Re: Error while trying to upgrade a Windows 2000 Server domain

Run diagnostics against your Active Directory domain.

If you don't have the support tools installed, install them from your server install disk.
d:\support\tools\setup.exe

Run dcdiag, netdiag and repadmin in verbose mode.
-> DCDIAG /V /C /D /E /s:yourdcname > c:\dcdiag.log
-> netdiag.exe /v > c:\netdiag.log (On each dc)
-> dnslint /ad /s "ip address of your dc"

**Note: Using the /E switch in dcdiag will run diagnostics against ALL dc's in the forest. If you have significant numbers of DC's this test could generate significant detail and take a long time. You also want to take into account slow links to dc's will also add to the testing time.

If you download a gui script I wrote it should be simple to set and run (DCDiag and NetDiag). It also has the option to run individual tests without having to learn all the switch options. The details will be output in notepad text files that pop up automagically.

The script is located on my website at http://www.pbbergs.com/windows/downloads.htm

Just select both dcdiag and netdiag make sure verbose is set. (Leave the default settings for dcdiag as set when selected)

When complete search for fail, error and warning messages.

Description and download for dnslint
http://support.microsoft.com/kb/321045


--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.


"CAC.MCCTELECOM" <cac@xxxxxxxxxxxxx> wrote in message news:OZxsFd%23oJHA.1292@xxxxxxxxxxxxxxxxxxxxxxx
Hello, Paul.

First of all, thank you very much for your response.

The domain has a single domain controller, and it holds the five roles: schema, rid, infrastructure, PDC, and domain.

Additionally, I've checked that the administrator account, which I use to perform the schema update, belongs to the Schema Admins security group.

Anything else I could try? Next thing in my list is using ADSIEdit to mess up with the schema a little... I guess I'm already desperate enough. :-)

Best regards,
Jose Luis.




"Paul Bergson [MVP-DS]" <pbbergs@xxxxxxxxxxxxxxx> escribió en el mensaje news:9E3E2132-93ED-46F5-A92B-AAF661253606@xxxxxxxxxxxxxxxx
Is this dc the schema master and is the account performing the adprep in the schema admins security group? You can get wierd errors unrelated to the actual issue. I don't know if this is the case but see if that helps.


--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.


"CAC.MCCTELECOM" <cac@xxxxxxxxxxxxx> wrote in message news:%23aqA7uuoJHA.1172@xxxxxxxxxxxxxxxxxxxxxxx
Dear all,

I'm trying to upgrade a Windows 2000 Server domain to Windows Server 2003
R2. While I'm running the command adprep /forestprep in the 2nd CD to
upgrade the Windows 2000 domain controller, I get the following error:

Add error on line 1327: Unwilling To Perform
The server side error is "Schema update failed: attribute in may-contain
does not exist."
84 entries modified successfully.
An error has occurred in the program
ERROR: Import from file C:\WINNT\system32\sch31.ldf failed. Error file is
saved in ldif.err.31.



In the ldif.err.31 file it appears the following text:

Entry DN: CN=IpProtocol,CN=Schema,CN=Configuration,DC=ederfil,DC=local
Add error on line 1327: Unwilling To Perform
The server side error is "Schema update failed: attribute in may-contain
does not exist."
An error has occurred in the program


Additionally, the ADPrep.log file showed a text stating that Adprep
correctly verified if Windows Services for Unix where installed or not, and
that it verified that hotfix Q293783 was not applied.

The Windows 2000 DC has Windows Services for Unix v3.0 installed, and so
several hotfixes available from Microsoft, such as 919938 and 293783, which
apply for Windows Services for Unix v2.0, are not useful here, as far as I
know (anyway I applied them, but to no avail).

I have tried upgrading Windows Services for Unix up to version 3.5, but
still I cannot apply the sch31.ldf upgrade.

Has any of you encountered a similar problem? Is there any additional hotfix
I could try? Any suggestions would be much appreciated.

Best regards,
Jose Luis.








.

Relevant Pages