The version of the Active Directory schema of the source forest is not compatible with the version of Active Directory on this computer

Blaine

unread,

Jan 20, 2006, 11:53:05 AM1/20/06

to

I currently have a Windows 2000 DC and am trying to install Active
Directory on a Windows 2003 R2 server as an additional DC in the
existing domain.

Using the Windows 2003 R2 installation CD I have run adprep /
forestprep and then adprep /domainprep /gpprep on the Windows 2000 DC
to update the schema but I still get the error :
_________________________________________

The operation failed because:

The Active Directory Installation Wizard cannot continue because the
forest is not prepared for installing Windows Server 2003. Use the
Adprep command-line tool to prepare both the forest and the domain. For
more information about using the Adprep, see Active Directory Help.

"The version of the Active Directory schema of the source forest is not
compatible with the version of Active Directory on this computer."
_________________________________________

Any Suggestions ?

Thanks,

Blaine

Hunter Coleman

unread,

Jan 20, 2006, 12:18:48 PM1/20/06

to

Is the Win2000 schema master set to allow schema modifications?
(http://support.microsoft.com/kb/285172/en-us)

If so, what do you have recorded in the ADPrep logs
(http://support.microsoft.com/kb/309628/en-us)

--
Hunter

"Blaine" <blaine...@gmail.com> wrote in message
news:1137775985.9...@g14g2000cwa.googlegroups.com...

stuckinlimbo

unread,

Jan 20, 2006, 2:01:01 PM1/20/06

to

I'm having the exact same problem. Everything seems ok but I think I must
have missed something. adprep /forestprep and /domainprep completed without
errors when ran.

The W2K Server is running SP6 + latest hotfixes.

Here's the log from adprep.exe /forestprep(actual domain name changed to
protect the innocent). I had to trim some of it because the post was too
big...:

Adprep successfully upgraded the schema using schupgr.exe.

[Status/Consequence]

The schema information on schema master has been successfully prepared.

Adprep set the value of registry key
System\CurrentControlSet\Services\NTDS\Parameters\Schema Update Allowed to 1

Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_add_s() finished, return code is 0x44

Adprep attempted to create the directory service object
cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The object exists so Adprep did not attempt to rerun this operation but is
continuing.

Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_add_s() finished, return code is 0x44

Adprep attempted to create the directory service object
cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The object exists so Adprep did not attempt to rerun this operation but is
continuing.

Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=3467dae5-dedd-4648-9066-f48ac186b20a,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_search_s() finished, return code is 0x20

Adprep verified the state of operation
cn=3467dae5-dedd-4648-9066-f48ac186b20a,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.

Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is CN=Sites,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_search_s() finished, return code is 0x0

Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is CN=Sites,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_modify_ext_s() finished, return code is 0x0

Adprep successfully modified the security descriptor on object
CN=Sites,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing security descriptor with the new access control
entry (ACE).

Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=3467dae5-dedd-4648-9066-f48ac186b20a,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_add_s() finished, return code is 0x0

Adprep successfully created the directory service object
cn=3467dae5-dedd-4648-9066-f48ac186b20a,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=33b7ee33-1386-47cf-baa1-b03e06473253,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_search_s() finished, return code is 0x20

Adprep verified the state of operation
cn=33b7ee33-1386-47cf-baa1-b03e06473253,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.

Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is CN=Sam-Domain,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_modify_s() finished, return code is 0x0

Adprep modified the default security descriptor on object
CN=Sam-Domain,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing default security descriptor with the new access
control entry (ACE).

Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=33b7ee33-1386-47cf-baa1-b03e06473253,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_add_s() finished, return code is 0x0

Adprep successfully created the directory service object
cn=33b7ee33-1386-47cf-baa1-b03e06473253,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=e9ee8d55-c2fb-4723-a333-c80ff4dfbf45,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_search_s() finished, return code is 0x20

Adprep verified the state of operation
cn=e9ee8d55-c2fb-4723-a333-c80ff4dfbf45,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.

Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is CN=Domain-DNS,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_modify_s() finished, return code is 0x0

Adprep modified the default security descriptor on object
CN=Domain-DNS,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing default security descriptor with the new access
control entry (ACE).

Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=e9ee8d55-c2fb-4723-a333-c80ff4dfbf45,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_add_s() finished, return code is 0x0

Adprep successfully created the directory service object
cn=e9ee8d55-c2fb-4723-a333-c80ff4dfbf45,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=ccfae63a-7fb5-454c-83ab-0e8e1214974e,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_search_s() finished, return code is 0x20

Adprep verified the state of operation
cn=ccfae63a-7fb5-454c-83ab-0e8e1214974e,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.

Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is
CN=organizational-Unit,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_modify_s() finished, return code is 0x0

Adprep modified the default security descriptor on object
CN=organizational-Unit,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing default security descriptor with the new access
control entry (ACE).

Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=ccfae63a-7fb5-454c-83ab-0e8e1214974e,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_add_s() finished, return code is 0x0

Adprep successfully created the directory service object
cn=ccfae63a-7fb5-454c-83ab-0e8e1214974e,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=ad3c7909-b154-4c16-8bf7-2c3a7870bb3d,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_search_s() finished, return code is 0x20

Adprep verified the state of operation
cn=ad3c7909-b154-4c16-8bf7-2c3a7870bb3d,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.

Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is
CN=Group-Policy-Container,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_modify_s() finished, return code is 0x0

Adprep modified the default security descriptor on object
CN=Group-Policy-Container,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing default security descriptor with the new access
control entry (ACE).

Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=ad3c7909-b154-4c16-8bf7-2c3a7870bb3d,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_add_s() finished, return code is 0x0

Adprep successfully created the directory service object
cn=ad3c7909-b154-4c16-8bf7-2c3a7870bb3d,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=26ad2ebf-f8f5-44a4-b97c-a616c8b9d09a,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_search_s() finished, return code is 0x20

Adprep verified the state of operation
cn=26ad2ebf-f8f5-44a4-b97c-a616c8b9d09a,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.

Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is
CN=Trusted-Domain,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_modify_s() finished, return code is 0x0

Adprep modified the default security descriptor on object
CN=Trusted-Domain,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing default security descriptor with the new access
control entry (ACE).

Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=26ad2ebf-f8f5-44a4-b97c-a616c8b9d09a,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_add_s() finished, return code is 0x0

Adprep successfully created the directory service object
cn=26ad2ebf-f8f5-44a4-b97c-a616c8b9d09a,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=4444c516-f43a-4c12-9c4b-b5c064941d61,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_search_s() finished, return code is 0x20

Adprep verified the state of operation
cn=4444c516-f43a-4c12-9c4b-b5c064941d61,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.

Adprep invoked the call back function (null).

[Status/Consequence]

The call back function finished successfully.

Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=4444c516-f43a-4c12-9c4b-b5c064941d61,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_add_s() finished, return code is 0x0

Adprep successfully created the directory service object
cn=4444c516-f43a-4c12-9c4b-b5c064941d61,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=436a1a4b-f41a-46e6-ac86-427720ef29f3,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_search_s() finished, return code is 0x20

Adprep verified the state of operation
cn=436a1a4b-f41a-46e6-ac86-427720ef29f3,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.

Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is CN=AIA,CN=Public Key
Services,CN=Services,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_search_s() finished, return code is 0x0

Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is CN=AIA,CN=Public Key
Services,CN=Services,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_modify_ext_s() finished, return code is 0x0

Adprep successfully modified the security descriptor on object
CN=AIA,CN=Public Key
Services,CN=Services,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing security descriptor with the new access control
entry (ACE).

Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=436a1a4b-f41a-46e6-ac86-427720ef29f3,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_add_s() finished, return code is 0x0

Adprep successfully created the directory service object
cn=436a1a4b-f41a-46e6-ac86-427720ef29f3,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=b2b7fb45-f50d-41bc-a73b-8f580f3b636a,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_search_s() finished, return code is 0x20

Adprep verified the state of operation
cn=b2b7fb45-f50d-41bc-a73b-8f580f3b636a,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.

Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is CN=CDP,CN=Public Key
Services,CN=Services,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_search_s() finished, return code is 0x0

Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is CN=CDP,CN=Public Key
Services,CN=Services,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_modify_ext_s() finished, return code is 0x0

Adprep successfully modified the security descriptor on object
CN=CDP,CN=Public Key
Services,CN=Services,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing security descriptor with the new access control
entry (ACE).

Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is CN=Ipsec-NFA,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

<SNIP>.....

LDAP API ldap_modify_s() finished, return code is 0x0

Adprep modified the default security descriptor on object
CN=Ipsec-NFA,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing default security descriptor with the new access
control entry (ACE).

Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=94f238bf-831c-11d6-977b-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_add_s() finished, return code is 0x0

Adprep successfully created the directory service object
cn=94f238bf-831c-11d6-977b-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=94f238c0-831c-11d6-977b-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_search_s() finished, return code is 0x20

Adprep verified the state of operation
cn=94f238c0-831c-11d6-977b-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.

Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is CN=Ipsec-Policy,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_modify_s() finished, return code is 0x0

Adprep modified the default security descriptor on object
CN=Ipsec-Policy,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing default security descriptor with the new access
control entry (ACE).

Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=94f238c0-831c-11d6-977b-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_add_s() finished, return code is 0x0

Adprep successfully created the directory service object
cn=94f238c0-831c-11d6-977b-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=eda27b47-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_search_s() finished, return code is 0x20

Adprep verified the state of operation
cn=eda27b47-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.

Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is CN=User,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_modify_s() finished, return code is 0x0

Adprep modified the default security descriptor on object
CN=User,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing default security descriptor with the new access
control entry (ACE).

Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=eda27b47-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_add_s() finished, return code is 0x0

Adprep successfully created the directory service object
cn=eda27b47-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=eda27b48-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_search_s() finished, return code is 0x20

Adprep verified the state of operation
cn=eda27b48-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.

Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is
CN=inetOrgPerson,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_modify_s() finished, return code is 0x0

Adprep modified the default security descriptor on object
CN=inetOrgPerson,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing default security descriptor with the new access
control entry (ACE).

Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=eda27b48-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_add_s() finished, return code is 0x0

Adprep successfully created the directory service object
cn=eda27b48-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=eda27b49-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_search_s() finished, return code is 0x20

Adprep verified the state of operation
cn=eda27b49-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.

Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is CN=Computer,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_modify_s() finished, return code is 0x0

Adprep modified the default security descriptor on object
CN=Computer,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing default security descriptor with the new access
control entry (ACE).

Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=eda27b49-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_add_s() finished, return code is 0x0

Adprep successfully created the directory service object
cn=eda27b49-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=eda27b4a-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_search_s() finished, return code is 0x20

Adprep verified the state of operation
cn=eda27b4a-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.

Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is CN=Group,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_modify_s() finished, return code is 0x0

Adprep modified the default security descriptor on object
CN=Group,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing default security descriptor with the new access
control entry (ACE).

Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=eda27b4a-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_add_s() finished, return code is 0x0

Adprep successfully created the directory service object
cn=eda27b4a-e610-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=26d9c510-e61a-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_search_s() finished, return code is 0x20

Adprep verified the state of operation
cn=26d9c510-e61a-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.

Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is CN=User,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_modify_s() finished, return code is 0x0

Adprep modified the default security descriptor on object
CN=User,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing default security descriptor with the new access
control entry (ACE).

Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=26d9c510-e61a-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_add_s() finished, return code is 0x0

Adprep successfully created the directory service object
cn=26d9c510-e61a-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

Adprep was about to call the following LDAP API. ldap_search_s(). The base
entry to start the search is
cn=26d9c511-e61a-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_search_s() finished, return code is 0x20

Adprep verified the state of operation
cn=26d9c511-e61a-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.

Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is
CN=inetOrgPerson,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_modify_s() finished, return code is 0x0

Adprep modified the default security descriptor on object
CN=inetOrgPerson,CN=Schema,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep merged the existing default security descriptor with the new access
control entry (ACE).

Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
cn=26d9c511-e61a-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_add_s() finished, return code is 0x0

Adprep successfully created the directory service object
cn=26d9c511-e61a-11d6-9793-00c04f613221,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

Adprep was about to call the following LDAP API. ldap_add_s(). The entry to
add is
CN=Windows2003Update,CN=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_add_s() finished, return code is 0x0

Adprep successfully created the directory service object
CN=Windows2003Update,CN=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

Adprep was about to call the following LDAP API. ldap_modify_s(). The entry
to modify is
CN=Windows2003Update,CN=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

LDAP API ldap_modify_s() finished, return code is 0x0

Adprep successfully set the Forest Update revision attribute to 9 on object
CN=Windows2003Update,CN=ForestUpdates,CN=Configuration,DC=dummydomain,DC=com.

