Failed to update Active Directory schema error

[fredio]

hallo i get this error durring installation on server 2008r2 datacenter I reinstall operating system and did clean installation and still get this error


Failed to update Active Directory schema: System.DirectoryServices.DirectoryServicesCOMException (0x80072030): There is no such object on the server.

at System.DirectoryServices.PropertyValueCollection.PopulateList()
at System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName)
at System.DirectoryServices.PropertyCollection.get_Item(String propertyName)
at ExtendAdSchema.CustomActions.createSchemaAttribute(Session session, String attriName, String OID, String attSyntax, Int32 oMSyntax, Boolean isSingle, String desc)
at ExtendAdSchema.CustomActions.extendSchema(Session session)
at ExtendAdSchema.CustomActions.ExtendAdSchema(Session session)
Finished update the Active Directory schema
CustomAction ExtendAdSchema returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
Action ended 2:25:19: ExtendAdSchema. Return value 3.
Action ended 2:25:19: INSTALL. Return value 3.
Action ended 2:25:20: ExecuteAction. Return value 3.
Action 2:25:20: FatalError.
Action start 2:25:20: FatalError.
Action 2:25:20: FatalError. Dialog created
Action ended 2:25:25: FatalError. Return value 2.
Action ended 2:25:25: INSTALL. Return value 3.
=== Logging stopped: 12/11/2011 2:25:25 ===
MSI (c) (D4:B8) [02:25:25:655]: Product: Enkompass -- Installation failed.

MSI (c) (D4:B8) [02:25:25:655]: Windows Installer installed the product. Product Name: Enkompass. Product Version: 2.4.0.30. Product Language: 1033. Manufacturer: cPanel, Inc.. Installation success or error status: 1603.

[Kikkeh]

Hi,

Before you install Enkompass, have you followed the setup and installation of Active Directory correctly, and have you confirmed it is working correctly, as with DNS, created and logged in with the cPanel AD account (after granting permissions)?

[Krazarax]

I'm no expert but I hope this helps a couple people, I've started building a test environment (multiple server setup) of Enkompass and found out that while the Enkompass server requires it to be installed on a Domain Controller, I couldn't get it to successfully install unless the server I was installing on was also the Schema Master, just having the Schema Admin rights on the Enkompass Admin account didn't seem to be enough.

[Eric]

Howdy,

Are you doing this with the Administrator user?

Thanks!

[Krazarax]

Setup of both Domain controllers were done using the Domain Administrator user ( actual Administrator ), and then created the Enkompass admin (named EnkompassAdmin) and confirmed it was part of all the Groups listed. When it came time to install Enkompass 3.0.0.36 I logged onto the secondary domain controller, not the first one built, with the previously created account, and got something similar to the above error by the first poster.

I moved the Schema Master role over to the Secondary DC (the one I was installing on) and the install worked without any problems

[Eric]

Howdy,

Try a DomainAdmin user who is not /administrator/ windows likes to box /administrator/ to a local admin in some cases even when the user is a domain admin.

We recommend using a service account to get started. You can see more about it here. Installing Enkompass

Thanks!

[Krazarax]

and then created the Enkompass admin (named EnkompassAdmin) and confirmed it was part of all the Groups listed. When it came time to install Enkompass 3.0.0.36 I logged onto the secondary domain controller..., with the previously created account (EnkompassAdmin)

Think you missed something there, I didn't use Administrator, I used EnkompassAdmin (the Superuser) detailed to create from
Configuring Windows Server® 2008 for Enkompass

[Eric]

Howdy,

I'm sorry, 2 posts with similar issues. Is this a new user?

Thanks!

[Krazarax]

A new user in what sense ?

What I'm testing with would be a fully new environment, built 6 Windows 2008 R2 systems in our Hyper-V environment to test Enkompass out, so there was no existing architecture before so it is a "fresh" system.

6 System test environment (server 2008 R2)
- 1 Primary Domain controler
- 1 Backup Domain Controler w Enkompass Installed
- 2 IIS 7.5 servers
- 1 SQL 2008 R2 / MySQL
- 1 Mail Enable server

[DeShark]

Does the Enkompass server really have to be a domain controller AND be schema master? I didn't see that in the install docs at all. I am trying to install Enkompass on a server that is a domain member server only. I already have 4 domain controllers, two of which are DNS servers. I am using a new domain admin level account that I created to do the install.

This is the error I am getting..
Begin updating the Active Directory schema
Extending the Active Directory schema
Creating schema attributes
Creating schema attribute cPanel-IP
Creating schema attribute cPanel-IP - Complete
Failed to update Active Directory schema: System.DirectoryServices.DirectoryServicesCOMException (0x80072030): There is no such object on the server.

at System.DirectoryServices.PropertyValueCollection.PopulateList()
at System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName)
at System.DirectoryServices.PropertyCollection.get_Item(String propertyName)
at ExtendAdSchema.CustomActions.createSchemaAttribute(Session session, String attriName, String OID, String attSyntax, Int32 oMSyntax, Boolean isSingle, String desc)
at ExtendAdSchema.CustomActions.extendSchema(Session session)
at ExtendAdSchema.CustomActions.ExtendAdSchema(Session session)
Finished update the Active Directory schema
CustomAction ExtendAdSchema returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)

Thanks,
DeShark

[DeShark]

One more question... I read that the domain controllers only needed to be Windows 2003 level. Is that really the case? I noticed two security groups were not there and had to be created. Cryptographic Operators and IIS_IUSRS did not exist. Is it a problem to simply create them?

Thanks,
DeShark

[cPanelSalinas]

The DC needs to be Server 2008.

[DeShark]

So are you saying the functional level of the domain must be 2008? I heard in one of the videos for preparing your domain that a functional level of 2003 was fine. Also, you didn't answer my other questions... does the Enkompass server have to be a domain controller? If so, does it have to have the Schema master functional role? Thanks for your help.

[Eric]

Howdy,

Functional level 2003 is fine but it must be server 2008. (I've tried it won't work with a 2003 AD server. strange things you do when you're QA testing while builds are building) Enkompass does not have to be the domain controller but there must be a DC in the mix. Enkompass does need the "Schema Admins" user for it's user because we add quite a bit to the schema for our role based provider.

Let us know if you have any followup questions.

Thanks!

[DeShark]

Ok thanks! So just having a 2003 DC is a no no? I have added two 2008 DCs to my environment which did upgrade the schema on the AD but I haven't removed the 2003 DC from the mix. Sounds like that is what needs to be done... demote the 2003 controller and remove it from the environment. Good to hear the Enkompass server does NOT need to be a DC. Many thanks!

Thanks,
DeShark