Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Missing/Corrupt company object in AD
Missing/Corrupt company object in AD [message #161177] Fri, 18 September 2009 03:24 Go to next message
Jesper Ravn  is currently offline Jesper Ravn  Denmark
Messages: 37
Registered: September 2009
Member
Hello

I have a strange problem. Hopefully you can help me.
My setup is like this.

Windows 2008 R2 native mode (upgraded from Windows 2008)
Exchange 2007 SP1 rollup 9 on a Windows 2008 SP2 x64.

Im trying to install SP2 (with new hotfix) on my Exchange 2007. In that
process it makes a schema extension.
The schema extension comes out with an error.

Entry DN: CN=Company,CN=Schema,CN=Configuration,DC=domain,DC=com
Add error on entry starting on line 143: Insufficient Rights
The server side error is: 0x2098 Insufficient access rights to perform the
operation.
The extended server error is:
00002098: SecErr: DSID-03150BAA, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

When I start "ADSI Edit" and goto
"CN=Schema,CN=Configuration,DC=domain,DC=com", I can see my "Company
Object".
But all the attributes are striped, and it has no class specification.
When I try to rename or delete, it gives this error:
Error code: 0x8007200a - "the specified directory service attribute does
not exist".

Im not sure that I have a backup, where the "company object" is ok.
Is there another solution to this problem, besides a restore?.

Thanks,

Jesper Ravn
Re: Missing/Corrupt company object in AD [message #161178 is a reply to message #161177] Fri, 18 September 2009 03:37 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Jesper,

What security is the account you use member of?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello
>
> I have a strange problem. Hopefully you can help me. My setup is like
> this.
>
> Windows 2008 R2 native mode (upgraded from Windows 2008) Exchange 2007
> SP1 rollup 9 on a Windows 2008 SP2 x64.
>
> Im trying to install SP2 (with new hotfix) on my Exchange 2007. In
> that
> process it makes a schema extension.
> The schema extension comes out with an error.
> Entry DN: CN=Company,CN=Schema,CN=Configuration,DC=domain,DC=com
> Add error on entry starting on line 143: Insufficient Rights
> The server side error is: 0x2098 Insufficient access rights to perform
> the
> operation.
> The extended server error is:
> 00002098: SecErr: DSID-03150BAA, problem 4003 (INSUFF_ACCESS_RIGHTS),
> data 0
> When I start "ADSI Edit" and goto
> "CN=Schema,CN=Configuration,DC=domain,DC=com", I can see my "Company
> Object".
> But all the attributes are striped, and it has no class specification.
> When I try to rename or delete, it gives this error:
> Error code: 0x8007200a - "the specified directory service attribute
> does
> not exist".
> Im not sure that I have a backup, where the "company object" is ok. Is
> there another solution to this problem, besides a restore?.
>
> Thanks,
>
> Jesper Ravn
>
Re: Missing/Corrupt company object in AD [message #161179 is a reply to message #161178] Fri, 18 September 2009 03:46 Go to previous messageGo to next message
Jesper Ravn  is currently offline Jesper Ravn  Denmark
Messages: 37
Registered: September 2009
Member
Hi Meinolf

Im using the domain administrator account.
Member of - Enterprise Admins and Schema Admin.

