no directory
>>> C:\Windows\SYSVOL_DFSR\sysvol\domain.org.uk\Policies\{31B2F3 40-016D-
>>> 11 D2-945F-00C04FB984F9}
>>>
>>> Where is this being referenced so I can delete the reference and
>>> successfully run adprep?
>>>
>>> Many thanks
>>>
>>> Peter Lawton
>>>
Re: ADprep failing with reference to a policy directory that doesn'texist [message #160634 is a reply to message #160632] Thu, 03 September 2009 05:06 Go to previous messageGo to next message
Marcin  is currently offline Marcin  United States
Messages: 273
Registered: July 2009
Senior Member
Peter - this particular GUID (and underlying folder) represents your Default
Domain Policy - you do need it...
Rather than trying to delete references to it, you need to ensure its
presence...
Since it appears that you are using DFS-R to replicate SYSVOL, examine the
DFS Replication event log on your DCs and search for clues there...

hth
Marcin

"Peter Lawton" <Dummy@FakeDomain> wrote in message
news:uhcLmSHLKHA.1376@TK2MSFTNGP02.phx.gbl...
> Meinolf Weber [MVP-DS] wrote:
>> Hello Peter,
>>
>> Do you have the sysvol/netlogon foldera on the DC where you run the
>> command and can access them?
>>
>> Best regards
>
> There are several of other folders in
> C:\Windows\SYSVOL_DFSR\sysvol\domain.org.uk\Policies\{...... }
> Just not the particular one it's complaining about with a name starting
> {31B2F340 .....
>
> What I'm trying to find out is where the missing folder name is stored so
> I can delete it so adprep will stop looking for it. I assume it's in AD
> soemwhere and I can delete it using ADSIEDIT, I just don't know exactly
> where to start looking and AD is a big place.
>
> Peter Lawton
>
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>
>>> I'm trying to run "adprep /domainprep /gpprep" and it's erroring
>>> with:-
>>>
>>> Windows cannot determine existing permissions on Group Policy Object
>>> Directory
>>> < C:\Windows\SYSVOL_DFSR\sysvol\domain.org.uk\Policies\{31B2F3 40-016D-1
>>> 1D2-945F-00C04FB984F9}>. Upgrade of domain Group Policy Objects
>>> failed. (The system cannot find the file specified. )
>>>
>>> The strange thing is that there is no directory
>>> C:\Windows\SYSVOL_DFSR\sysvol\domain.org.uk\Policies\{31B2F3 40-016D-11
>>> D2-945F-00C04FB984F9}
>>>
>>> Where is this being referenced so I can delete the reference and
>>> successfully run adprep?
>>>
>>> Many thanks
>>>
>>> Peter Lawton
>>>
>>
Re: ADprep failing with reference to a policy directory that doesn'texist [message #160636 is a reply to message #160634] Thu, 03 September 2009 05:26 Go to previous messageGo to next message
Peter Lawton  is currently offline Peter Lawton  United Kingdom
Messages: 17
Registered: September 2009
Junior Member
I've got it to work now simply by creating an empty folder with the
name:- {31B2F340-016D-11D2-945F-00C04FB984F9}

We aren't actually using it by the look of it as we have a new default
domain policy with a different folder name, as well as other OU specific
policies with different folder names, existing and in use anyway.

Why Windows and adprep seem to think this particular policy name is
important as it's not used by anything and doesn't exist in any case, is
a bit of a mystery, but I've done what I wanted to do now by fooling
them both into believing it exists :)

