2012 Domain Prep fails in root domain

Question

Hi
We are tryiing to introduce 2012 DCs into our root domain.
The schema has updated fine but the domain prep fails, both on the 2012 server we are trying to promote and whilst running it direct from the infrastructure server itself.
Replication is good and AD itself seems happy enough.   The account has the necessary rights.
Any help gratefully received.
Thanks
The error log contains:
Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is cn=d262aae8-41f7-48ed-9f35-56bbb677573d,cn=Operations,cn=DomainUpdates,cn=System,DC=xxxx,DC=xx,DC=xx.
[2014/12/08:08:32:53.055]
LDAP API ldap_search_s() finished, return code is 0x20
[2014/12/08:08:32:53.055]
Adprep verified the state of operation cn=d262aae8-41f7-48ed9f35-56bbb677573d,cn=Operations,cn=DomainUpdates,cn=System,DC=xxxx,DC=xx,DC=xx.
[Status/Consequence]
The operation has not run or is not currently running. It will be run next.
[2014/12/08:08:32:53.055]
Adprep was about to call the following LDAP API. ldap_modify_s(). The entry to modify is DC=xxxx,DC=xx,DC=xx.
[2014/12/08:08:32:53.055]
LDAP API ldap_modify_s() finished, return code is 0x13
[2014/12/08:08:32:53.070]
Adprep was unable to modify some attributes on object DC=xxxx,DC=xx,DC=xx.
[2014/12/08:08:32:53.070]
Adprep encountered an LDAP error.
Error code: 0x13. Server extended error code: 0x20b5, Server error message: 000020B5: AtrErr: DSID-03152A9F, #1:
    0: 000020B5: DSID-03152A9F, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 9054f (otherWellKnownObjects)
DSID Info:
DSID: 0x181112dd
ldap error = 0x13
NT BUILD: 9600
NT BUILD: 16384
[2014/12/08:08:32:53.086]
Adprep was unable to update domain information.
[Status/Consequence]
Adprep requires access to existing domain-wide information from the infrastructure master in order to complete this operation.

Answer 1

Hi,
If possible,could you please post more detail information about adprep.log?
I noticed that the error indicates the otherWellKnownObjects attribute, it may be related the
Managed Service Accounts container was missing.
In order to troubleshot, please first verify that the Managed Service Accounts container was not exists in the domain.
For more detail information, you could refer to the similar thread:
https://social.technet.microsoft.com/Forums/windowsserver/en-US/1a7f9de4-d201-4ac6-a3e7-e396743c31fa/windows-2008r2-adprep-domainprep-fails?forum=winserverMigration
Regards.
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]