/Jesper

"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> skrev i meddelelsen
news:6cb2911d5ce28cc066b7b7440ca@msnews.microsoft.com...
> Hello Jesper,
>
> What security is the account you use member of?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Hello
>>
>> I have a strange problem. Hopefully you can help me. My setup is like
>> this.
>>
>> Windows 2008 R2 native mode (upgraded from Windows 2008) Exchange 2007
>> SP1 rollup 9 on a Windows 2008 SP2 x64.
>>
>> Im trying to install SP2 (with new hotfix) on my Exchange 2007. In
>> that
>> process it makes a schema extension.
>> The schema extension comes out with an error.
>> Entry DN: CN=Company,CN=Schema,CN=Configuration,DC=domain,DC=com
>> Add error on entry starting on line 143: Insufficient Rights
>> The server side error is: 0x2098 Insufficient access rights to perform
>> the
>> operation.
>> The extended server error is:
>> 00002098: SecErr: DSID-03150BAA, problem 4003 (INSUFF_ACCESS_RIGHTS),
>> data 0
>> When I start "ADSI Edit" and goto
>> "CN=Schema,CN=Configuration,DC=domain,DC=com", I can see my "Company
>> Object".
>> But all the attributes are striped, and it has no class specification.
>> When I try to rename or delete, it gives this error:
>> Error code: 0x8007200a - "the specified directory service attribute
>> does
>> not exist".
>> Im not sure that I have a backup, where the "company object" is ok. Is
>> there another solution to this problem, besides a restore?.
>>
>> Thanks,
>>
>> Jesper Ravn
>>
>
>
Re: Missing/Corrupt company object in AD [message #161180 is a reply to message #161179] Fri, 18 September 2009 04:08 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Jesper,

And you followed exactly this steps:
http://msexchangeteam.com/archive/2009/09/15/452494.aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi Meinolf
>
> Im using the domain administrator account.
> Member of - Enterprise Admins and Schema Admin.
> /Jesper
>
> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> skrev i meddelelsen
> news:6cb2911d5ce28cc066b7b7440ca@msnews.microsoft.com...
>
>> Hello Jesper,
>>
>> What security is the account you use member of?
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hello
>>>
>>> I have a strange problem. Hopefully you can help me. My setup is
>>> like this.
>>>
>>> Windows 2008 R2 native mode (upgraded from Windows 2008) Exchange
>>> 2007 SP1 rollup 9 on a Windows 2008 SP2 x64.
>>>
>>> Im trying to install SP2 (with new hotfix) on my Exchange 2007. In
>>> that
>>> process it makes a schema extension.
>>> The schema extension comes out with an error.
>>> Entry DN: CN=Company,CN=Schema,CN=Configuration,DC=domain,DC=com
>>> Add error on entry starting on line 143: Insufficient Rights
>>> The server side error is: 0x2098 Insufficient access rights to
>>> perform
>>> the
>>> operation.
>>> The extended server error is:
>>> 00002098: SecErr: DSID-03150BAA, problem 4003
>>> (INSUFF_ACCESS_RIGHTS),
>>> data 0
>>> When I start "ADSI Edit" and goto
>>> "CN=Schema,CN=Configuration,DC=domain,DC=com", I can see my "Company
>>> Object".
>>> But all the attributes are striped, and it has no class
>>> specification.
>>> When I try to rename or delete, it gives this error:
>>> Error code: 0x8007200a - "the specified directory service attribute
>>> does
>>> not exist".
>>> Im not sure that I have a backup, where the "company object" is ok.
>>> Is
>>> there another solution to this problem, besides a restore?.
>>> Thanks,
>>>
>>> Jesper Ravn
>>>
Re: Missing/Corrupt company object in AD [message #161182 is a reply to message #161180] Fri, 18 September 2009 04:58 Go to previous messageGo to next message
Jesper Ravn  is currently offline Jesper Ravn  Denmark
Messages: 37
Registered: September 2009
Member
Hi Meinolf

Thanks for your feedback.
Yes I have followed the guide. But my main problem is not Exchange SP2.
The main problem is to get my "company objeckt" back, with the correct
class/attributes.
Right now it's missing/corrupt in my AD. Is there any way I can delete it
and recreate it without a restore?.

