I currently have a Windows 2000 DC and am trying to install Active
Directory on a Windows 2003 R2 server as an additional DC in the
existing domain.

Using the Windows 2003 R2 installation CD I have run adprep /
forestprep and then adprep /domainprep /gpprep on the Windows 2000 DC
to update the schema but I still get the error :
_________________________________________

The operation failed because:

The Active Directory Installation Wizard cannot continue because the
forest is not prepared for installing Windows Server 2003. Use the
Adprep command-line tool to prepare both the forest and the domain. For
more information about using the Adprep, see Active Directory Help.

"The version of the Active Directory schema of the source forest is not
compatible with the version of Active Directory on this computer."
_________________________________________

Any Suggestions ?

Thanks,

Blaine

Is the Win2000 schema master set to allow schema modifications?
(http://support.microsoft.com/kb/285172/en-us)

If so, what do you have recorded in the ADPrep logs
(http://support.microsoft.com/kb/309628/en-us)

Show quoteHide quote

I'm having the exact same problem.  Everything seems ok but I think I must
have missed something.  adprep /forestprep and /domainprep completed without
errors when ran.

The W2K Server is running SP6 + latest hotfixes.

Here's the log from adprep.exe /forestprep(actual domain name changed to
protect the innocent).  I had to trim some of it because the post was too
big...:


Adprep successfully upgraded the schema using schupgr.exe.

[Status/Consequence]

The schema information on schema master has been successfully prepared.



Adprep set the value of registry key
System\CurrentControlSet\Services\NTDS\Parameters\Schema Update Allowed to 1



Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_add_s() finished, return code is 0x44



Adprep attempted to create the directory service object
cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The object exists so Adprep did not attempt to rerun this operation but is
continuing.



Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_add_s() finished, return code is 0x44



Adprep attempted to create the directory service object
cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The object exists so Adprep did not attempt to rerun this operation but is
continuing.



Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=3467dae5-dedd-4648-9066-f48ac186b20a,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_search_s() finished, return code is 0x20



Adprep verified the state of operation
cn=3467dae5-dedd-4648-9066-f48ac186b20a,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.



Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is CN=Sites,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_search_s() finished, return code is 0x0



Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is CN=Sites,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_modify_ext_s() finished, return code is 0x0



Adprep successfully modified the security descriptor on object
CN=Sites,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing security descriptor with the new access control
entry (ACE).



Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=3467dae5-dedd-4648-9066-f48ac186b20a,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_add_s() finished, return code is 0x0



Adprep successfully created the directory service object
cn=3467dae5-dedd-4648-9066-f48ac186b20a,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=33b7ee33-1386-47cf-baa1-b03e06473253,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_search_s() finished, return code is 0x20



Adprep verified the state of operation
cn=33b7ee33-1386-47cf-baa1-b03e06473253,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.



Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is CN=Sam-Domain,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_modify_s() finished, return code is 0x0



Adprep modified the default security descriptor on object
CN=Sam-Domain,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing default security descriptor with the new access
control entry (ACE).



Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=33b7ee33-1386-47cf-baa1-b03e06473253,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_add_s() finished, return code is 0x0



Adprep successfully created the directory service object
cn=33b7ee33-1386-47cf-baa1-b03e06473253,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=e9ee8d55-c2fb-4723-a333-c80ff4dfbf45,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_search_s() finished, return code is 0x20



Adprep verified the state of operation
cn=e9ee8d55-c2fb-4723-a333-c80ff4dfbf45,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.



Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is CN=Domain-DNS,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_modify_s() finished, return code is 0x0



Adprep modified the default security descriptor on object
CN=Domain-DNS,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing default security descriptor with the new access
control entry (ACE).



Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=e9ee8d55-c2fb-4723-a333-c80ff4dfbf45,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_add_s() finished, return code is 0x0



Adprep successfully created the directory service object
cn=e9ee8d55-c2fb-4723-a333-c80ff4dfbf45,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=ccfae63a-7fb5-454c-83ab-0e8e1214974e,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_search_s() finished, return code is 0x20



Adprep verified the state of operation
cn=ccfae63a-7fb5-454c-83ab-0e8e1214974e,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.



Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is
CN=organizational-Unit,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_modify_s() finished, return code is 0x0



Adprep modified the default security descriptor on object
CN=organizational-Unit,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing default security descriptor with the new access
control entry (ACE).



Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=ccfae63a-7fb5-454c-83ab-0e8e1214974e,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_add_s() finished, return code is 0x0



Adprep successfully created the directory service object
cn=ccfae63a-7fb5-454c-83ab-0e8e1214974e,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=ad3c7909-b154-4c16-8bf7-2c3a7870bb3d,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_search_s() finished, return code is 0x20



Adprep verified the state of operation
cn=ad3c7909-b154-4c16-8bf7-2c3a7870bb3d,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.



Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is
CN=Group-Policy-Container,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_modify_s() finished, return code is 0x0



Adprep modified the default security descriptor on object
CN=Group-Policy-Container,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing default security descriptor with the new access
control entry (ACE).



Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=ad3c7909-b154-4c16-8bf7-2c3a7870bb3d,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_add_s() finished, return code is 0x0



Adprep successfully created the directory service object
cn=ad3c7909-b154-4c16-8bf7-2c3a7870bb3d,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=26ad2ebf-f8f5-44a4-b97c-a616c8b9d09a,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_search_s() finished, return code is 0x20



Adprep verified the state of operation
cn=26ad2ebf-f8f5-44a4-b97c-a616c8b9d09a,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.



Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is
CN=Trusted-Domain,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_modify_s() finished, return code is 0x0



Adprep modified the default security descriptor on object
CN=Trusted-Domain,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing default security descriptor with the new access
control entry (ACE).



Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=26ad2ebf-f8f5-44a4-b97c-a616c8b9d09a,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_add_s() finished, return code is 0x0



Adprep successfully created the directory service object
cn=26ad2ebf-f8f5-44a4-b97c-a616c8b9d09a,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=4444c516-f43a-4c12-9c4b-b5c064941d61,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_search_s() finished, return code is 0x20



Adprep verified the state of operation
cn=4444c516-f43a-4c12-9c4b-b5c064941d61,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.



Adprep invoked the call back function (null).

[Status/Consequence]

The call back function finished successfully.



Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=4444c516-f43a-4c12-9c4b-b5c064941d61,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_add_s() finished, return code is 0x0



Adprep successfully created the directory service object
cn=4444c516-f43a-4c12-9c4b-b5c064941d61,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=436a1a4b-f41a-46e6-ac86-427720ef29f3,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_search_s() finished, return code is 0x20



Adprep verified the state of operation
cn=436a1a4b-f41a-46e6-ac86-427720ef29f3,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.



Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is CN=AIA,CN=Public Key
Services,CN=Services,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_search_s() finished, return code is 0x0



Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is CN=AIA,CN=Public Key
Services,CN=Services,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_modify_ext_s() finished, return code is 0x0



Adprep successfully modified the security descriptor on object
CN=AIA,CN=Public Key
Services,CN=Services,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing security descriptor with the new access control
entry (ACE).



Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=436a1a4b-f41a-46e6-ac86-427720ef29f3,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_add_s() finished, return code is 0x0



Adprep successfully created the directory service object
cn=436a1a4b-f41a-46e6-ac86-427720ef29f3,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=b2b7fb45-f50d-41bc-a73b-8f580f3b636a,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_search_s() finished, return code is 0x20



Adprep verified the state of operation
cn=b2b7fb45-f50d-41bc-a73b-8f580f3b636a,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.



Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is CN=CDP,CN=Public Key
Services,CN=Services,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_search_s() finished, return code is 0x0



Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is CN=CDP,CN=Public Key
Services,CN=Services,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_modify_ext_s() finished, return code is 0x0



Adprep successfully modified the security descriptor on object
CN=CDP,CN=Public Key
Services,CN=Services,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing security descriptor with the new access control
entry (ACE).



Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is CN=Ipsec-NFA,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

<SNIP>.....


LDAP API ldap_modify_s() finished, return code is 0x0



Adprep modified the default security descriptor on object
CN=Ipsec-NFA,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing default security descriptor with the new access
control entry (ACE).



Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=94f238bf-831c-11d6-977b-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_add_s() finished, return code is 0x0



Adprep successfully created the directory service object
cn=94f238bf-831c-11d6-977b-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=94f238c0-831c-11d6-977b-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_search_s() finished, return code is 0x20



Adprep verified the state of operation
cn=94f238c0-831c-11d6-977b-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.



Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is CN=Ipsec-Policy,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_modify_s() finished, return code is 0x0



Adprep modified the default security descriptor on object
CN=Ipsec-Policy,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing default security descriptor with the new access
control entry (ACE).



Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=94f238c0-831c-11d6-977b-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_add_s() finished, return code is 0x0



Adprep successfully created the directory service object
cn=94f238c0-831c-11d6-977b-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=eda27b47-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_search_s() finished, return code is 0x20



Adprep verified the state of operation
cn=eda27b47-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.



Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is CN=User,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_modify_s() finished, return code is 0x0



Adprep modified the default security descriptor on object
CN=User,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing default security descriptor with the new access
control entry (ACE).



Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=eda27b47-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_add_s() finished, return code is 0x0



Adprep successfully created the directory service object
cn=eda27b47-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=eda27b48-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_search_s() finished, return code is 0x20



Adprep verified the state of operation
cn=eda27b48-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.



Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is
CN=inetOrgPerson,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_modify_s() finished, return code is 0x0



Adprep modified the default security descriptor on object
CN=inetOrgPerson,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing default security descriptor with the new access
control entry (ACE).



Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=eda27b48-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_add_s() finished, return code is 0x0



Adprep successfully created the directory service object
cn=eda27b48-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=eda27b49-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_search_s() finished, return code is 0x20



Adprep verified the state of operation
cn=eda27b49-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.



Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is CN=Computer,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_modify_s() finished, return code is 0x0



Adprep modified the default security descriptor on object
CN=Computer,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing default security descriptor with the new access
control entry (ACE).



Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=eda27b49-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_add_s() finished, return code is 0x0



Adprep successfully created the directory service object
cn=eda27b49-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=eda27b4a-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_search_s() finished, return code is 0x20



Adprep verified the state of operation
cn=eda27b4a-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.



Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is CN=Group,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_modify_s() finished, return code is 0x0



Adprep modified the default security descriptor on object
CN=Group,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing default security descriptor with the new access
control entry (ACE).



Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=eda27b4a-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_add_s() finished, return code is 0x0



Adprep successfully created the directory service object
cn=eda27b4a-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=26d9c510-e61a-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_search_s() finished, return code is 0x20



Adprep verified the state of operation
cn=26d9c510-e61a-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.



Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is CN=User,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_modify_s() finished, return code is 0x0



Adprep modified the default security descriptor on object
CN=User,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing default security descriptor with the new access
control entry (ACE).



Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=26d9c510-e61a-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_add_s() finished, return code is 0x0



Adprep successfully created the directory service object
cn=26d9c510-e61a-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=26d9c511-e61a-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_search_s() finished, return code is 0x20



Adprep verified the state of operation
cn=26d9c511-e61a-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.



Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is
CN=inetOrgPerson,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_modify_s() finished, return code is 0x0



Adprep modified the default security descriptor on object
CN=inetOrgPerson,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing default security descriptor with the new access
control entry (ACE).



Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=26d9c511-e61a-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_add_s() finished, return code is 0x0



Adprep successfully created the directory service object
cn=26d9c511-e61a-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
CN=Windows2003Update,CN=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_add_s() finished, return code is 0x0



Adprep successfully created the directory service object
CN=Windows2003Update,CN=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is
CN=Windows2003Update,CN=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.



LDAP API ldap_modify_s() finished, return code is 0x0



Adprep successfully set the Forest Update revision attribute to 9 on object
CN=Windows2003Update,CN=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep updates the Forest Update revision attribute in order to mark the
forest as prepared. Adprep is continuing and will now prepare the forest.



Adprep successfully updated the forest-wide information.

Hello Hunter,

Thanks for the tip, I checked using the MMC snap in and found I had to
enable "Schema may be modified on this Domain Controller". However,
when I re-run /ForestPrep I get the message :

Forest-wide information has already been updates.
Adprep did not attempt to re-run this operation

Anymore suggestions ?

Thanks.

Blaine

check if the schema updates have replicated to all DCs. Check the event logs
of the DCs for errors

Show quoteHide quote

There is only 1 DC in my domain, this Windows 2003 R2 server is to be
the 2nd.

I checked the event viewer and there are no errors.

