Troubleshooting Tips



 

Domain Settings

  1. When I start ADManager Plus, none of my domains are discovered. It says "No Domain Configuration available". Why?

  2. When I add my domains manually, the Domain Controllers are not resolved. Why?

  3. When I add the Domain Controller, I get an error as "The Servers are not operational". What does it mean?

  4. When I add the Domain Controller, I get an error as "Unable to get domain DNS / FLAT name". What does it mean?

  5. The status column in the domain settings says that the user do not have Admin Privilege?

  6. When I add an additional Domain, I get the error message"License is applied only to "n" Domains. What should I do now?

  7. When I try to install ADManager Plus, I get the error " The InstallShield Engine (iKernel.exe) could not be installed. What should I do?

1. When I start ADManager Plus, none of my domains are discovered. It says "No Domain Configuration available". Why?

 

ADManager Plus, upon starting, discovers the domains from the DNS Server associated with the machine running the product. If no domain details are available in the DNS Server, it shows this message.

Questions

 

2. When I add my domains manually, the Domain Controllers are not resolved. Why?

 

When the DNS associated with the machine running ADManager Plus do not contain the necessary information. You need to add the Domain Controllers manually.

Questions

 

3. When I add the Domain Controller, I get an error as "The Servers are not operational". What does it mean?

 

This error could be due to any of the following reasons:

  1. Domain Controllers (DCs) are down.

  2. Servers not available.

  3. Firewall has been enabled, and port 389 is closed.

  4. Busy - try after some time?

Questions

 

4. When I add the Domain Controller, I get an error as "Unable to get domain DNS / FLAT name". What does it mean?

 

This error could be due to any of the following reasons:

  1. When the specified user name or the password is invalid.

  2. Anonymous login (when no user name and password is provided)

  3. When IP Address of the Domain Controller is specified instead of its name.

Questions

 

5.  The status column in the domain settings says that the user do not have Admin Privilege?

 

This is a warning message to indicate that the specified user do not have administrator privileges i.e, the user is not a member of Domain Admins Group. Hence permissions applicable to Administrator  may not be available to this user.

Questions

 

6.When I add an additional Domain, I get the error message"License is applied only to "n" Domains. What should I do now?

 

This is a warning message to indicate that you are trying to exceed the maximum number of domains that can be added in the purchased license. To add another domain , you must either delete an existing domain or purchase a license for additional domains based on your requirement.  

 

Questions

 

7.When I try to install ADManager Plus, I get the error " The InstallShield Engine (iKernel.exe) could not be installed. What should  I do?

 

This is a warning message to indicate that you do not have appropriate rights/privileges to copy iKernel.exe to the desired folder where you want to install ADManager Plus.

 

Questions

 

Back to Modules

 

Active Directory User Management

  1. While creating an user, I get the following error "Error in setting the Password. The network path not found - Error Code: 80070035"

  2. While creating an user, I get the following error "Error in setting the Password. There is a naming violation - Error Code : 80072037"

  3. While creating/modifying an user, I get the following error "The server is unwilling to process the request - Error Code : 80072035"

  4. While creating an user, I get the following error " Error In Setting Terminal service Properties. The specified user does not exist - Error Code : 525"

  5. I have updated the exchange attributes using ADManager Plus, but the properties are not updated in the Exchange Server yet.

  6. A Legacy mailbox was unexpectedly created.

  7. I am not able to set the Terminal Services properties for the user?

  8. I am getting an error as "The attribute syntax specified to the directory service is invalid - Error Code : 8007200b"?

  9. When I create/modify an user, I get the following error "Error In Creating User. A device attached to the system is not functioning - Error Code : 8007001f "

  10. Email address for user not showing up or not set properly?

  11. Error - The server is unwilling to process the request while setting Password, which did not match password complexity

  12. Error code: 8007052e

  13. Error code: 80070775

  14. Error code: 800708c5               

  15. 5 -Access is denied (Terminal Service / Folder Creation)

  16. No such user matched. Verify the LDAP attribute in search query

  17. Error Code: 80072035

  18. Error Code: 80072030

  19. Error Code:80070005

  20. Error Code: 80072014

  21. Error Code: 80072016

  22. Error Code 35

  23. Error Code: 800704c3

  24. Error Code b7

  25. Error Code :6

  26. Error Code 8007200a

  27. 'License Level Exceeded' error message while adding user(s).