Thanks,

Jesper Ravn

"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> skrev i meddelelsen
news:6cb2911d5ce88cc066fe8e633c3@msnews.microsoft.com...
> Hello Jesper,
>
> And you followed exactly this steps:
> http://msexchangeteam.com/archive/2009/09/15/452494.aspx
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Hi Meinolf
>>
>> Im using the domain administrator account.
>> Member of - Enterprise Admins and Schema Admin.
>> /Jesper
>>
>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> skrev i meddelelsen
>> news:6cb2911d5ce28cc066b7b7440ca@msnews.microsoft.com...
>>
>>> Hello Jesper,
>>>
>>> What security is the account you use member of?
>>>
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>> Hello
>>>>
>>>> I have a strange problem. Hopefully you can help me. My setup is
>>>> like this.
>>>>
>>>> Windows 2008 R2 native mode (upgraded from Windows 2008) Exchange
>>>> 2007 SP1 rollup 9 on a Windows 2008 SP2 x64.
>>>>
>>>> Im trying to install SP2 (with new hotfix) on my Exchange 2007. In
>>>> that
>>>> process it makes a schema extension.
>>>> The schema extension comes out with an error.
>>>> Entry DN: CN=Company,CN=Schema,CN=Configuration,DC=domain,DC=com
>>>> Add error on entry starting on line 143: Insufficient Rights
>>>> The server side error is: 0x2098 Insufficient access rights to
>>>> perform
>>>> the
>>>> operation.
>>>> The extended server error is:
>>>> 00002098: SecErr: DSID-03150BAA, problem 4003
>>>> (INSUFF_ACCESS_RIGHTS),
>>>> data 0
>>>> When I start "ADSI Edit" and goto
>>>> "CN=Schema,CN=Configuration,DC=domain,DC=com", I can see my "Company
>>>> Object".
>>>> But all the attributes are striped, and it has no class
>>>> specification.
>>>> When I try to rename or delete, it gives this error:
>>>> Error code: 0x8007200a - "the specified directory service attribute
>>>> does
>>>> not exist".
>>>> Im not sure that I have a backup, where the "company object" is ok.
>>>> Is
>>>> there another solution to this problem, besides a restore?.
>>>> Thanks,
>>>>
>>>> Jesper Ravn
>>>>
>
>
Re: Missing/Corrupt company object in AD [message #161195 is a reply to message #161182] Fri, 18 September 2009 08:42 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"Jesper Ravn" <jesper_ravn@hotmail.com> wrote in message
news:%23pyiw7EOKHA.1232@TK2MSFTNGP05.phx.gbl...

Jesper,

Do you mean you lost the Organization Name, or did you lose or is missing,
the Global Address List? I'm not sure what you mean by "Company Object."

If you are looking at:
"CN=Schema,CN=Configuration,DC=domain,DC=com", I can see my "Company
Object".

Then it tells me you are in the wrong Partition. The Schema partition is
like the DNA of AD, which defines the *types* of objects that can exist, and
attributes associated to the object. Kind of like a cheeseburger. It's a
hamburger object, with optional cheese attribute added to it. The other
partitions show the objects in their working form.

Try this. Let us know if your organization name exists (assuming you mean
your organization name). Under the organization name, in the right hand
pane, you should see a whole list of objects, basically the Exchange
installation itself.

ADSI Edit
Configuration [server1.companyName.local]
CN=Service
CN-Microsoft Exchange
CN=Exchange Organization Name (or company name)


If this is not what you mean, do us a favor and take a screen shot of your
ADSI Edit window while open, and you can use mspaint to edit it, then upload
it to skydrive.live.com, and provide us the link to take a look at it.

Also, as an FYI (trying to supply as much info as I can), I looked up that
error ("Error code: 0x8007200a - "the specified directory service attribute
does not exist"), and found one link below that said the poster logged on
using a different account, and it worked.
http://social.microsoft.com/Forums/en-US/communicationsserve rsetup/thread/66898f93-17be-4e69-8971-9bbeb4aa9a09

In addition - Was this an Exchange 2003 to 2007 Migration? Or is it a fresh
2007 install? At any one time or other, was anything denied in Exchange, or
in AD, such as on the Global Address List, or any other area, denying Auth
Users or denying the Everyone group?


