Register Internet Authentication Service in Active Directory Fails

[Guest cbtg2006]

I've come across an odd issue when trying to publish IAS in AD. I've

tried three methods of doing it.

 

1) Via IAS MMC Snap-In. I receive the error:

 

IAS Error:

The task was not completed. You may not have sufficient privileges in

the xxx.dom domain to perform this task.

Please make sure that you have appropriate privileges inthe domain to

perform this task or check with Network Admin.

 

2) Via AD Users & Computers, adding the server to the 'RAS and IAS

Servers' group. I get the following error:

 

The following Active Directory error occurred. The requested object

has a non-unique identifier and cannot be retrieved.

 

3) Via netsh, and I receive the following error:

 

netsh ras add registeredserver xxx.dom srvName

 

Registration FAILED:

Remote Access Server: srvName

Domain: xxx.dom

 

The server is unwilling to process the request.

 

 

 

The server in question holds all FSMO roles. The account being used is

a member of Enterprise Admins group.

 

I've tried doing this on another box on the domain and it works

without issue. I've also tried re-installing IAS on the box in

question and the issue still exists.

 

Any help greatly appreciated!

[Guest Meinolf Weber]

Re: Register Internet Authentication Service in Active Directory Fails

 

Hello cbtg2006,

 

Is the server built from an image or complete fresh installed?

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

> I've come across an odd issue when trying to publish IAS in AD. I've

> tried three methods of doing it.

>

> 1) Via IAS MMC Snap-In. I receive the error:

>

> IAS Error:

> The task was not completed. You may not have sufficient privileges in

> the xxx.dom domain to perform this task.

> Please make sure that you have appropriate privileges inthe domain to

> perform this task or check with Network Admin.

> 2) Via AD Users & Computers, adding the server to the 'RAS and IAS

> Servers' group. I get the following error:

>

> The following Active Directory error occurred. The requested object

> has a non-unique identifier and cannot be retrieved.

>

> 3) Via netsh, and I receive the following error:

>

> netsh ras add registeredserver xxx.dom srvName

>

> Registration FAILED:

> Remote Access Server: srvName

> Domain: xxx.dom

> The server is unwilling to process the request.

>

> The server in question holds all FSMO roles. The account being used is

> a member of Enterprise Admins group.

>

> I've tried doing this on another box on the domain and it works

> without issue. I've also tried re-installing IAS on the box in

> question and the issue still exists.

>

> Any help greatly appreciated!

>

[Guest cbtg2006]

Re: Register Internet Authentication Service in Active DirectoryFails

 

Re: Register Internet Authentication Service in Active DirectoryFails

 

Hello Meinolf,

 

The server is a fresh install, Windows Server 2003 R2 SP2 x64.

 

Regards,

 

-Chris

 

 

On Oct 8, 8:54 am, Meinolf Weber <meiweb(nospam)@gmx.de> wrote:

> Hello cbtg2006,

>

> Is the server built from an image or complete fresh installed?

>

> Best regards

>

> Meinolf Weber

> Disclaimer: This posting is provided "AS IS" with no warranties, and confers

> no rights.

> ** Please do NOT email, only reply to Newsgroups

> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm

>

> > I've come across an odd issue when trying to publish IAS in AD. I've

> > tried three methods of doing it.

>

> > 1) Via IAS MMC Snap-In. I receive the error:

>

> > IAS Error:

> > The task was not completed. You may not have sufficient privileges in

> > the xxx.dom domain to perform this task.

> > Please make sure that you have appropriate privileges inthe domain to

> > perform this task or check with Network Admin.

> > 2) Via AD Users & Computers, adding the server to the 'RAS and IAS

> > Servers' group. I get the following error:

>

> > The following Active Directory error occurred. The requested object

> > has a non-unique identifier and cannot be retrieved.

>

> > 3) Via netsh, and I receive the following error:

>

> > netsh ras add registeredserver xxx.dom srvName

>

> > Registration FAILED:

> > Remote Access Server:  srvName

> > Domain:               xxx.dom

> > The server is unwilling to process the request.

>

> > The server in question holds all FSMO roles. The account being used is

> > a member of Enterprise Admins group.

>

> > I've tried doing this on another box on the domain and it works

> > without issue. I've also tried re-installing IAS on the box in

> > question and the issue still exists.

>

> > Any help greatly appreciated!