  28. "Error while enabling Lync services for the user" or "Error occurred while enabling Lync Telephony options"

1. While creating an user, I get the following error "Error in setting the Password. The network path not found - Error Code: 80070035"

 

While setting the password for the user, if the target machine could not be contacted, this error is shown. The possible reasons could be:

Questions

 

2. While creating an user, I get the following error "Error in setting the Password. There is a naming violation - Error Code : 80072037"

 

One possible reason for this error could be creation of a user in an invalid container.

Questions

 

3. While creating/modifying an user, I get the following error "The server is unwilling to process the request - Error Code : 80072035"

 

The possible reasons for this error could be:

  1. While setting the password, if the password complexity requirement as defined in the password policy is not met. For example, the password policy might state that the password should be alphanumeric and if the password specified do not comply this, you might get this error.

  2. When you try to remove a non-existing user object from a group.

  3. When your try to remove a user from his/her primary group.

  4. When modifying the SAM Account Name format for multiple users and when more than one user happen to have the same SAM Account Name.

Questions

 

4. While creating an user, I get the following error " Error In Setting Terminal service Properties. The specified user does not exist - Error Code : 525"

 

One possible reason could be that the user or the system account as which the product is run do not have an account in the target domain. Terminal Service properties can only be set if the user account or the system account (applies when ADManager Plus is run as a service) that runs ADManager Plus has an account on the target domain.

 

Questions

 

5. I have updated the exchange attributes using ADManager Plus, but the properties are not updated in the Exchange Server yet.

 

ADManager Plus modifies the exchange properties in the Active Directory. The changes may not immediately reflect in the Exchange Server. It will get updated after some time.

Questions

 

6. Legacy Mailboxes

 

Prerequistes for Exchange 2007

1. 64 bit Edition of ADManager Plus should be installed on a compatible Machine. (You can find the architecture of the existing installation from the "Product.conf" file located at \ManageEngine\ADManager Plus\conf). Download the 64 bit Edition of ADManager Plus from: http://www.manageengine.com/products/ad-manager/download.html


2. To create Mailbox Enabled Users in Exchange 2007, you would require the corresponding version of Exchange Management Console (EMC) in the same machine where ADManager Plus is installed, failing which the legacy Mailbox will be created.


3. If ADManager Plus is running in console mode, then you must log on to the machine as an administrator (exchange administrator).


4. If ADManager Plus is installed as service, kindly configure the service account with administrator (exchange administrator) privilege by following the below procedure,

  • Step 1: Click on Start->run->services.msc
  • Step 2: Locate the service name "Manageengine ADManager Plus"
  • Step 3: Right click->Go to Properties->Log On
  • Step 4: Select "This account" and provide the credentials.
  •  

     

    Prerequisites for Mailbox Creation in Exchange 2010

    1.Windows  PowerShell 2.0 or above should be installed on this machine.

     

    2.TCP port 80 must be open between this machine and the remote Exchange 2010 Server.

     

    3.Remote PowerShell must be enabled for the user account specified in ‘Domain Settings’.


    Questions

     

    7. I am not able to set the Terminal Services properties for the user?

     

    One possible reason could be that the user or the system as which the product is run do not have an account in that domain.

     

    Refer to here for starting ADManager Plus in User or System account.

    Questions

     

    8. I am getting an error as "The attribute syntax specified to the directory service is invalid - Error Code : 8007200b"?

     

    This could happen in the following scenarios:

    1. When modifying multiple users, if you try to remove (or making the value as blank) an non-existing attribute

    2. When adding a user, if you specify a blank value for an attribute.

    Questions

     

    9. When I create/modify an user, I get the following error " A device attached to the system is not functioning - Error Code : 8007001f "

     

    The possible reasons for this error could be:

    1. When creating an user, if the naming attributes, such as Name, Logon Name, SAM Account Name, etc., has some special characters in it.

