"Failed to Create the GPO" Error Message When You Try to Run Dcpromo (329706)


The information in this article applies to:

  • Microsoft Windows 2000 Server
This article was previously published under Q329706

SYMPTOMS

When you try to run Active Directory Installation Wizard (Dcpromo.exe) to promote the first domain controller that is in a new forest, you may receive the following error message:
Failed to create the GPO for the domain domain_name.
An error that is similar to the following may also be added to the Cpromo.log file:
Setting the LSA policy information 02/29 17:44:14 [INFO] Error - Failed to create the GPO for the domain domain_name.(1208) Creation of GPO failed with 1208

CAUSE

This issue may occur if the security database Secedit.sdb is corrupted.

RESOLUTION

To resolve this issue, repair the database, delete the .log files, and then run Dcpromo.exe. To do so, follow these steps:
  1. Click Start, and then click Run.
  2. In the Open box, type the following, and then press ENTER:
    esentutl /p systemroot\security\database\secedit.sdb /v /x
  3. Click Start, and then click Run.
  4. In the Open box, type systemroot\security, and then press ENTER.
  5. Delete the transaction log files Edb.log and Edb0000x.log.
  6. Run Dcpromo.exe.
NOTE: Microsoft recommends that you run a full server backup after you repair the database.

MORE INFORMATION

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

238369 HOW TO: Promote and Demote Domain Controllers in Windows 2000

Modification Type:MinorLast Reviewed:4/29/2003
Keywords:kberrmsg kbprb KB329706
©2002 Microsoft Corporation. All rights reserved.