Microsoft KB Archive/907352

= You receive a &quot;constraint violation occurred&quot; error message when you assign an IPsec policy on a Windows Server 2003-based computer =

Article ID: 907352

Article Last Modified on 11/1/2006

-

APPLIES TO


 * Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
 * Microsoft Windows Server 2003, Standard Edition (32-bit x86)
 * Microsoft Windows Server 2003, Web Edition

-





SYMPTOMS
Consider the following scenario. You create an organizational unit (OU) in the Active Directory directory service on a Microsoft Windows Server 2003-based computer. Then, you try to assign an Internet Protocol security (IPsec) policy to the Group Policy object (GPO) of the new OU before this OU is fully replicated. In this scenario, you receive the following error message:

A constraint violation occurred.

This symptom occurs when you are working on a domain controller that is not in the same domain as the primary domain controller (PDC) emulator. Therefore, replication is not immediate.



CAUSE
By default, the Group Policy Object Editor snap-in connects to the PDC emulator when the Active Directory Users and Computers snap-in connects to the closest domain controller. In this case, the closest domain controller is the local computer.



WORKAROUND
To work around this problem, make sure that the Active Directory Users and Computers snap-in and the Group Policy Object Editor snap-in connect to the same domain controller.



Steps to reproduce the problem

 * 1) Set up a Windows Server 2003-based domain controller. Name this domain controller &quot; DC1.&quot;
 * 2) Set up a second Windows Server 2003-based domain controller. Name this domain controller &quot;DC2.&quot; Make sure that DC2 is in the same domain as DC1.
 * 3) Log on to DC2, and then start the Active Directory Users and Computers snap-in.
 * 4) Create a custom OU.
 * 5) Select the properties of this OU to change the Group Policy settings.
 * 6) Modify the GPO.
 * 7) Create a new IPsec policy, and then try to assign this policy. You receive the error message that is mentioned in the &quot;Symptoms&quot; section.

Keywords: kbtshoot kbprb KB907352

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.