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCTS Exchange, MCSE, MCSA 2003 & 2000, MCSA Messaging
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.
> Hi Meinolf
>
> Thanks for your feedback.
> Yes I have followed the guide. But my main problem is not Exchange SP2.
> The main problem is to get my "company objeckt" back, with the correct
> class/attributes.
> Right now it's missing/corrupt in my AD. Is there any way I can delete it
> and recreate it without a restore?.
>
> Thanks,
>
> Jesper Ravn
>
> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> skrev i meddelelsen
> news:6cb2911d5ce88cc066fe8e633c3@msnews.microsoft.com...
>> Hello Jesper,
>>
>> And you followed exactly this steps:
>> http://msexchangeteam.com/archive/2009/09/15/452494.aspx
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>
>>> Hi Meinolf
>>>
>>> Im using the domain administrator account.
>>> Member of - Enterprise Admins and Schema Admin.
>>> /Jesper
>>>
>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> skrev i meddelelsen
>>> news:6cb2911d5ce28cc066b7b7440ca@msnews.microsoft.com...
>>>
>>>> Hello Jesper,
>>>>
>>>> What security is the account you use member of?
>>>>
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>>> confers no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> Hello
>>>>>
>>>>> I have a strange problem. Hopefully you can help me. My setup is
>>>>> like this.
>>>>>
>>>>> Windows 2008 R2 native mode (upgraded from Windows 2008) Exchange
>>>>> 2007 SP1 rollup 9 on a Windows 2008 SP2 x64.
>>>>>
>>>>> Im trying to install SP2 (with new hotfix) on my Exchange 2007. In
>>>>> that
>>>>> process it makes a schema extension.
>>>>> The schema extension comes out with an error.
>>>>> Entry DN: CN=Company,CN=Schema,CN=Configuration,DC=domain,DC=com
>>>>> Add error on entry starting on line 143: Insufficient Rights
>>>>> The server side error is: 0x2098 Insufficient access rights to
>>>>> perform
>>>>> the
>>>>> operation.
>>>>> The extended server error is:
>>>>> 00002098: SecErr: DSID-03150BAA, problem 4003
>>>>> (INSUFF_ACCESS_RIGHTS),
>>>>> data 0
>>>>> When I start "ADSI Edit" and goto
>>>>> "CN=Schema,CN=Configuration,DC=domain,DC=com", I can see my "Company
>>>>> Object".
>>>>> But all the attributes are striped, and it has no class
>>>>> specification.
>>>>> When I try to rename or delete, it gives this error:
>>>>> Error code: 0x8007200a - "the specified directory service attribute
>>>>> does
>>>>> not exist".
>>>>> Im not sure that I have a backup, where the "company object" is ok.
>>>>> Is
>>>>> there another solution to this problem, besides a restore?.
>>>>> Thanks,
>>>>>
>>>>> Jesper Ravn
>>>>>
>>
>>
Re: Missing/Corrupt company object in AD [message #161198 is a reply to message #161195] Fri, 18 September 2009 11:01 Go to previous messageGo to next message
Jesper Ravn  is currently offline Jesper Ravn  Denmark
Messages: 37
Registered: September 2009
Member
"Ace Fekay [MCT]" <aceman@mvps.RemoveThisPart.org> skrev i meddelelsen
news:OIU544GOKHA.4964@TK2MSFTNGP06.phx.gbl...
> "Jesper Ravn" <jesper_ravn@hotmail.com> wrote in message
> news:%23pyiw7EOKHA.1232@TK2MSFTNGP05.phx.gbl...
>
> Jesper,
>
> Do you mean you lost the Organization Name, or did you lose or is missing,
> the Global Address List? I'm not sure what you mean by "Company Object."

Hi Ace

Sorry, for my bad explanation.
I will try again. Please forget about the Exchange SP2 installation.
That was just the way I found out, that something was wrong in my AD.

If I start "ADSI Edit" and goto:
CN=Schema,CN=Configuration,DC=domain,DC=com
CN=Company

Then I see that, there are no class/attributes to that object.
Please see the links below.
http://cid-a78115db432a8db0.skydrive.live.com/self.aspx/Offe ntlig/ADError.JPG
http://cid-a78115db432a8db0.skydrive.live.com/self.aspx/Offe ntlig/ADError01.JPG

Is there any way I can delete it (CN=Company) and recreate it without a
restore?.