Peter Lawton

Marcin wrote:
> Peter - this particular GUID (and underlying folder) represents your Default
> Domain Policy - you do need it...
> Rather than trying to delete references to it, you need to ensure its
> presence...
> Since it appears that you are using DFS-R to replicate SYSVOL, examine the
> DFS Replication event log on your DCs and search for clues there...
>
> hth
> Marcin
>
> "Peter Lawton" <Dummy@FakeDomain> wrote in message
> news:uhcLmSHLKHA.1376@TK2MSFTNGP02.phx.gbl...
>> Meinolf Weber [MVP-DS] wrote:
>>> Hello Peter,
>>>
>>> Do you have the sysvol/netlogon foldera on the DC where you run the
>>> command and can access them?
>>>
>>> Best regards
>> There are several of other folders in
>> C:\Windows\SYSVOL_DFSR\sysvol\domain.org.uk\Policies\{...... }
>> Just not the particular one it's complaining about with a name starting
>> {31B2F340 .....
>>
>> What I'm trying to find out is where the missing folder name is stored so
>> I can delete it so adprep will stop looking for it. I assume it's in AD
>> soemwhere and I can delete it using ADSIEDIT, I just don't know exactly
>> where to start looking and AD is a big place.
>>
>> Peter Lawton
>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>
>>>> I'm trying to run "adprep /domainprep /gpprep" and it's erroring
>>>> with:-
>>>>
>>>> Windows cannot determine existing permissions on Group Policy Object
>>>> Directory
>>>> < C:\Windows\SYSVOL_DFSR\sysvol\domain.org.uk\Policies\{31B2F3 40-016D-1
>>>> 1D2-945F-00C04FB984F9}>. Upgrade of domain Group Policy Objects
>>>> failed. (The system cannot find the file specified. )
>>>>
>>>> The strange thing is that there is no directory
>>>> C:\Windows\SYSVOL_DFSR\sysvol\domain.org.uk\Policies\{31B2F3 40-016D-11
>>>> D2-945F-00C04FB984F9}
>>>>
>>>> Where is this being referenced so I can delete the reference and
>>>> successfully run adprep?
Re: ADprep failing with reference to a policy directory that doesn'texist [message #160637 is a reply to message #160636] Thu, 03 September 2009 06:06 Go to previous messageGo to next message
Marcin  is currently offline Marcin  United States
Messages: 273
Registered: July 2009
Senior Member
Peter - your workaround might help you in the short run, but eventually it
will come back to haunt you...
You do need properly configured Default Domain Policy ...

hth
Marcin

"Peter Lawton" <Dummy@FakeDomain> wrote in message
news:uvMwhlILKHA.1248@TK2MSFTNGP04.phx.gbl...
> I've got it to work now simply by creating an empty folder with the name:-
> {31B2F340-016D-11D2-945F-00C04FB984F9}
>
> We aren't actually using it by the look of it as we have a new default
> domain policy with a different folder name, as well as other OU specific
> policies with different folder names, existing and in use anyway.
>
> Why Windows and adprep seem to think this particular policy name is
> important as it's not used by anything and doesn't exist in any case, is a
> bit of a mystery, but I've done what I wanted to do now by fooling them
> both into believing it exists :)
>
> Peter Lawton
>
> Marcin wrote:
>> Peter - this particular GUID (and underlying folder) represents your
>> Default Domain Policy - you do need it...
>> Rather than trying to delete references to it, you need to ensure its
>> presence...
>> Since it appears that you are using DFS-R to replicate SYSVOL, examine
>> the DFS Replication event log on your DCs and search for clues there...
>>
>> hth
>> Marcin
>>
>> "Peter Lawton" <Dummy@FakeDomain> wrote in message
>> news:uhcLmSHLKHA.1376@TK2MSFTNGP02.phx.gbl...
>>> Meinolf Weber [MVP-DS] wrote:
>>>> Hello Peter,
>>>>
>>>> Do you have the sysvol/netlogon foldera on the DC where you run the
>>>> command and can access them?
>>>>
>>>> Best regards
>>> There are several of other folders in
>>> C:\Windows\SYSVOL_DFSR\sysvol\domain.org.uk\Policies\{...... }
>>> Just not the particular one it's complaining about with a name starting
>>> {31B2F340 .....
>>>
>>> What I'm trying to find out is where the missing folder name is stored
>>> so I can delete it so adprep will stop looking for it. I assume it's in
>>> AD soemwhere and I can delete it using ADSIEDIT, I just don't know
>>> exactly where to start looking and AD is a big place.
>>>
>>> Peter Lawton
>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>>> confers no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>
>>>>> I'm trying to run "adprep /domainprep /gpprep" and it's erroring
>>>>> with:-
>>>>>
>>>>> Windows cannot determine existing permissions on Group Policy Object
>>>>> Directory
>>>>> < C:\Windows\SYSVOL_DFSR\sysvol\domain.org.uk\Policies\{31B2F3 40-016D-1
>>>>> 1D2-945F-00C04FB984F9}>. Upgrade of domain Group Policy Objects
>>>>> failed. (The system cannot find the file specified. )
>>>>>
>>>>> The strange thing is that there is no directory
>>>>> C:\Windows\SYSVOL_DFSR\sysvol\domain.org.uk\Policies\{31B2F3 40-016D-11
>>>>> D2-945F-00C04FB984F9}
>>>>>
>>>>> Where is this being referenced so I can delete the reference and
>>>>> successfully run adprep?
>
Re: ADprep failing with reference to a policy directory that doesn'texist [message #160638 is a reply to message #160636] Thu, 03 September 2009 06:16 Go to previous message
pbbergs  is currently offline pbbergs  United States
Messages: 1024
Registered: July 2009
Senior Member
Since it appears that you are unconcerned with your gpo's current settings I
would suggest you rebuild them back to their default state. This can be
accomplished by dcgpofix. This will also reset the domain controllers gpo
as well.