    2. When modifying an user, if an unacceptable format is chosen for the naming attributes. For example, if the format chosen for the Logon Name is LastName.FirstName.Initials and if the user do not have any one of these attributes specified, this error will occur.

    Questions

     

    10. Email address for user not showing up or not set properly?

     

    The possible reason could be:

    1. Email may Not be set as per Recipient Policy. check whether all ldap attributes in recipient ploicy query are set to specific value.

    2. Check in the user account properties whether you entered the attribute for email. Ex: xyz@company.com. The company should be entered to the users.

    Questions

     

    11. Error-The server is unwilling to process the request while setting Password which not maches to password complexity

     

    The possible reason could be:

     

    You may not have specified or opt for any options in 'Password Complexity' while creating user account.

     

    Ex: There will be options for password complexity like length of password, Characters that can be used or number of bad login attempts etc. You need to select any degree of complexity, ignoring so will throw above error.

    Questions

     

     

    12. Error code: 8007052e

     

      The reason is, the Supplied credentials are invalid.

     

    13. Error code: 80070775

     

      Reason: The referenced account is currently locked out and may not be logged on.

     

    14. Error code: 800708c5  

        

      Reason: The password does not meet the password policy requirements. Check the minimum password length, password complexity and  password history requirements.

     

    Questions

     

    14. 5 -Access is denied (Terminal Service / Folder Creation)

     

        Reasons:

    1. User does not have rights to create a homefolder.

    2. Users do not have access over terminal services.   

    Questions

     

    16. No such user matched. Verify the LDAP attribute in search query

     

    Reason: No Users in AD matches with the criteria provided by you. Try choosing the correct matching attributes by checking with the query provided in the "Match criteria for Users in AD",this is obtained by clicking on "Update in AD" button and expanding "Select Attributes" box. Also, ensure that the help desk technician has rights/privileges in that particular OU.

     

    Questions

     

    17. Error Code 80072035 : Error In Setting Attributes,The server is unwilling to process the request.

     

    Reason: The primary group specified in User Creation has been moved or deleted.
     

    Questions

     

    18. Error Code : 80072030 : Error In Setting Attributes,The server is unwilling to process the request.

     

    Reason: The primary group/container specified in User Template that was selected during User Creation has been moved or deleted. (You are trying create a child object inside an OU, but that parent OU does not exist)
     

    Questions

    19. Error Code : 80070005 - Access Denied

     

    Reason: The User may be trying to access an object to which he has no permissions granted.
     

    Questions

     

    20. Error Code : 80072014 - Error In Setting Attributes, The requested operation did not satisfy one or more constraints associated with the class of the object

     

    Reason: You may encounter this type of error when the CSV file you are using to import values, does not satisfy the conditions associated with the attribute.
     

    Questions

     

    21. Error Code : 80072016 - Error In Setting Attributes, The directory service cannot perform the requested operation on the RDN attribute of an object

     

    Reason: You may encounter this type of error if any of the LDAP headers in the CSV file are mentioned inappropriately.
     

    Questions

     

    22. Error Code 35 : Error in Creating Terminal Services Home Directory/ Error in Creating Home Directory,The network path was not found. 

     

    Reason: The remote server path might not be accessible.

    Questions

     

    23. Error Code: 800704c3 - Error While accessing User in Setting Account Properties

     

    Reason:Multiple connections to a server or shared resource by the same user, using more than one user name, is not allowed. Disconnect
    all previous connections to the server or shared resource and try again.

     

    Questions

     

    24. Error Code b7 : Error in Creating Profile Path

     

    Reason: There may be a File/Folder that already exists with the same name.

     

    Questions

     

    25. "When i delete the Remote Profile folder, it throws ".Unable to Delete the profile-The handle is invalid - Error code:6."

     

    Reason : There might not be any inherited permission on the folder. Check whether the particular user has delete permissions on that folder. This can happen even in a  condition when the folder is currently  in use.

