Discussion Locked

Active Directory Problem

0 helpful
6 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
In my active directory security, I can no longer open my "Domain Security Policy". When I go to open it, I receive a message stating "The specified directory service attribute or value does not exist." Does anyone know if there is a way to re-create the values that are being asked for without having to re-do my entire active directory? I don't have a backup from when the directory was good to restore from, tried searching Microsoft knowledge base, but no help. If anyone could provide any assistance I would greatly appreciate it.

6 replies

by maxwell edison

This is a similar circumstance whose remedy may be the same.

Source:

http://www.jsifaq.com/SUBI/tip4000/rh4072.htm

REMOVE SPACES from the pasted URL.

If you open an Active Directory snap-in and see an unknown object represented by the default Windows icon, attempting to delete it returns:

Active Directory

Windows cannot delete object object name because:
The specified directory service attribute or value does not exist.

If you use ADSIEdit and you see a leaf object with nodata in the Class column, a deletion attempt returns:

adsiedit

The specified directory service attribute or value does not exist.

In the Active Directory Administration Tool (Ldp.exe), you may be able to view the object but not its' attributes. A deletion attempt returns:

Error: Delete: Not allowed on Non-leaf. <66>

If the account that you logged on with only has list contents permissions on the parent object, you will experience the above symptoms.

A member of the local Administrators group on the domain controller can take ownership of the object and grant the required access rights:

1. Open the Active Directory Users and Computers snap-in and navigate to the container that contains the object.

2. Right-click the object, and then press Properties.

3. On the Security tab, press the Advanced button and select the Owner tab.

4. Select the Administrators group, or the administrator account that you are currently logged on with, in the Change Owner dialog and press OK.

5. In the Security dialog, grant Full Control to the account or group.

by henrywi

you have to do a authoritative restore to get your AD working right

for rebooting your machine and pressing F8 select advanced advance troubleshooting and AD restore

This discussion is closed to new replies.