戻る
-
タイトル
Unable to create windows group "AA_Admin" on target machine. -
説明
During installation of Active Administrator version 8.6.3 for the first time, you may get the following error:
An error occurred while attempting to create the live Active Administrator database. Unable to create windows group "AA_Admin" on target machine: .... See inner exception for more details
at Quest.AA.Providers.Configuration.DBHelpers.CreateGroup(String serverName, String adContainer, String groupName, String groupDescription, GroupType groupType)
at Quest.AA.Providers.Configuration.DBManagementProvider.CreateNewDatabase(AADatabase parms, String sqlScript)
at Quest.AA.Providers.Configuration.ConfigurationProvider.CreateNewLiveDatabase(Action`1 statusHandler)
The network path was not found.
at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
at System.DirectoryServices.DirectoryEntry.Bind()
at System.DirectoryServices.DirectoryEntry.get_IsContainer()
at System.DirectoryServices.DirectoryEntries.CheckIsContainer()
at System.DirectoryServices.DirectoryEntries.Add(String name, String schemaClassName)
at Quest.AA.Providers.Configuration.DBHelpers.CreateLocalGroup(String serverName, String groupName, String groupDescription)
at Quest.AA.Providers.Configuration.DBHelpers.CreateGroup(String serverName, String adContainer, String groupName, String groupDescription, GroupType groupType)
The account running the installation is member of Domain Admins group and have local administrator rights on the SQL Server in which the wizard is trying to create the windows security groups. Also, this account have sysadmin rights on the SQL Server. -
対策
WORKAROUND:
When running AA Configuration Wizard and after selecting the option of creating a new database, select either Global (DC), or Domain Local (DC).
Either option will create a domain local or domain global AD security group. This options are recommended as is easier to manage AD groups for granting and revoking access to Active Administrator database.