[Status/Consequence]

Adprep updates the Forest Update revision attribute in order to mark the
forest as prepared. Adprep is continuing and will now prepare the forest.

Adprep successfully updated the forest-wide information.

Blaine

unread,

Jan 20, 2006, 2:07:51 PM1/20/06

to

Hello Hunter,

Thanks for the tip, I checked using the MMC snap in and found I had to
enable "Schema may be modified on this Domain Controller". However,
when I re-run /ForestPrep I get the message :

Forest-wide information has already been updates.
Adprep did not attempt to re-run this operation

Anymore suggestions ?

Thanks.

Blaine

Jorge de Almeida Pinto [MVP]

unread,

Jan 20, 2006, 2:17:36 PM1/20/06

to

check if the schema updates have replicated to all DCs. Check the event logs
of the DCs for errors

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)
# Jorge de Almeida Pinto #
MVP Windows Server - Directory Services
BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------

-----------------------------------------------------------------------------

"Blaine" <blaine...@gmail.com> wrote in message
news:1137775985.9...@g14g2000cwa.googlegroups.com...

Blaine

unread,

Jan 20, 2006, 5:18:24 PM1/20/06

to

There is only 1 DC in my domain, this Windows 2003 R2 server is to be
the 2nd.

I checked the event viewer and there are no errors.

Thanks,

Blaine

Jorge de Almeida Pinto [MVP]

unread,

Jan 20, 2006, 7:56:14 PM1/20/06

to

download ADFIND from joeware.net
(http://www.joeware.net/win/free/tools/adfind.htm)

put the tool on some server and run

adfind -h <FQDN schema master> -schema -s base objectVersion
(e.g. adfind -h schemaFSMO.domain.com -schema -s base objectVersion)

If you have performed the schema upgrade using ADPREP from R2 the result
should be 31.

to see if the schema upgrade succeeded, also see: MS-KBQ309628 (this article
is for W2K3 SP1) and the logs
"%systemroot%\system32\debug\adprep\logs\ADPrep.log"

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)
# Jorge de Almeida Pinto #
MVP Windows Server - Directory Services
BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------

-----------------------------------------------------------------------------
"Blaine" <blaine...@gmail.com> wrote in message

news:1137795504.2...@g43g2000cwa.googlegroups.com...

Blaine

unread,

Jan 23, 2006, 10:55:50 AM1/23/06

to

Thanks for the infomation.

I ran the utility and got a return code of 30 so it looks as though the
AD schema dis not upgrade. So I guess the question now is how can I run
ADPREP again without getting the error :

Forest-wide information has already been updates.
Adprep did not attempt to re-run this operation

Thanks.

Blaine

Jorge de Almeida Pinto [MVP]

unread,

Jan 23, 2006, 4:10:34 PM1/23/06

to

stupid question maybe... but...

are you using the R2 CD and running ADPREP /forestprep from the CD?

after upgrading to R2 schema update it should be version 31.

any errors in the event log?

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)
# Jorge de Almeida Pinto #
MVP Windows Server - Directory Services
BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------

-----------------------------------------------------------------------------
"Blaine" <blaine...@gmail.com> wrote in message

news:1138031749....@f14g2000cwb.googlegroups.com...

njp

unread,

Jan 26, 2006, 5:48:10 AM1/26/06

to

Hello! I had this problem yesterday.. Today i discovered that there is a
newer versjon of ADPREP.EXE in the catalog \CMPNENTS\R2\ADPREP on CD2 of
Win2003 R2!

The version on CD1 will NOT upgrade the schema to version 31!

The version on CD2 fixed the problem :)

--
njp
------------------------------------------------------------------------
njp's Profile: http://forums.techarena.in/member.php?userid=13282
View this thread: http://forums.techarena.in/showthread.php?t=443681
Free Computer Help - http://forums.techarena.in

Blaine

unread,

Jan 27, 2006, 1:45:32 PM1/27/06

to

Hello all,

I discovered the same thing as njp after Jorge's question if I was
using the right CD.

Thanks everyone for your input !

