System State backups of a Windows 2000 domain controller to tape using the Active Directory Recovery Agent (ADRA) option fails with access denied error when the active directory object has special character like " in its name.

Article:TECH58044  |  Created: 2008-01-26  |  Updated: 2011-04-13  |  Article URL http://www.symantec.com/docs/TECH58044
Article Type
Technical Solution

Product(s)

Environment

Problem



System State backups of a Windows 2000 domain controller to tape using the Active Directory Recovery Agent (ADRA) option fails with access denied error when the active directory object has special character like " in its name.


Error



Access denied to directory Active Directory\DC=win2kdc\CN=Microsoft Exchange System Objects\CN=test "r" folder\.
Directory \\Win2KDC\System?State\Microsoft Active Directory\Active Directory\DC=win2kdc\CN=Microsoft Exchange System Objects\CN=test "r" folder\ was not found, or could not be accessed.

Solution



Backups of the system state of a Windows 2000 domain controller to tape using the ADRA option may fail with the above error when an Active Directory (AD) object has special character like " present in its name.

The backup  fails because of the backslash that gets added in the common name (CN) for the AD object. The CN name of the object can be verified using the ADSIEDIT tool. (Figure 1) .

Figure 1:



 


Please refer to the following Microsoft article for more information on how to use the ADSIEDIT tool.

Adsiedit Overview



Workaround:

Rename the AD object such that it does not contain the special character.





Supplemental Materials

Value1257593
DescriptionAD GRT: Backup of System State of a Windows 2000 DC fails if an AD object has special characters in its CN


Legacy ID



300556


Article URL http://www.symantec.com/docs/TECH58044


Terms of use for this information are found in Legal Notices