Register Internet Authentication Service in Active Directory Fails

I've come across an odd issue when trying to publish IAS in AD. I've
tried three methods of doing it.

1) Via IAS MMC Snap-In. I receive the error:

IAS Error:
The task was not completed. You may not have sufficient privileges in
the xxx.dom domain to perform this task.
Please make sure that you have appropriate privileges inthe domain to
perform this task or check with Network Admin.

2) Via AD Users & Computers, adding the server to the 'RAS and IAS
Servers' group. I get the following error:

The following Active Directory error occurred. The requested object
has a non-unique identifier and cannot be retrieved.

3) Via netsh, and I receive the following error:

netsh ras add registeredserver xxx.dom srvName

Registration FAILED:
Remote Access Server: srvName
Domain: xxx.dom

The server is unwilling to process the request.



The server in question holds all FSMO roles. The account being used is
a member of Enterprise Admins group.

I've tried doing this on another box on the domain and it works
without issue. I've also tried re-installing IAS on the box in
question and the issue still exists.

Any help greatly appreciated!

Hello cbtg2006,

Is the server built from an image or complete fresh installed?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I've come across an odd issue when trying to publish IAS in AD. I've
> tried three methods of doing it.
>
> 1) Via IAS MMC Snap-In. I receive the error:
>
> IAS Error:
> The task was not completed. You may not have sufficient privileges in
> the xxx.dom domain to perform this task.
> Please make sure that you have appropriate privileges inthe domain to
> perform this task or check with Network Admin.
> 2) Via AD Users & Computers, adding the server to the 'RAS and IAS
> Servers' group. I get the following error:
>
> The following Active Directory error occurred. The requested object
> has a non-unique identifier and cannot be retrieved.
>
> 3) Via netsh, and I receive the following error:
>
> netsh ras add registeredserver xxx.dom srvName
>
> Registration FAILED:
> Remote Access Server: srvName
> Domain: xxx.dom
> The server is unwilling to process the request.
>
> The server in question holds all FSMO roles. The account being used is
> a member of Enterprise Admins group.
>
> I've tried doing this on another box on the domain and it works
> without issue. I've also tried re-installing IAS on the box in
> question and the issue still exists.
>
> Any help greatly appreciated!
>

Hello Meinolf,

The server is a fresh install, Windows Server 2003 R2 SP2 x64.

Regards,

-Chris


On Oct 8, 8:54*am, Meinolf Weber <meiweb(nospam)@gmx.de> wrote:
> Hello cbtg2006,
>
> Is the server built from an image or complete fresh installed?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > I've come across an odd issue when trying to publish IAS in AD. I've
> > tried three methods of doing it.
>
> > 1) Via IAS MMC Snap-In. I receive the error:
>
> > IAS Error:
> > The task was not completed. You may not have sufficient privileges in
> > the xxx.dom domain to perform this task.
> > Please make sure that you have appropriate privileges inthe domain to
> > perform this task or check with Network Admin.
> > 2) Via AD Users & Computers, adding the server to the 'RAS and IAS
> > Servers' group. I get the following error:
>
> > The following Active Directory error occurred. The requested object
> > has a non-unique identifier and cannot be retrieved.
>
> > 3) Via netsh, and I receive the following error:
>
> > netsh ras add registeredserver xxx.dom srvName
>
> > Registration FAILED:
> > Remote Access Server: *srvName
> > Domain: * * * * * * * xxx.dom
> > The server is unwilling to process the request.
>
> > The server in question holds all FSMO roles. The account being used is
> > a member of Enterprise Admins group.
>
> > I've tried doing this on another box on the domain and it works
> > without issue. I've also tried re-installing IAS on the box in
> > question and the issue still exists.
>
> > Any help greatly appreciated!

Hello cbtg2006,

Any errors in the event viewer about this?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> The requested object has a non-unique identifier and cannot be
> retrieved
>

Hello cbtg2006,

Do you have any replication problems between your DC's or was there a crash
or restore of DC?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> The requested object has a non-unique identifier and cannot be
> retrieved
>

Hello Meinolf,

Was my first port of call.... unfortunately there are no errors at
all, let alone IAS related errors.

Regards,

-Chris


On Oct 8, 9:20*am, Meinolf Weber <meiweb(nospam)@gmx.de> wrote:
> Hello cbtg2006,
>
> Any errors in the event viewer about this?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > The requested object has a non-unique identifier and cannot be
> > retrieved

Hello Meinolf,

There are no replication issues on this DC, no crash/restore either.

Regards,

-Chirs

On Oct 8, 9:21*am, Meinolf Weber <meiweb(nospam)@gmx.de> wrote:
> Hello cbtg2006,
>
> Do you have any replication problems between your DC's or was there a crash
> or restore of DC?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > The requested object has a non-unique identifier and cannot be
> > retrieved

This was resolved eventually by demoting a re-promoting the affected
Domain Controller.


On Oct 8, 9:28*am, cbtg2006 <chrismbradf...@gmail.com> wrote:
> Hello Meinolf,
>
> There are no replication issues on this DC, no crash/restore either.
>
> Regards,
>
> -Chirs
>
> On Oct 8, 9:21*am, Meinolf Weber <meiweb(nospam)@gmx.de> wrote:
>
> > Hello cbtg2006,
>
> > Do you have any replication problems between your DC's or was there a crash
> > or restore of DC?
>
> > Best regards
>
> > Meinolf Weber
> > Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> > no rights.
> > ** Please do NOT email, only reply to Newsgroups
> > ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > > The requested object has a non-unique identifier and cannot be
> > > retrieved

Hello cbtg2006,

Thanks for the feedback. Nice to hear that you solved it.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> This was resolved eventually by demoting a re-promoting the affected
> Domain Controller.
>
> On Oct 8, 9:28 am, cbtg2006 <chrismbradf...@gmail.com> wrote:
>
>> Hello Meinolf,
>>
>> There are no replication issues on this DC, no crash/restore either.
>>
>> Regards,
>>
>> -Chirs
>>
>> On Oct 8, 9:21 am, Meinolf Weber <meiweb(nospam)@gmx.de> wrote:
>>
>>> Hello cbtg2006,
>>>
>>> Do you have any replication problems between your DC's or was there
>>> a crash or restore of DC?
>>>
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers
>>> no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>>>> The requested object has a non-unique identifier and cannot be
>>>> retrieved
>>>>