Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. "Index was out of range" New-AdDcCloneConfig error

"Index was out of range" New-AdDcCloneConfig error

View products that this article applies to.

Symptoms

You use the Virtualized Domain Controller (VDC) cloning feature that Windows Server 2012 introduced. You run the following Windows PowerShell cmdlet in order to clone a domain controller:
New-AdDcCloneConfigFile

When you do this, you receive warning and error messages that resemble the following:
Starting PDC test: Verifying that the domain controller hosting the PDC FSMO role is running Windows Server 2012 or later...
Passed: The domain controller hosting the PDC FSMO role (DC2-FULL.root.fabrikam.com) was located and running Windows Server 2012 or later.

Verifying authorization: Checking if this domain controller is a member of the 'Cloneable Domain Controllers' group...
Located the local domain controller: (DC2-FULL.root.fabrikam.com).
Querying the 'Cloneable Domain Controllers' group...
Pass: The local domain controller is a member of the 'Cloneable Domain Controllers' group.

Starting test: Validating the cloning allow list.
No excluded applications were detected.
Pass: No excluded applications were detected.

No valid clone configuration files were found at any of the supported locations.

All preliminary validation checks passed.

Starting creation of the clone configuration file...
Finding the path to the Directory Service database...


WARNING: Failed to find the path to the Directory Service database.
New-ADDCCloneConfigFile : Index was out of range. Must be non-negative and less than the size of the collection.
Parameter name: index
At line:1 char:1
+ New-ADDCCloneConfigFile
+ ~~~~~~~~~~~~~~~~~~~~~~~
 + CategoryInfo : InvalidArgument: (:) [New-ADDCCloneConfigFile], ArgumentOutOfRangeException
 + FullyQualifiedErrorId : ActiveDirectoryCmdlet:System.ArgumentOutOfRangeException,Microsoft.ActiveDirectory.Management.Commands.NewADDCCloneConfigFile

↑ Back to the top

Cause

The Windows PowerShell cmdlet must run in from an elevated Windows PowerShell command prompt. Otherwise, your security token does not contain the Administrators group and cannot write to the c:\windows\ntds\dccloneconfig.xml file.

↑ Back to the top

Resolution

Right-click the Windows PowerShell icon on the task bar, and then click Run as Administrator.

↑ Back to the top

More information

Do not disable User Account Control (UAC) as a workaround for this behavior. In addition to the obvious administrative functionality, UAC is required in order to run Modern Application, provides Internet Explorer with its protected mode, and performs file and registry virtualization. Disabling UAC is not a Microsoft best practice.

For more information about how to configure and troubleshoot VDC together with details and step-by-step guidance, go to the following websites:
http://technet.microsoft.com/en-us/library/ee679793(v=ws.10)
http://technet.microsoft.com/en-us/library/hh831734.aspx
http://go.microsoft.com/fwlink/p/?LinkId=236370

↑ Back to the top

Keywords: KB2742927

↑ Back to the top

Article Info
Article ID : 2742927
Revision : 6
Created on : 9/17/2012
Published on : 9/17/2012
Exists online : False
Views : 373