     

    Questions

     

    26. When I try to modify users, I get an error message" Unable to modify the user. Error: The specified directory service attribute pr value does not exist. Error code : 8007200a" What should I do now?

     

    Reason: The possible reason for this error is due to incorrect LDAP attributes or misplaced commas in the imported CSV file. Please check the LDAP attribute and also for any misplaced commas  in the CSV file which you are importing.

     

    Questions

     

     

    27. While adding user(s), I get the error message: 'License Level Exceeded'. What should I do now?

     

    This message indicates that you have reached the limit for the maximum number of users permitted as per your license. To add more user(s), you should upgrade your license.

     

    Questions


     

    28. While creating new user(s) along with Lync Telephony options, either of these error messages is displayed: "Error while enabling Lync services for the user" or "Error occurred while enabling Lync Telephony options". What could be the possible reasons?

     

    Mentioned below are the possible reasons for the above errors. Rectifying them would help you in avoiding these errors:

     

    Questions


     

    Active Directory Reports

    1. When I specify the details and generate the report, it says "No Reports available" or incomplete data

    2. AD Reports shows an object that do not exist in the Active Directory?

    1. When I specify the details and generate the report, it says "No Reports available" or incomplete data

     

    It could be because of any of the following reasons:

    1. When ADManager Plus could not contact the Domain Controller as it is not operational or due to network unavailability.

    2. In case of multiple Domain Controllers, when the data is not replicated in all the Domain Controllers.

    3. The LastLogonTime that is used to determine the inactive users and computers is not replicated in all the Domain Controllers. Hence, you need to specify all the Domain Controllers in the Domain Settings to enable ADManager Plus to retrieve the data from all the Domain Controllers.

    4. When the password policy is not set (i.e., Max Password Age is set to zero), the Password Expired Users report and Soon to Password Expiry users report will not show any data.

    5. For time-based reports like inactive users, inactive computers, recently logged on users, etc., the date and time of the machine running ADManager Plus should be in sync with the domain controllers.

    6. Originally there would have been no data available in the corresponding Report.

    Questions

    2. AD Reports shows an object that do not exist in the Active Directory?

     

    This mismatch could occur when the data is not synchronized with the Active Directory. The data synchronization with the Active Directory happens everyday at 1.00 hrs.  If ADManager Plus is not running at that time, you can initiate the data synchronization manually by clicking the icon of that domain from the Domain Settings.

     

     

    3.Error Code : 80070035- Error in getting Shares. The network path was not found

       Reason - The remote server path might not be accessible.

     

    Questions

     

    Back to Modules

    Active Directory Delegation

     

    1. When a role is delegated, I get the error as "Permission Denied"

     

    One possible reason could be, the user or system as which the product is started do not have necessary privileges to perform this operation.

     

    Refer to here for starting ADManager Plus in User or System account.

     

    2. I am not able to login through my account!

     

    The following are the possible reasons for that:

    1. User Name/ Password Wrong
    2. Log on to restriction.

    3. Account Disabled / Locked out / Expired

    4. User must change password on next logon checked.

     

     

    Back to Modules

    File server management

     

    1. I tried to access a folder and the folder is empty.

       

      The reasons could be the folder is empty or you do not have permission to list contents of this folder.

       

    2. When I try to set permissions on a folder, I get the following error message "Access denied; cannot set permissions for the folder";

       

      The reason could be you do not have permissions to alter permissions on that particular folder.

       

    3. I encountered the following error message while trying to modify permissions on a folder "Error occurred in modifying permissions for one or more folders"    

       

      The reason could be you do not have permissions to alter permissions on one of the folders or subfolders.  

       

    4. I encountered the following error message while trying to modify permissions on a folder "One or more of the permissions to be applied already exists"    

       

      The reason could be one of the permissions you are trying to apply has already been applied and is currently effective.

       

    5. I encountered the following error message while trying to remove permissions from a folder "One or more of the permissions to be applied already exists";    

       

      The reason could be one of the permissions you are trying to remove has already been denied and is currently effective.

       

    Back to Modules



    Copyright © 2014, ZOHO Corp.All Rights Reserved.