Ye's profile静水深流PhotosBlogLists Tools Help
    October 29

    Exchange 2007 SP1 prepare domain fail with “The specified user does not exist.”

    最近在一个项目中,发现子域多了以后,最后建立的几个子域在运行Setup /PrepareDomain时,总会遇到以下故障:

    adschema

    检查Exchange Setup Log,发现Adding ACE已经完成,在

    Used domain controller DC-01.xx.xx to read object CN=Exchange Servers,OU=Microsoft Exchange Security Groups,DC=xx,DC=xx后,随即

    [2009-10-29 10:53:26] [2] [ERROR] Active Directory operation failed on DC-01.xx.xx. This error is not retriable. 其他信息: 指定的用户不存在。。
    Active Directory 响应: 00000525: NameErr: DSID-031A0F80, problem 2001 (NO_OBJECT), data 0, best match of:
        ''

    [2009-10-29 10:53:26] [2] [ERROR] 对象不存在。
    [2009-10-29 10:53:26] [2] Ending processing.
    [2009-10-29 10:53:26] [1] The following 1 error(s) occurred during task execution:
    [2009-10-29 10:53:26] [1] 0.  ErrorRecord: DC-01.xx.xx 上的 Active Directory 操作失败。此错误不可重试。其他信息: 指定的用户不存在。。
    Active Directory 响应: 00000525: NameErr: DSID-031A0F80, problem 2001 (NO_OBJECT), data 0, best match of:
        ''

    [2009-10-29 10:53:26] [1] 0.  ErrorRecord: Microsoft.Exchange.Data.Directory.ADOperationException: DC-01.xx.xx 上的 Active Directory 操作失败。此错误不可重试。其他信息: 指定的用户不存在。。
    Active Directory 响应: 00000525: NameErr: DSID-031A0F80, problem 2001 (NO_OBJECT), data 0, best match of:
        ''
    ---> System.DirectoryServices.Protocols.DirectoryOperationException: 对象不存在。
       在 System.DirectoryServices.Protocols.LdapConnection.ConstructResponse(Int32 messageId, LdapOperation operation, ResultAll resultType, TimeSpan requestTimeOut, Boolean exceptionOnTimeOut)
       在 System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request, TimeSpan requestTimeout)
       在 Microsoft.Exchange.Data.Directory.PooledLdapConnection.SendRequest(DirectoryRequest request, LdapOperation ldapOperation)
       在 Microsoft.Exchange.Data.Directory.ADSession.ExecuteModificationRequest(ADRawEntry entry, DirectoryRequest request, ADObjectId originalId)
       --- 内部异常堆栈跟踪的结尾 ---
       在 Microsoft.Exchange.Data.Directory.ADSession.AnalyzeDirectoryError(PooledLdapConnection connection, DirectoryRequest request, DirectoryException de, Int32 totalRetries, Int32 retriesOnServer)
       在 Microsoft.Exchange.Data.Directory.ADSession.ExecuteModificationRequest(ADRawEntry entry, DirectoryRequest request, ADObjectId originalId)
       在 Microsoft.Exchange.Data.Directory.ADSession.Save(ADObject instanceToSave, IEnumerable`1 properties)
       在 Microsoft.Exchange.Management.Tasks.SetupTaskBase.Save(ADRecipient o, ADRecipientSession recipientSession)
       在 Microsoft.Exchange.Management.Tasks.InitializeDomainPermissions.InternalProcessRecord()
       在 Microsoft.Exchange.Configuration.Tasks.Task.ProcessRecord()
    [2009-10-29 10:53:26] [1] [ERROR] Active Directory operation failed on DC-01.xx.xx. This error is not retriable. 其他信息: 指定的用户不存在。。
    Active Directory 响应: 00000525: NameErr: DSID-031A0F80, problem 2001 (NO_OBJECT), data 0, best match of:
        ''

    [2009-10-29 10:53:26] [1] [ERROR] 对象不存在。
    [2009-10-29 10:53:26] [1] Setup is halting task execution because of one or more errors in a critical task.
    [2009-10-29 10:53:26] [1] Finished executing component tasks.
    [2009-10-29 10:53:26] [1] Ending processing.
    [2009-10-29 10:53:26] [0] The Exchange Server Setup operation did not complete. For more information, visit http://support.microsoft.com and enter the Error ID.
    [2009-10-29 10:53:26] [0] End of Setup

    ************************************************************************************************************************************************************************

    Solution:

    1、在根域GC上,做一次强制复制;

    2、在根域DC上,将子域Exchange Install Domain Servers组添加到Exchange Servers组;

    3、重新执行setup /preparedomain。

    感谢Fiona Liao MM的帮助~~~。

    Comments

    Please wait...
    Sorry, the comment you entered is too long. Please shorten it.
    You didn't enter anything. Please try again.
    Sorry, we can't add your comment right now. Please try again later.
    To add a comment, you need permission from your parent. Ask for permission
    Your parent has turned off comments.
    Sorry, we can't delete your comment right now. Please try again later.
    You've exceeded the maximum number of comments that can be left in one day. Please try again in 24 hours.
    Your account has had the ability to leave comments disabled because our systems indicate that you may be spamming other users. If you believe that your account has been disabled in error please contact Windows Live support.
    Complete the security check below to finish leaving your comment.
    The characters you type in the security check must match the characters in the picture or audio.

    To add a comment, sign in with your Windows Live ID (if you use Hotmail, Messenger, or Xbox LIVE, you have a Windows Live ID). Sign in


    Don't have a Windows Live ID? Sign up

    Trackbacks

    The trackback URL for this entry is:
    http://windowsserversystem.spaces.live.com/blog/cns!16B37C3CDCED0A95!2333.trak
    Weblogs that reference this entry
    • None