Return
-
Title
Temporal Group operations are not performed as scheduled. The error "Administrative Policy returned an error. The server is not operational." is found in the Active Roles Event Viewer logs. -
Description
Temporal Group operations are not performed as scheduled. The error "Administrative Policy returned an error. The server is not operational." is found in the Active Roles Event Viewer logs.
This issue may occur after one or more Active Directory Domain Controllers have been decommissioned or after one or more Active Directory Domain Controllers have experienced an outage. -
Cause
Active Roles stores a reference for the Active Directory Domain Controller that should handle a pending Temporal Group operation. This is done to prevent Active Directory replication delays in large environments, so that short-term Temporal Group membership durations are more accurate.
However, if the referenced Active Directory Domain Controller is not available when the pending Temporal Group operation is performed, the operation fails and there is no redundancy within Active Roles.
This issue is being tracked as Defect ID 407373. -
Resolution
WORKAROUND
The following PowerShell script can be run in a PowerShell session or in the PowerShell ISE on the Active Roles Administration Service host. This script will list all pending Temporal Group operations and their associated Active Directory Domain Controllers:Import-Module ActiveRolesManagementShell -WarningAction SilentlyContinue
Connect-QADService -Proxy | Out-Null
$operations = (Get-QARSOperation -OperationStatus Pending -SizeLimit 0 | Where-Object{ $_.Controls.ID -eq '13'})
$domainControllers = @()
Foreach($operation in $operations)
{
for($i=0; $i -lt $operation.Controls.Count; $i++)
{
if($operation.Controls.ID.Get($i) -eq '13')
{
$operationRef= [PSCustomObject]@{
ID = $operation.ID
DomainController = $operation.Controls.Value.Get($i)}
$domainControllers += $operationRef
}
}
}
$domainControllers
If this script returns the name of Active Directory Domain Controllers that have been decommissioned and one or more pending operations need to be updated, please contact Support and reference this solution.STATUS
This issue has been resolved in Active Roles 8.0.1 LTS and Active Roles 8.1.3. -
Change Request
407373