Re: NTDS SDPROP error after upgrade to Windows 2000

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Dmitri Gavrilov [MSFT] (dmitrig_at_online.microsoft.com)
Date: 04/08/04


Date: Thu, 8 Apr 2004 13:57:23 -0700

Try adsiedit or ldp. LDP is the easiest, it shows all attributes when you
double-click on the object.

-- 
Dmitri Gavrilov
SDE, Active Directory Core
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"DB" <dbradford@asd-web.com> wrote in message
news:uZWCRFaHEHA.3248@TK2MSFTNGP12.phx.gbl...
> What interface is used to manipulate these objects?  Active Directory
Users
> and Computers shows the objects but has no properties and I don't see them
> in Exchange System Manager.
>
> David B.
>
>
>
> "Dmitri Gavrilov [MSFT]" <dmitrig@online.microsoft.com> wrote in message
> news:OjNenaOHEHA.3584@TK2MSFTNGP09.phx.gbl...
> > You are getting JET_errRecordTooBigForBackwardCompatibility. Your object
> has
> > too many values on it. SDP needs to stamp another one, and is unable to
do
> > it, because the object is full. You can only have ~850 values
(non-linked)
> > on an object in w2k mode, and ~1300 in w2k3 mode.
> >
> > Just go to this object and remove some values. Most likely, you have too
> > many certs on this object. I have also seen too many IM contacts.
> >
> > -- 
> > Dmitri Gavrilov
> > SDE, Active Directory Core
> >
> > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> > Use of included script samples are subject to the terms specified at
> > http://www.microsoft.com/info/cpyright.htm
> >
> > "DB" <dbradford@asd-web.com> wrote in message
> > news:uCdkNkKHEHA.740@tk2msftngp13.phx.gbl...
> > > I have a single domain with two domain controllers.  Both were running
> > > Windows 2000 AD in native mode with Exchange 2003 (mixed mode) on
> separate
> > > machines.
> > >
> > > The upgrade was smooth, however, since then one domain controller is
> > > producing the following directory service even log error.  Every 30
> > minutes
> > > a new set of errors comes into the even log.   All errors are the same
> > > except for the cn=internal (a different number).  Does anyone know
what
> is
> > > causing this.  There seems to be very little on the subject.
> > >
> > > Event Type: Error
> > > Event Source: NTDS SDPROP
> > > Event Category: Internal Processing
> > > Event ID: 2008
> > > Date:  4/7/2004
> > > Time:  6:05:12 AM
> > > User:  NT AUTHORITY\ANONYMOUS LOGON
> > > Computer: TALDC01
> > > Description:
> > > Internal error: The security descriptor propagation task encountered
an
> > > error while processing the following object. The propagation of
security
> > > descriptors may not be possible until the problem is corrected.
> > >
> > > Object:
> > > CN=internal 46130430,CN=Microsoft Exchange System
Objects,DC=ASD,DC=com
> > >
> > > Additional Data
> > > Error value:
> > > -1112 []
> > > Internal ID:
> > > 2080495
> > >
> > > For more information, see Help and Support Center at
> > > http://go.microsoft.com/fwlink/events.asp.
> > >
> > >
> >
> >
>
>


Relevant Pages

  • Re: change to a user object causes full or partial AD replication?
    ... SDE, Active Directory Core ... This posting is provided "AS IS" with no warranties, ... >> SDE, Active Directory Core ...
    (microsoft.public.windows.server.general)
  • Re: change to a user object causes full or partial AD replication?
    ... SDE, Active Directory Core ... This posting is provided "AS IS" with no warranties, ... >> SDE, Active Directory Core ...
    (microsoft.public.windows.server.active_directory)
  • Re: Error installing ADAM
    ... This posting is provided "AS IS" with no warranties, ... >> Dmitri Gavrilov ... >> SDE, Active Directory Core ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADAM ACL Issue
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... > SDE, Active Directory Core ...
    (microsoft.public.windows.server.active_directory)
  • Re: Two question about ADAM
    ... This posting is provided "AS IS" with no warranties, ... >> ADAM does not integrate with DNS, so NLB adds value. ... >> SDE, Active Directory Core ...
    (microsoft.public.windows.server.active_directory)