Completing the SBS 2011 Standard setup after a failure during the promotion to a domain controller

Article translations Article translations
Close Close
Article ID: 2536941 - View products that this article applies to.
Expand all | Collapse all

Symptoms

 

Under certain environmental circumstances, the SBS setup task that promotes the SBS 2011 Standard server to be a domain controller may fail. This article will focus on how to recognize this situation, provide guidance to isolate the underlying condition and then provide remediation steps to allow the SBS setup process to continue.

These types of failures are more likely to occur in a domain join/migration installation than in a new domain installation.

The SBS setup will handle a failure in the DCPROMO or JOIN_DPROMO task as fatal and stop the SBS setup process from continuing. The SBS setup process will return you to a desktop and display the following message:

  Failed DCPROMO

If you view the error log it says:

FATAL: DcPromo_JoinDomain: The server was not promoted to a domain controller.

Furthermore, the SBSSetup log in C:\Program Files\Windows Small Business Server\Logs will contain text similar to this:

[2512] 110303.104131.9648: Task: Running Task(DcPromo_JoinDomain) with Type(Microsoft.WindowsServerSolutions.Setup.Tasks.DCPromoJoinDomainTask) and Assembly(SBSSetupTasks.dll).
[2512] 110303.104132.1250: Task: Skipping setting the password for the built-in account since the property bag is missing the password field.
[2512] 110303.104132.1259: Task: dcpromo will be called with args: /unattend:"C:\Users\Administrator\AppData\Local\Temp\tmpBDE1.tmp"
[2512] 110303.104232.1279: Task: DCPromo is starting...
[2512] 110303.104255.5556: Setup: ErrorCode is ExitBadSafeModePwd, (42)
[2512] 110303.104255.5605: Task: Task status: Success:False, Reboot:False, RebootNow:False, Continue:False, Warning:False, Expose:False
[2512] 110303.104255.5791: Task: Error: DCPromo failed. You can find the output of dcpromo at "C:\Program Files\Windows Small Business Server\Logs\DCPromo_110303.104131.log"
[2512] 110303.104255.5800: Task: DCPromo failed, need to retry. Remaining retry count is 2
[2512] 110303.104355.5800: Task: DCPromo is starting...
[2512] 110303.104359.5478: Setup: ErrorCode is ExitUnableReadDomainList, (26)
[2512] 110303.104359.5478: Task: Task status: Success:False, Reboot:False, RebootNow:False, Continue:False, Warning:False, Expose:False
[2512] 110303.104359.5478: Task: Error: DCPromo failed. You can find the output of dcpromo at "C:\Program Files\Windows Small Business Server\Logs\DCPromo_110303.104131.log"
[2512] 110303.104359.5478: Task: DCPromo failed, need to retry. Remaining retry count is 1
[2512] 110303.104459.5488: Task: DCPromo is starting...
[2512] 110303.104503.2519: Setup: ErrorCode is ExitUnableReadDomainList, (26)
[2512] 110303.104503.2519: Task: Task status: Success:False, Reboot:False, RebootNow:False, Continue:False, Warning:False, Expose:False
[2512] 110303.104503.2519: Task: Error: DCPromo failed. You can find the output of dcpromo at "C:\Program Files\Windows Small Business Server\Logs\DCPromo_110303.104131.log"
[2512] 110303.104503.2519: Task: DCPromo failed, need to retry. Remaining retry count is 0
[2512] 110303.104503.2675: Task: Deleted the secure registry key.
[2512] 110303.104503.2753: Task: In Task DcPromo_JoinDomain: The server was not promoted to a domain controller.
[2512] 110303.104503.2763: TaskManagement: In TaskScheduler.ReportStatus(): Task("DcPromo_JoinDomain") requested the engine stop processing Tasks!  Completed=True, Success=False
[2512] 110303.104503.2773: Setup: Task DcPromo_JoinDomain failed.
[2512] 110303.104503.2773: Task: Task ("DcPromo_JoinDomain") execution complete.

(Note: The name of the task could be DcPromo or DcPromo_JoinDomain. Also the ErrorCode value may be different)

 

Cause

 

There are a number of causes that could result in the error: The server was not promoted to a domain controller

To determine the cause, search the SBSSetup.log from top to bottom, for “Setup: ErrorCode is”. Focus on the first instance of the ErrorCode as the cause of the error.  Ignore the error codes from the second and third tries.

In the example SBSsetup.log above, you would focus on Setup: ErrorCode is ExitBadSafeModePwd, (42) as the cause of the error and not Setup: ErrorCode is ExitUnableReadDomainList, (26).

For a full list of Active Directory Installation error codes, please see:

http://technet.microsoft.com/en-us/library/cc754937(WS.10).aspx

You cannot get more details on the error by looking in the dcpromo log referenced in the SBSSetup.log as it will only keep the log for the third attempt and we are only interested on the first failure.

