Re: w2k backup dc for win2003dc?

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: ptwilliams (ptw2001_at_hotmail.com.donotspam)
Date: 02/10/05 

Date: Thu, 10 Feb 2005 02:47:02 -0800

I doubt the evaluation copies are your problem -they're full versions that
expire that's all.

Anyway, I just tried this in a test environment I setup just for you ;-)

I installed two Win 2003 DCs, and haven't changed the mode/ functional level
- so theyre still in Win2000 native. I then installed a 2000 server and
tried to promote that. It failed. It had added it to the domain however, so
I rebooted, logged on with the domain account and tried again. It failed
again, with the same error "An ldap read of operational attributes from
server <FQDN> failed." So I had a look through the dcpromo logs and found
the 8200 error.

I had a quick google and found the resolution - SP level!

I installed SP4, rebooted and tried again -bang! It worked.

Here's the KB:
 -- http://support.microsoft.com/?id=328909

Give that a go and see if it helps you.

If it doesn't, head on over to %systemroot%\debug and have a look at the
bottom of the DCPROMO log file. Post any relevant bits, i.e. a couple of
lines above and below the error. 

--
Paul Williams
http://www.msresource.net/
http://forums.msresource.net/
"Ray H" wrote:
> I have one box running 2003 in 2000 mixed mode.  I had already tried adding
> the W2K box without it having the secondary copies of DNS and it failed that
> way also.  I am playing around with this configuration using evaluation
> versions of both software and I am beginning to wonder if that has anything
> to do with the problem also.
> 
> Ray H
> 
> "ptwilliams" <ptw2001@hotmail.com> wrote in message
> news:OIWn7EoDFHA.1408@TK2MSFTNGP10.phx.gbl...
> > So you've got two 2003 boxes running in default 2000 native, and have a
> 2000
> > member that you can't promote to a DC?  The 2000 box is also pulling a
> > secondary copy of the DNS zone(s) yes?
> >
> > Delete the zone(s) on the 2000 box and point the 2000 box at the 2003
> > servers for DNS.  Run dcpromo again.
> >
> > I'll see if I can test this just to rule out not being able to add a 2000
> > box after the forest has been created with 2003...
> >
> > -- 
> >
> > Paul Williams
> >
> > http://www.msresource.net/
> > http://forums.msresource.net/
> >
> > "Ray H" <ray_heid@compuserve.com> wrote in message
> > news:u6DXKhiDFHA.1260@TK2MSFTNGP12.phx.gbl...
> > Thanks for the thought.  By default the 2003 installs in 2000 mixed mode
> and
> > forest of 2000.  I was thinking possibly a DNS problem but I can't seem to
> > find anything wrong there.  I have DNS installed on both machines with the
> > 2003 server using Active Directory.  I have the W2K machine set up to
> > replicate zones as a backup.  Testing with Nslookup show both servers
> > providing the proper name resolution when queried.
> >
> > Ray H
> >
> > "deribro" <deribro@discussions.microsoft.com> wrote in message
> > news:E8DF48EE-C73B-4FB1-B48D-AAC495EF151D@microsoft.com...
> > > hi i've found out that you can use a w2k server as a bdc for a 2003
> schema
> > > master, but you may need to enable mixed mode. i'm not sure on which
> > server
> > > though?
> > > derek
> > >
> > > "Ray H" wrote:
> > >
> > > > I am trying to do the same thing but I am running into a problem.
> When
> > I
> > > > try to add the W2K server into AD as an additional controller it fails
> > with
> > > > an error message of: failure in the ldap read of operational
> attributes.
> > I
> > > > have searched on the MS website for information and found articles
> > dealing
> > > > with server deletions and FSMO roles but these are both brand new
> > default
> > > > installs (test lab stuff).  Any ideas what the source of this error
> is?
> > > >
> > > > Ray Heidbrink
> > > >
> > > > "ptwilliams" <ptw2001@hotmail.com> wrote in message
> > > > news:ueL1Y$TDFHA.1396@tk2msftngp13.phx.gbl...
> > > > > It's not really a backup in the sense of an NT BDC, but yes you can
> > have a
> > > > > 2000 DC running alongside the 2003 DC as long as you've not changed
> > the
> > > > > domain and forest modes.
> > > > >
> > > > >
> > > > > -- 
> > > > >
> > > > > Paul Williams
> > > > >
> > > > > http://www.msresource.net/
> > > > > http://forums.msresource.net/
> > > > >
> > > > > "deribro" <deribro@discussions.microsoft.com> wrote in message
> > > > > news:342D6473-2CB0-4F9E-AD0F-B1FC4CC8C2E4@microsoft.com...
> > > > > hi
> > > > > can anyone tell me if i can built a w2k server for use as a backup
> > domain
> > > > > controller for my primary domain controller which is windows 2003
> > server
> > > > > standard ed.
> > > > > reason: i have only 1 win 2003 server license and 1 win 2000 server
> > > > license.
> > > > > I need to be able to backup active directory and accounts etc
> > > > > derek
> > > > >
> > > > >
> > > >
> > > >
> > > >
> >
> >
> >
> 
> 
>

Relevant Pages

  • Re: fSMORoleOwner in CN=Infrastructure DomainDNSZones & ForestDNSZ
    ... any issues with the way DNS is configured either. ... Servers in the configs, etc. DC2 is also a DNS server, it's doesn't throw ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... Always test ANY suggestion in a test environment before implementing! ...
    (microsoft.public.windows.server.active_directory)
  • Re: Production & Test Domains
    ... So in this example, in the Test DNS, create an entry for www in the domain zone and point it to the IP address of the Production web server. ... www.xyz.com goes to production and test.xyz.com goes to an internal test environment. ...
    (microsoft.public.windows.server.dns)
  • Issues migrating SBS 2003 domain to Server 2008 Standard
    ... We are stuck migrating our SBS 2003 domain to Server 2008. ... Fatal Error:DsGetDcName (SRV-EXCH) call failed, ... Verify your Domain Name Sysytem (DNS) is ... network connectivity to a domain controller. ...
    (microsoft.public.windows.server.sbs)
  • Re: AD management snap in cannot find DC (netdiag /v workstation)
    ... The name.local entries are used by my apache server to implement ... change button, more button, the "Primary DNS suffix of this ... Attr: subschemaSubentry ... Owner of the binding path: ...
    (microsoft.public.windows.server.active_directory)
  • Re: AD management snap in cannot find DC (netdiag /v workstation)
    ... button, more button, the "Primary DNS suffix of this computer", it should ... The Security System could not establish a secured connection with the server ... Attr: subschemaSubentry ... Owner of the binding path: ...
    (microsoft.public.windows.server.active_directory)