Open Software Solutions

When you run the Adprep /rodcprep command on Windows Server 2008, you receive the following error message:

Back to the top

This problem occurs when the Adprep /rodcprep command tries to contact the infrastructure master for each application partition in the forest. The command does this to set the permissions that are required for Read-Only Domain Controller (RODC) replication. The Adprep /rodcprep command fails if one of the following conditions is true:

•	The partition or the partitions that are referenced in the error message no longer exist.
•	The infrastructure master for the referenced partition or partitions has been forcefully demoted or is offline.

Back to the top

To resolve this problem if the partition no longer exists, perform a metadata cleanup for the orphaned partition. For more information, visit the following Microsoft Web site:

If the specified partition exists, specify an infrastructure role owner that is online for the partition. You can do this by manually modifying the fSMORoleOwner attribute on the object, as described in the More Information section.

Back to the top

The following script sample modifies the fSMORoleOwner attribute on the infrastructure object of the specified Non-Domain Naming Context (NDNC) to an active, or contactable, server. The NDNC in this sample is the DomainDnsZones,DC=contoso,DC=com NDNC naming context. The script uses the following command:

-------fixfsmo.vbs------------------const ADS_NAME_INITTYPE_GC = 3const ADS_NAME_TYPE_1779 = 1const ADS_NAME_TYPE_CANONICAL = 2set inArgs = WScript.Argumentsif (inArgs.Count = 1) then    ' Assume the command line argument is the NDNC (in DN form) to use.    NdncDN = inArgs(0)Else    Wscript.StdOut.Write usage: cscript fixfsmo.vbs NdncDNEnd ifif (NdncDN <> ) then    ' Convert the DN form of the NDNC into DNS dotted form.    Set objTranslator = CreateObject(NameTranslate)    objTranslator.Init ADS_NAME_INITTYPE_GC,     objTranslator.Set ADS_NAME_TYPE_1779, NdncDN    strDomainDNS = objTranslator.Get(ADS_NAME_TYPE_CANONICAL)    strDomainDNS = Left(strDomainDNS, len(strDomainDNS)-1)         Wscript.Echo DNS name:  & strDomainDNS    ' Find a domain controller that hosts this NDNC and that is online.    set objRootDSE = GetObject(LDAP:/ & strDomainDNS & /RootDSE)    strDnsHostName = objRootDSE.Get(dnsHostName)    strDsServiceName = objRootDSE.Get(dsServiceName)    Wscript.Echo Using DC  & strDnsHostName    ' Get the current infrastructure fsmo.    strInfraDN = CN=Infrastructure, & NdncDN    set objInfra = GetObject(LDAP:/ & strInfraDN)    Wscript.Echo infra fsmo is  & objInfra.fsmoroleowner    ' If the current fsmo holder is deleted, set the fsmo holder to this domain controller.    if (InStr(objInfra.fsmoroleowner,  0ADEL:) > 0) then        ' Set the fsmo holder to this domain controller.        objInfra.Put fSMORoleOwner,  strDsServiceName        objInfra.SetInfo        ' Read the fsmo holder back.        set objInfra = GetObject(LDAP:/ & strInfraDN)        Wscript.Echo infra fsmo changed to: & objInfra.fsmoroleowner    End ifEnd if

To determine the infrastructure master for a partition, query the fSMORoleOwner attribute on the infrastructure object under the naming context root in question.For example, query the fSMORoleOwner attribute on the CN=Infrastructure,DC=DomainDnsZones,DC=contoso,DC=com naming context root to determine the infrastructure master for the DC=DomainDnsZones,DC=contoso,DC=com partition. Similarly, query the fSMORoleOwner attribute on the CN=Infrastructure,DC=ForestDnsZones,DC=contoso,DC=com naming context root to determine the infrastructure master for the DC=ForestDnsZones,DC=contoso,DC=com partition.

You can use tools such as the LDP tool, the Active Directory Service Interfaces (ADSI) Edit tool, and the ldifde tool to perform these queries. For example, the following query uses the Idifde tool:

This query returns the infrastructure master role owner for the DC=DomainDnsZones,DC=contoso,DC=com partition to the Infra_DomainDNSZones.ldf file.

Note You can run the Adprep /rodcprep command multiple times without harming the forest. Operations that were completed in earlier executions of the rodcprep command are not repeated.

Back to the top