Thanks,

Blaine

download ADFIND from joeware.net
(http://www.joeware.net/win/free/tools/adfind.htm)

put the tool on some server and run

adfind -h <FQDN schema master> -schema -s base objectVersion
(e.g. adfind -h schemaFSMO.domain.com -schema -s base objectVersion)

If you have performed the schema upgrade using ADPREP from R2 the result
should be 31.

to see if the schema upgrade succeeded, also see: MS-KBQ309628 (this article
is for W2K3 SP1) and the logs
"%systemroot%\system32\debug\adprep\logs\ADPrep.log"


Show quoteHide quote

Thanks for the infomation.

I ran the utility and got a return code of 30 so it looks as though the
AD schema dis not upgrade. So I guess the question now is how can I run
ADPREP again without getting the error :

Forest-wide information has already been updates.
Adprep did not attempt to re-run this operation

Thanks.

Blaine

stupid question maybe... but...

are you using the R2 CD and running ADPREP /forestprep from the CD?

after upgrading to R2 schema update it should be version 31.

any errors in the event log?

Show quoteHide quote

Hello! I had this problem yesterday.. Today i discovered that there is a newer versjon of ADPREP.EXE in the catalog \CMPNENTS\R2\ADPREP on CD2 of Win2003 R2!

The version on CD1 will NOT upgrade the schema to version 31!

The version on CD2 fixed the problem :) -- njp ------------------------------------------------------------------------ njp's Profile: http://forums.techarena.in/member.php?userid=13282 View this thread: http://forums.techarena.in/showthread.php?t=443681 Free Computer Help -  http://forums.techarena.in

Hello all,

I discovered the same thing as njp after Jorge's question if I was
using the right CD.

Thanks everyone for your input !

Blaine

Hi all,

I had the same issue when trying to add a 2003_R2_x64 server to a 2003_STD
functional domain.  The adprep on disc 2 fixed my problem too... It would
help if their were a KB article describing this situation, but once again the
message board rules!

Bill

Show quoteHide quote

njp wrote:
I'm glad I found this.  I was having the same problem and couldn't
figure out why dcpromo wouldn't run on a new machine when adprep had
completed without error.

Thanks!  =)

--TWH

njp;1617226 Wrote: > Hello! I had this problem yesterday.. Today i discovered that there is a > newer versjon of ADPREP.EXE in the catalog \CMPNENTS\R2\ADPREP on CD2 of > Win2003 R2!
Yes It work, Thank you.
There are many ADPREP. but only from CD2 can fix. Thank you -- oilsysit ------------------------------------------------------------------------ oilsysit's Profile: http://forums.techarena.in/members/223068.htm View this thread: http://forums.techarena.in/active-directory/443681.htmhttp://forums.techarena.in

THanks!  This helped quite a bit.  I wish this was better documented.. 
Trying to find out why and confirming that we didn't skip a step; this caused
about a 2 hour delay in our migration.  Good thing we have these message
boards.

Show quoteHide quote

Folks,
I receive the same error when try to add a new DC running windows 2003 R2 standard to my existing domain.

My old DC is a windows 2003 standard.

I have not runs any adprep etc since i dont want to mess up my domain.

How can i resolve this?
thanks in advance -- will0821 ------------------------------------------------------------------------ will0821's Profile: http://forums.techarena.in/members/will0821.htm View this thread: http://forums.techarena.in/active-directory/443681.htmhttp://forums.techarena.in

To go from Win 2k to Win 2k3 you run adprep from the Win 2k3 CD. Going from
Win 2k3 to the 2 disk Win 2k3 R2 you need to run adprep from the second disk
of the R2 set.

hth
DDS

Show quoteHide quote

You should extend the schema by running adprep.  Microsoft recommends that
you add the Windows Server 2003 R2 schema updates to your existing Active
Directory installation before you deploy computers running Windows Server
2003 R2, regardless of whether you plan to use these new Windows Server 2003
R2 features or not.

Show quoteHide quote

By running ADPREP. It's there for a reason :-)


Massimo

Hello will0821,

As stated from the other's adprep from the second R2 disk will upgrade the
schema from version 30 (2003) to 31 (2003 R2), you can check the version
with "schupgr" in a command prompt.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Show quoteHide quote

tombstone server help!
NTFRS subscriptions MISSING under PDC
Child Domain (locally) into existing - and trusts?
Demoting Domain Controller
XP SP2 Probs on 2003 domain
Replicate 2000AD to 2003AD
Logon dialog box text applied through group policy
Replication event 1567
2003 Server DC remove and add to different domain as member server
Active directory connector replication between 2 domains