http://technet.microsoft.com/en-us/library/cc772811(WS.10).aspx

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Peter Lawton" <Dummy@FakeDomain> wrote in message
news:uvMwhlILKHA.1248@TK2MSFTNGP04.phx.gbl...
> I've got it to work now simply by creating an empty folder with the name:-
> {31B2F340-016D-11D2-945F-00C04FB984F9}
>
> We aren't actually using it by the look of it as we have a new default
> domain policy with a different folder name, as well as other OU specific
> policies with different folder names, existing and in use anyway.
>
> Why Windows and adprep seem to think this particular policy name is
> important as it's not used by anything and doesn't exist in any case, is a
> bit of a mystery, but I've done what I wanted to do now by fooling them
> both into believing it exists :)
>
> Peter Lawton
>
> Marcin wrote:
>> Peter - this particular GUID (and underlying folder) represents your
>> Default Domain Policy - you do need it...
>> Rather than trying to delete references to it, you need to ensure its
>> presence...
>> Since it appears that you are using DFS-R to replicate SYSVOL, examine
>> the DFS Replication event log on your DCs and search for clues there...
>>
>> hth
>> Marcin
>>
>> "Peter Lawton" <Dummy@FakeDomain> wrote in message
>> news:uhcLmSHLKHA.1376@TK2MSFTNGP02.phx.gbl...
>>> Meinolf Weber [MVP-DS] wrote:
>>>> Hello Peter,
>>>>
>>>> Do you have the sysvol/netlogon foldera on the DC where you run the
>>>> command and can access them?
>>>>
>>>> Best regards
>>> There are several of other folders in
>>> C:\Windows\SYSVOL_DFSR\sysvol\domain.org.uk\Policies\{...... }
>>> Just not the particular one it's complaining about with a name starting
>>> {31B2F340 .....
>>>
>>> What I'm trying to find out is where the missing folder name is stored
>>> so I can delete it so adprep will stop looking for it. I assume it's in
>>> AD soemwhere and I can delete it using ADSIEDIT, I just don't know
>>> exactly where to start looking and AD is a big place.
>>>
>>> Peter Lawton
>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>>> confers no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>
>>>>> I'm trying to run "adprep /domainprep /gpprep" and it's erroring
>>>>> with:-
>>>>>
>>>>> Windows cannot determine existing permissions on Group Policy Object
>>>>> Directory
>>>>> < C:\Windows\SYSVOL_DFSR\sysvol\domain.org.uk\Policies\{31B2F3 40-016D-1
>>>>> 1D2-945F-00C04FB984F9}>. Upgrade of domain Group Policy Objects
>>>>> failed. (The system cannot find the file specified. )
>>>>>
>>>>> The strange thing is that there is no directory
>>>>> C:\Windows\SYSVOL_DFSR\sysvol\domain.org.uk\Policies\{31B2F3 40-016D-11
>>>>> D2-945F-00C04FB984F9}
>>>>>
>>>>> Where is this being referenced so I can delete the reference and
>>>>> successfully run adprep?
>
Previous Topic:Slow Login Process
Next Topic:Create new forest - OK to be 2008?
Goto Forum:
  


Current Time: Tue Jan 16 04:24:06 MST 2018

Total time taken to generate the page: 0.02136 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software