[Guest Meinolf Weber]

Re: Register Internet Authentication Service in Active Directory Fails

 

Hello cbtg2006,

 

Any errors in the event viewer about this?

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

> The requested object has a non-unique identifier and cannot be

> retrieved

>

[Guest Meinolf Weber]

Re: Register Internet Authentication Service in Active Directory Fails

 

Hello cbtg2006,

 

Do you have any replication problems between your DC's or was there a crash

or restore of DC?

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

> The requested object has a non-unique identifier and cannot be

> retrieved

>

[Guest cbtg2006]

Re: Register Internet Authentication Service in Active DirectoryFails

 

Re: Register Internet Authentication Service in Active DirectoryFails

 

Hello Meinolf,

 

Was my first port of call.... unfortunately there are no errors at

all, let alone IAS related errors.

 

Regards,

 

-Chris

 

 

On Oct 8, 9:20 am, Meinolf Weber <meiweb(nospam)@gmx.de> wrote:

> Hello cbtg2006,

>

> Any errors in the event viewer about this?

>

> Best regards

>

> Meinolf Weber

> Disclaimer: This posting is provided "AS IS" with no warranties, and confers

> no rights.

> ** Please do NOT email, only reply to Newsgroups

> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm

>

> > The requested object has a non-unique identifier and cannot be

> > retrieved

[Guest cbtg2006]

Re: Register Internet Authentication Service in Active DirectoryFails

 

Re: Register Internet Authentication Service in Active DirectoryFails

 

Hello Meinolf,

 

There are no replication issues on this DC, no crash/restore either.

 

Regards,

 

-Chirs

 

On Oct 8, 9:21 am, Meinolf Weber <meiweb(nospam)@gmx.de> wrote:

> Hello cbtg2006,

>

> Do you have any replication problems between your DC's or was there a crash

> or restore of DC?

>

> Best regards

>

> Meinolf Weber

> Disclaimer: This posting is provided "AS IS" with no warranties, and confers

> no rights.

> ** Please do NOT email, only reply to Newsgroups

> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm

>

> > The requested object has a non-unique identifier and cannot be

> > retrieved

[Guest cbtg2006]

Re: Register Internet Authentication Service in Active DirectoryFails

 

Re: Register Internet Authentication Service in Active DirectoryFails

 

This was resolved eventually by demoting a re-promoting the affected

Domain Controller.

 

 

On Oct 8, 9:28 am, cbtg2006 <chrismbradf...@gmail.com> wrote:

> Hello Meinolf,

>

> There are no replication issues on this DC, no crash/restore either.

>

> Regards,

>

> -Chirs

>

> On Oct 8, 9:21 am, Meinolf Weber <meiweb(nospam)@gmx.de> wrote:

>

> > Hello cbtg2006,

>

> > Do you have any replication problems between your DC's or was there a crash

> > or restore of DC?

>

> > Best regards

>

> > Meinolf Weber

> > Disclaimer: This posting is provided "AS IS" with no warranties, and confers

> > no rights.

> > ** Please do NOT email, only reply to Newsgroups

> > ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm

>

> > > The requested object has a non-unique identifier and cannot be

> > > retrieved

[Guest Meinolf Weber]

Re: Register Internet Authentication Service in Active Directory Fails

 

Hello cbtg2006,

 

Thanks for the feedback. Nice to hear that you solved it.

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

> This was resolved eventually by demoting a re-promoting the affected

> Domain Controller.

>

> On Oct 8, 9:28 am, cbtg2006 <chrismbradf...@gmail.com> wrote:

>

>> Hello Meinolf,

>>

>> There are no replication issues on this DC, no crash/restore either.

>>

>> Regards,

>>

>> -Chirs

>>

>> On Oct 8, 9:21 am, Meinolf Weber <meiweb(nospam)@gmx.de> wrote:

>>

>>> Hello cbtg2006,

>>>

>>> Do you have any replication problems between your DC's or was there

>>> a crash or restore of DC?

>>>

>>> Best regards

>>>

>>> Meinolf Weber

>>> Disclaimer: This posting is provided "AS IS" with no warranties, and

>>> confers

>>> no rights.

>>> ** Please do NOT email, only reply to Newsgroups

>>> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm

>>>> The requested object has a non-unique identifier and cannot be

>>>> retrieved

>>>>