To further diagnose the failure, you would need to check the following  logs:

                C:\windows\debug\dcpromo.log
                C:\windows\debug\dcpromoui.001.log

You will have multiple versions of dcpromoui.nnn.log, you are looking for the one that matches the first attempt by the SBSSetup, usually dcpromoui.001.log.

When looking in the DcPromo.log, always search for “[ERROR]” from top to bottom, once you find the line, for example: “04/08/2011 10:19:41 [ERROR] Failed to install to Directory Service (5)”, then concentrate on the error code in the (), on this case 5, which translates to ACCESS_DENIED.

Resolution

 

The solution you need to follow will depend on the root cause of the failure. This article will focus on solutions for common errors that have been reported and will not provide a solution for every Active Directory Installation error code.

First Error in SBSSetup log: Setup: ErrorCode is ExitBadSafeModePwd, (42)

This basically indicates that the account being used in the answer file has a weak password whereas the password policy of the domain requires a strong password.

Strong passwords must meet the following minimum requirements:

        ·         Passwords cannot contain the user's account name or parts of the user's full name that exceed two consecutive characters.
·         Passwords must be at least six characters in length.
·         Passwords must contain characters from three of the following four categories:
   o   English uppercase characters (A through Z).
      o   English lowercase characters (a through z).
      o   Base 10 digits (0 through 9).
      o   Non-alphabetic characters (for example, !, $, #, %).

The solution in this instance is to change the password for the account being used in the source domain controller to a strong password before resuming setup. In this scenario, you can resume the SBS setup by launching SBSSetup.Exe from C:\Program Files\Windows Small Business Server\Bin.

If you are experiencing this error in a clean, new domain installation, then the issue is most likely related to the OEM pre-installation solution being used.  It may not be designed to support Small Business Server 2011 Standard and you should attempt to install Small Business Server 2011 Standard without the OEM pre-installation solution.

For this issue or other source environment issues, once the root cause is resolved, do not run dcpromo manually to promote the SBS 2011 Standard server to a domain controller. In this scenario, you can resume the SBS setup by launching SBSSetup.Exe from C:\Program Files\Windows Small Business Server\Bin.

First Error in SBSSetup log: Setup: ErrorCode is ExitPromoDemotFailedNeedReboot, (53)

This is a generic error that can be caused by a number of factors. To diagnose the issue open the following 2 logs:

                C:\windows\debug\dcpromo.log
                C:\windows\debug\dcpromoui.001.log

A common root cause for this issue is if the account used for the migration does not have the Trusted for Delegation active directory user right.

If that is the case, you will see the following in the logs.

Dcpromo.log:
04/08/2011 10:19:41 [ERROR] Failed to install to Directory Service (5)

Dcpromoui.001.log:
dcpromoui C10.67C 068F 10:19:51.350       OperationStatus      : 0x5 !0 => error
dcpromoui C10.67C 0690 10:19:51.350       DisplayString        : The Active Directory Domain Services Installation Wizard was unable to convert the computer account SERVER$ to an Active Directory Domain Controller account.

By default, Administrators have the right assigned to them in the Default Domain Controllers group policy.  Either the group policy is not set correctly, not applying as expected or the account is not a member of the right groups.

For more information about this issue:
2002413 DCPROMO fails with error "Access is denied" if the user performing the promotion is not granted the "trusted for delegation" user right
http://support.microsoft.com/kb/2002413

Once the cause of the problem is corrected on the source domain, make sure you restart the new server, and then resume the SBS setup by launching SBSSetup.Exe from C:\Program Files\Windows Small Business Server\Bin.

First Error in SBSSetup log: Setup: ErrorCode is ExitInvalidArgument, (77)

If your server is already a domain controller, you may receive error ExitInvalidArgument, (77).  If that is the case, run dcpromo again to demote the SBS 2011 Standard server to a member server.  You should be prompted to reboot the SBS 2011 Standard server.  After the reboot, resume the SBS setup by launching SBSSetup.Exe from C:\Program Files\Windows Small Business Server\Bin.

Other Errors

For other Active Directory Installation error codes not described in this article

1.       Look up the description here:

http://technet.microsoft.com/en-us/library/cc754937(WS.10).aspx

2.       Attempt to resolve the root cause by reviewing the available Dcpromo logs in the SBS Logs directory and in the c:\windows\debug folder.

3.       Once resolved, do not run dcpromo manually to promote the SBS 2011 Standard server to a domain controller.

4.       Resume the SBS setup by launching SBSSetup.Exe from C:\Program Files\Windows Small Business Server\Bin.

Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use for other considerations.

Properties

Article ID: 2536941 - Last Review: April 26, 2011 - Revision: 5.0
APPLIES TO
  • Windows Small Business Server 2011 Standard
Keywords: 
KB2536941

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com