Thursday, 13 March 2014

"the specified directory service attribute or value does not exist" when importing a GPO

When importing GPOs made in newer Windows server operating systems to older ones (2008 to 2003 for example) you may find the following error:-

"the specified directory service attribute or value does not exist"

I encountered it while trying to add a wireless GPO that included the newer "Vista+" policy option. The above error was confusing, but a different error when trying to do it manually (using RSAT on a Windows 7 machine) suggested updating the schema.

Here's what fixed it for me:-

KB943729 (Group Policy Preferences & Client Side Extensions)
ADPREP /forestprep command, run using ADPREP from a Windows 2008 Server CD

The KB on its own may or may not have helped fix the problem (but was worth adding anyway). ADPREP updated the schema and certainly fixed it.

No comments:

Post a Comment