Blaine

timothy....@gmail.com

unread,

Feb 22, 2006, 2:52:51 PM2/22/06

to

njp wrote:
> Hello! I had this problem yesterday.. Today i discovered that there is a
> newer versjon of ADPREP.EXE in the catalog \CMPNENTS\R2\ADPREP on CD2 of
> Win2003 R2!
>
> The version on CD1 will NOT upgrade the schema to version 31!
>
> The version on CD2 fixed the problem :)

I'm glad I found this. I was having the same problem and couldn't
figure out why dcpromo wouldn't run on a new machine when adprep had
completed without error.

Thanks! =)

--TWH

jerod

unread,

Apr 1, 2006, 12:37:01 PM4/1/06

to

THanks! This helped quite a bit. I wish this was better documented..
Trying to find out why and confirming that we didn't skip a step; this caused
about a 2 hour delay in our migration. Good thing we have these message
boards.

will0821

unread,

Dec 4, 2008, 3:47:22 PM12/4/08

to

Folks,
I receive the same error when try to add a new DC running windows 2003
R2 standard to my existing domain.

My old DC is a windows 2003 standard.

I have not runs any adprep etc since i dont want to mess up my domain.

How can i resolve this?
thanks in advance

--
will0821
------------------------------------------------------------------------
will0821's Profile: http://forums.techarena.in/members/will0821.htm
View this thread: http://forums.techarena.in/active-directory/443681.htm

http://forums.techarena.in

Danny Sanders

unread,

Dec 4, 2008, 5:06:37 PM12/4/08

to

To go from Win 2k to Win 2k3 you run adprep from the Win 2k3 CD. Going from
Win 2k3 to the 2 disk Win 2k3 R2 you need to run adprep from the second disk
of the R2 set.

hth
DDS

"will0821" <will082...@DoNotSpam.com> wrote in message
news:will082...@DoNotSpam.com...

Ryan Sokolowski [MVP]

unread,

Dec 4, 2008, 5:12:12 PM12/4/08

to

You should extend the schema by running adprep. Microsoft recommends that
you add the Windows Server 2003 R2 schema updates to your existing Active
Directory installation before you deploy computers running Windows Server
2003 R2, regardless of whether you plan to use these new Windows Server 2003
R2 features or not.

--
Ryan Sokolowski
MVP - Clustering
MCT, MCITP x3, MCTS x7, MCSE x2, CCNA, CCDA, BCFP

"will0821" <will082...@DoNotSpam.com> wrote in message
news:will082...@DoNotSpam.com...
>

Massimo

unread,

Dec 5, 2008, 1:12:35 AM12/5/08

to

"will0821" <will082...@DoNotSpam.com> ha scritto nel messaggio
news:will082...@DoNotSpam.com...

> Folks,
> I receive the same error when try to add a new DC running windows
> 2003 R2 standard to my existing domain.
>
> My old DC is a windows 2003 standard.
>
> I have not runs any adprep etc since i dont want to mess up my domain.
>
> How can i resolve this?

By running ADPREP. It's there for a reason :-)

Massimo

Meinolf Weber

unread,

Dec 5, 2008, 2:55:51 AM12/5/08

to

Hello will0821,

As stated from the other's adprep from the second R2 disk will upgrade the
schema from version 30 (2003) to 31 (2003 R2), you can check the version
with "schupgr" in a command prompt.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Folks,
> I receive the same error when try to add a new DC running windows 2003
> R2 standard to my existing domain.
> My old DC is a windows 2003 standard.
>
> I have not runs any adprep etc since i dont want to mess up my domain.
>
> How can i resolve this?
> thanks in advance

> http://forums.techarena.in
>

oilsysit

unread,

May 21, 2010, 10:03:11 PM5/21/10

to

njp;1617226 Wrote:
> Hello! I had this problem yesterday.. Today i discovered that there is a
> newer versjon of ADPREP.EXE in the catalog \CMPNENTS\R2\ADPREP on CD2 of
> Win2003 R2!
>
> The version on CD1 will NOT upgrade the schema to version 31!
>
> The version on CD2 fixed the problem :)

Yes It work, Thank you.
There are many ADPREP. but only from CD2 can fix. Thank you

--
oilsysit
------------------------------------------------------------------------
oilsysit's Profile: http://forums.techarena.in/members/223068.htm