FYI - this seems to be finally resolved. The problem was that the default domain controller policy file (GptTmpl.inf) was missing several lines and one line had been whacked in the middle. With the help of Microsoft this file was rebuilt and the errors have gone away. The errors were triggered by making changes to the policy in the initial solution.
tjh -----Original Message----- From: Hooks, Tim Sent: Thursday, November 29, 2001 8:30 AM To: Exchange Discussions Subject: RE: 5.5 Move to E2k - SORTOF RESOLVED Big Problem Thanks for your help on this. I did call Microsoft. There solution fixed one problem, but created another. The solution was to modify the default domain controllers policy by adding the administrators group and the Exchange Enterprise Servers group to ComputerConfiguration-WindowsSettings-SecuritySettings-LocalPolicies-UserRig htsAssignment to allow "manage auditing and security log". After that I was able to run Forest and domain prep and load up Exchange 2000 (which seems to be working OK now). The new problem - the following pair of error messages every 5 minutes on both domain controllers. Event Type: Error Event Source: Userenv Event Category: None Event ID: 1000 Date: 3/1/2000 Time: 6:16:43 PM User: NT AUTHORITY\SYSTEM Computer: COMPUTERNAME Description: The Group Policy client-side extension Security was passed flags (17) and returned a failure status code of (13). Event Type: Warning Event Source: SceCli Event Category: None Event ID: 1202 Date: 3/1/2000 Time: 6:16:43 PM User: N/A Computer: COMPUTERNAME Description: Security policies are propagated with warning. 0xd : The data is invalid. Please look for more details in TroubleShooting section in Security Help. I applied suggestions from Q256000 but no luck. I hoping to get Microsoft to reopen the case. Other interesting note - both domain controllers were upgraded from NT4, DCPROMO demoted then promoted to resolve a dns name issue during the upgrade about six months ago. Any insights appreciated. Timothy J. Hooks, MCSE Kegler, Brown, Hill & Ritter 65 E. State Street, Suite 1800 Columbus, Ohio 43215 -----Original Message----- From: Bare, Ronald A. [mailto:[EMAIL PROTECTED]] Sent: Thursday, November 15, 2001 6:21 PM To: Exchange Discussions Subject: RE: 5.5 Move to E2k - Big Problem I would contact MS PSS and ask for help. If the rights are disappearing from the Domain Controllers, something is removing them and that is NOT good. It is a problem MS needs to be aware of and get to the bottom of. I have no other suggestion other than rerun /domainprep again and see if the rights stay. Where you able to at least mount the priv or public stores when the policytest said that the rights were good? -----Original Message----- From: Hooks, Tim [mailto:[EMAIL PROTECTED]] Sent: Thursday, November 15, 2001 3:30 PM To: Exchange Discussions Subject: RE: 5.5 Move to E2k - Big Problem Still struggling here. I did indeed need to rerun the /domainprep. However, when I later ran policytest it showed success on only one of the 2 domain controllers. So I waited, and by the next day on both domain controllers it indicated failure. I tried a few more times - no success. I am now about to delete the 2000 attempt - reimage and try again. Still open to any ideas or suggestions. thanks Timothy J. Hooks, MCSE Kegler, Brown, Hill & Ritter 65 E. State Street, Suite 1800 Columbus, Ohio 43215 -----Original Message----- From: Bare, Ronald A. [mailto:[EMAIL PROTECTED]] Sent: Wednesday, November 14, 2001 12:47 PM To: Exchange Discussions Cc: Bare, Ronald A. Subject: RE: 5.5 Move to E2k - Big Problem It sounds like the maybe DOMAINPREP did not work. There is a utility program you can run to check if the correct rights are set on the domain controller. Its name is POLICYTEST. I think it is in support\utils\i386 folder on your exchange 2000 CD. At a CMD prompt, go to the directory and run it on the domain controller. If it doesn't report that the Rights are Set, then I think you need to rerun SETUP /DOMAINPREP. -----Original Message----- From: Hooks, Tim [mailto:[EMAIL PROTECTED]] Sent: Tuesday, November 13, 2001 3:26 PM To: Exchange Discussions Subject: 5.5 Move to E2k - Big Problem Hi List, I am hoping some of you have some insight on a problem I am having. The scenario is as follows: The network is win2k native mode, sp2, with two domain controllers. I currently have Exchange 5.5, SP4 on a Win2k domain controller (was also a GC until last weekend) with 150 users. I have set up a Exchange 2000 on another server (non-DC) after running forest prep and domain prep. I installed the Exchange 2000 ADC. I installed win2k sp1, I joined the existed org during installation. The problem is I cannot mount the information store on the win2k Exchange server, and therefore I cannot move any mailboxes. I get an 9175 error every minute on the exchange 2k server, an 8213 every 25 minutes, mixed in with some 101's after a reboot. On the existing 5.5 server I get some 565 security errors - Directory service access errors. Both the 5.5 and 2000 admin consoles know of the other server's existence. I have poured over Technet and found some interesting stuff - most of the changes were of no help. However, Q275127 mentions no upgrade path for 5.5 on win2k to exchange 2000 (that's why I demoted the 5.5 GC status, waited a day, and rebooted). At this point I am considering opening a ticket with MS and/or running dcpromo to demote the 5.5 server. Any suggestions or comments are welcome. Timothy J. Hooks, MCSE Kegler, Brown, Hill & Ritter 65 E. State Street, Suite 1800 Columbus, Ohio 43215 _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
