Microsoft KB Archive/329706

= &quot;Failed to Create the GPO&quot; Error Message When You Try to Run Dcpromo =

Article ID: 329706

Article Last Modified on 10/30/2006

-

APPLIES TO


 * Microsoft Windows 2000 Server

-



This article was previously published under Q329706



SYMPTOMS
When you try to run Active Directory Installation Wizard (Dcpromo.exe) to promote the first domain controller that is in a new forest, you may receive the following error message:

Failed to create the GPO for the domain.

An error that is similar to the following may also be added to the Cpromo.log file:

Setting the LSA policy information 02/29 17:44:14 [INFO] Error - Failed to create the GPO for the domain .(1208) Creation of GPO failed with 1208



CAUSE
This issue may occur if the security database Secedit.sdb is corrupted.



RESOLUTION
To resolve this issue, repair the database, delete the .log files, and then run Dcpromo.exe. To do so, follow these steps:
 * 1) Click Start, and then click Run.
 * 2) In the Open box, type the following, and then press ENTER:

esentutl /p \security\database\secedit.sdb /v /x
 * 1) Click Start, and then click Run.
 * 2) In the Open box, type  \security, and then press ENTER.
 * 3) Delete the transaction log files Edb.log and Edb0000x.log.
 * 4) Run Dcpromo.exe.

NOTE: Microsoft recommends that you run a full server backup after you repair the database.



MORE INFORMATION
For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

238369 HOW TO: Promote and Demote Domain Controllers in Windows 2000

Keywords: kberrmsg kbprb KB329706

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.