Thanks,

/Jesper
Re: Missing/Corrupt company object in AD [message #161201 is a reply to message #161198] Fri, 18 September 2009 11:48 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"Jesper Ravn" <jesper_ravn@hotmail.com> wrote in message
news:OaUYnGIOKHA.1236@TK2MSFTNGP05.phx.gbl...
> "Ace Fekay [MCT]" <aceman@mvps.RemoveThisPart.org> skrev i meddelelsen
> news:OIU544GOKHA.4964@TK2MSFTNGP06.phx.gbl...
>> "Jesper Ravn" <jesper_ravn@hotmail.com> wrote in message
>> news:%23pyiw7EOKHA.1232@TK2MSFTNGP05.phx.gbl...
>>
>> Jesper,
>>
>> Do you mean you lost the Organization Name, or did you lose or is
>> missing, the Global Address List? I'm not sure what you mean by "Company
>> Object."
>
> Hi Ace
>
> Sorry, for my bad explanation.
> I will try again. Please forget about the Exchange SP2 installation.
> That was just the way I found out, that something was wrong in my AD.
>
> If I start "ADSI Edit" and goto:
> CN=Schema,CN=Configuration,DC=domain,DC=com
> CN=Company
>
> Then I see that, there are no class/attributes to that object.
> Please see the links below.
> http://cid-a78115db432a8db0.skydrive.live.com/self.aspx/Offe ntlig/ADError.JPG
> http://cid-a78115db432a8db0.skydrive.live.com/self.aspx/Offe ntlig/ADError01.JPG
>
> Is there any way I can delete it (CN=Company) and recreate it without a
> restore?.
>
> Thanks,
>
> /Jesper
>
>
>
>


Very interesting. I must say, this is a first I've seen this. In the second
image of the CN=Company properties, what's under the security tab?

Can you think back on how this may have occured, other than the Exchange SP2
attempt? Did anyone mess with permissions? From what you said earlier,
apparently this occured prior to the Exchange SP2 attempt.

Ace
Re: Missing/Corrupt company object in AD [message #161204 is a reply to message #161198] Fri, 18 September 2009 12:52 Go to previous messageGo to next message
florian  is currently offline florian  Germany
Messages: 484
Registered: July 2009
Senior Member
Howdie!

Jesper Ravn schrieb:
> Sorry, for my bad explanation.
> I will try again. Please forget about the Exchange SP2 installation.
> That was just the way I found out, that something was wrong in my AD.
>
> If I start "ADSI Edit" and goto:
> CN=Schema,CN=Configuration,DC=domain,DC=com
> CN=Company
>
> Then I see that, there are no class/attributes to that object.
> Please see the links below.
> http://cid-a78115db432a8db0.skydrive.live.com/self.aspx/Offe ntlig/ADError.JPG
>
> http://cid-a78115db432a8db0.skydrive.live.com/self.aspx/Offe ntlig/ADError01.JPG

It looks like that it's broken. Hmm... I guess you won't be able to
re-create it easily as it's a attributeSchema-object with a special GUID
and OID so you'll have to restore it.

You maybe want to contact PSS on this - they have dealt with similar
cases like this:
http://blogs.technet.com/ad/archive/2006/12/13/lookin-at-som e-ad-dumpage.aspx

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
Re: Missing/Corrupt company object in AD [message #161205 is a reply to message #161201] Fri, 18 September 2009 13:31 Go to previous messageGo to next message
Jesper Ravn  is currently offline Jesper Ravn  Denmark
Messages: 37
Registered: September 2009
Member
"Ace Fekay [MCT]" <aceman@mvps.RemoveThisPart.org> skrev i meddelelsen
news:eq7WsgIOKHA.3292@TK2MSFTNGP04.phx.gbl...
> Very interesting. I must say, this is a first I've seen this. In the
> second image of the CN=Company properties, what's under the security tab?
>
> Can you think back on how this may have occured, other than the Exchange
> SP2 attempt? Did anyone mess with permissions? From what you said earlier,
> apparently this occured prior to the Exchange SP2 attempt.

