Exception: The RPC server is unavailable.
Adprep could not retrieve data from the server 2008r2-01.adatum.com through Windows Management Instrumentation (WMI).
Additionally, the C:\windows\debug\adprep\logs\<date/time>-test\adprep.log file shows the following:
[2012/07/24:09:50:21.734] Adprep failed while performing Exchange schema check. [Status/Consequence] The Active Directory Domain Services schema is not upgraded. [User Action] Check the log file ADPrep.log in the C:\Windows\debug\adprep\logs\20120724094831-test directory for possible cause of failure. [2012/07/24:09:50:21.734] Adprep encountered a Win32 error. Error code: 0x6ba Error message: The RPC server is unavailable. DSID Info: DSID: 0x1810012a HRESULT = 0x800706ba NT BUILD: 8517
Cause 1The existing domain controller or controllers are missing the SeServiceLogonRight ("Logon as a service") right for the NETWORK SERVICE account.
Cause 2The WMI and DCOM protocols are blocked between the computer that is running Windows Server 2012 and the existing domain controller or controllers.
Resolution 1Add the NETWORK SERVICE as part of the SeServiceLogonRight ("Logon as a service") right back to the Default Domain Controllers policy. By default, the service exists there in Windows Server 2003 domains. Make sure that no other policy is removing the service if the service is already present in the Default Domain Controllers policy. By default, the service is set by local security policy on all servers in Windows Server 2008 and later versions and is no longer part of Default Domain Controllers policy.
Resolution 2Examine Windows Firewall on the existing domain controllers, and make sure that the following rules are enabled. (By default, these rules are enabled on domain controllers.)
- Windows Management Instrumentation (WMI-In)
- Windows Management Instrumentation (DCOM-In)
- Windows Management Instrumentation (Async-In)
- TCP/IP - port 135 - RPC/DCOM/WMI endpoint mapper (RpcSs)
- TCP/IP - all ports - Asynchronous callback WMI client (Unsecapp)
- TCP/IP - all ports - Windows Management Instrumentation service (Wmimgmt)
The adprep.exe /forestprep command also runs prerequisite checking.
The missing SeServiceLogonRight right issue can be caused when administrators have previously run the dcpromo /forceremoval command in Windows Server 2003.
Article ID: 2737560 - Last Review: Oct 4, 2012 - Revision: 1