Constraint violation 0x8007202F running AdConfig /enableGPSecurity

Article translations Article translations
Close Close
Article ID: 960920 - View products that this article applies to.
Expand all | Collapse all
Source: Microsoft Support

RAPID PUBLISHING

RAPID PUBLISHING ARTICLES PROVIDE INFORMATION DIRECTLY FROM WITHIN THE MICROSOFT SUPPORT ORGANIZATION. THE INFORMATION CONTAINED HEREIN IS CREATED IN RESPONSE TO EMERGING OR UNIQUE TOPICS, OR IS INTENDED SUPPLEMENT OTHER KNOWLEDGE BASE INFORMATION.

Symptom



Consider the following scenario: The System Center Mobile Device Manager (SCMDM) administrator is a member of the Domain Admin group. The Domain Admin group is then removed from the Administrators group in the domain being targeted for configuring Active Directory for SCMDM.

 

When you run Adconfig /enableGPSecurity:<instancename>, the following error will occur.

Error: A constraint violation occurred (Exception from HRESULT: 0x8007202F)

Cause



This error translates to ERROR_DS_CONSTRAINT_VIOLATION and can occur if the user running the command is not a member of the Domain Admin group, or can be due to other improper Active Directory configuration, such as removing the Domain Admin group from the Administrators group in the domain being targeted by ADConfig.exe.

Resolution



Removing the Domain Admin group from the Administrators group in the domain is not a supported configuration. The Domain Admin group must be a member of the Administrators group in the domain targeted for SCMDM AD configuration.

 

Add the Domain Admin group to the Administrators group in the targeted domain. The user will be required to log off and then log on again to the computer for this change to take effect.

DISCLAIMER

MICROSOFT AND/OR ITS SUPPLIERS MAKE NO REPRESENTATIONS OR WARRANTIES ABOUT THE SUITABILITY, RELIABILITY OR ACCURACY OF THE INFORMATION CONTAINED IN THE DOCUMENTS AND RELATED GRAPHICS PUBLISHED ON THIS WEBSITE (THE “MATERIALS”) FOR ANY PURPOSE. THE MATERIALS MAY INCLUDE TECHNICAL INACCURACIES OR TYPOGRAPHICAL ERRORS AND MAY BE REVISED AT ANY TIME WITHOUT NOTICE.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, MICROSOFT AND/OR ITS SUPPLIERS DISCLAIM AND EXCLUDE ALL REPRESENTATIONS, WARRANTIES, AND CONDITIONS WHETHER EXPRESS, IMPLIED OR STATUTORY, INCLUDING BUT NOT LIMITED TO REPRESENTATIONS, WARRANTIES, OR CONDITIONS OF TITLE, NON INFRINGEMENT, SATISFACTORY CONDITION OR QUALITY, MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, WITH RESPECT TO THE MATERIALS.

Properties

Article ID: 960920 - Last Review: December 6, 2008 - Revision: 1.0
APPLIES TO
  • Microsoft System Center Mobile Device Manager 2008
Keywords: 
kbnomt kbrapidpub KB960920

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com