Hi Ace

Thanks for leading me in the right direction.
For some strange reasson the "include inherited permissions from this
object's parent" was not ticked on, under advanced security settings.
When I did that, the permissions was corrected and I could see the
class/attributes again...doh.
http://cid-a78115db432a8db0.skydrive.live.com/self.aspx/Offe ntlig/ADError02.JPG

The Exchange SP2 is now installed and Im happy again :-).
Thanks for all your help and have nice weekend.

/Jesper
Re: Missing/Corrupt company object in AD [message #161208 is a reply to message #161205] Fri, 18 September 2009 16:58 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"Jesper Ravn" <jesper_ravn@hotmail.com> wrote in message
news:%23xtenaJOKHA.1280@TK2MSFTNGP04.phx.gbl...
>
>
> "Ace Fekay [MCT]" <aceman@mvps.RemoveThisPart.org> skrev i meddelelsen
> news:eq7WsgIOKHA.3292@TK2MSFTNGP04.phx.gbl...
>> Very interesting. I must say, this is a first I've seen this. In the
>> second image of the CN=Company properties, what's under the security tab?
>>
>> Can you think back on how this may have occured, other than the Exchange
>> SP2 attempt? Did anyone mess with permissions? From what you said
>> earlier, apparently this occured prior to the Exchange SP2 attempt.
>
> Hi Ace
>
> Thanks for leading me in the right direction.
> For some strange reasson the "include inherited permissions from this
> object's parent" was not ticked on, under advanced security settings.
> When I did that, the permissions was corrected and I could see the
> class/attributes again...doh.
> http://cid-a78115db432a8db0.skydrive.live.com/self.aspx/Offe ntlig/ADError02.JPG
>
> The Exchange SP2 is now installed and Im happy again :-).
> Thanks for all your help and have nice weekend.
>
> /Jesper


AWESOME! Good to hear that, Jesper. And you are very welcome.

You have a great weekend, too!

Ace
Re: Missing/Corrupt company object in AD [message #161220 is a reply to message #161205] Sun, 20 September 2009 04:54 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Jesper,

Nice catch from Ace, sorry that i didn't get you correct at the beginning.
Congratulations that you solved it and everything now works as expected.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> "Ace Fekay [MCT]" <aceman@mvps.RemoveThisPart.org> skrev i meddelelsen
> news:eq7WsgIOKHA.3292@TK2MSFTNGP04.phx.gbl...
>
>> Very interesting. I must say, this is a first I've seen this. In the
>> second image of the CN=Company properties, what's under the security
>> tab?
>>
>> Can you think back on how this may have occured, other than the
>> Exchange SP2 attempt? Did anyone mess with permissions? From what you
>> said earlier, apparently this occured prior to the Exchange SP2
>> attempt.
>>
> Hi Ace
>
> Thanks for leading me in the right direction.
> For some strange reasson the "include inherited permissions from this
> object's parent" was not ticked on, under advanced security settings.
> When I did that, the permissions was corrected and I could see the
> class/attributes again...doh.
> http://cid-a78115db432a8db0.skydrive.live.com/self.aspx/Offe ntlig/ADEr
> ror02.JPG
> The Exchange SP2 is now installed and Im happy again :-). Thanks for
> all your help and have nice weekend.
>
> /Jesper
>
Re: Missing/Corrupt company object in AD [message #161231 is a reply to message #161220] Sun, 20 September 2009 10:46 Go to previous message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:6cb2911d5e078cc0808af019c51@msnews.microsoft.com...
> Hello Jesper,
>
> Nice catch from Ace, sorry that i didn't get you correct at the beginning.
> Congratulations that you solved it and everything now works as expected.
>


Don't worry, we all work together. I hope you catch a mistake or correct me
when I make one! :-)

Ace
Previous Topic:Server Joining to Domain...Urgent
Next Topic:Delete an orphan DC
Goto Forum:
  


Current Time: Tue Jan 23 16:37:06 MST 2018

Total time taken to generate the page: 0.07559 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software