Unable to Raise Domain Functional Level
- From: EOrtiz <EOrtiz@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Tue, 18 Apr 2006 06:32:02 -0700
Hello All,
Any help provided would be greatly appreciated. All servers in my
environment are Windows 2003 server throughout the forest. One child domain
has previously had it's functional level raised without any problems. When
trying to raising another child domain from Windows 2000 Native to Windows
Server 2003 domain functional level, I get the following error:
The functional level could not be raised. The error is: The server is
unwilling to process the request.
Now when I run dcdiag, I receive the following (I've limited the text below
to the errors :
Starting test: VerifyEnterpriseReferences
The following problems were found while verifying various important DN
references. Note, that these problems can be reported because of latency in
replication. So follow up to resolve the following problems, only if the
same problem is reported on all DCs for a given domain or if the problem
persists after replication has had reasonable time to replicate changes.
[1] Problem: Missing Expected Value
Base Object: CN=LostAndFoundConfig,CN=Configuration,DC=bethco,DC=local
Base Object Description: "Server Object"
Value Object Attribute: serverReference
Value Object Description: "DC Account Object"
Recommended Action: This could hamper authentication (and thus replication,
etc). Check if this server is deleted, and if so clean up this DCs Account
Object. If the problem persists and this is not a deleted DC, authoratively
restore the DSA object from a good copy, for example the DSA on the DSA's
home server.
CNR-PR-DOMA00 failed test VerifyEnterpriseReferences
Additionally, when I run DNSLint, I receive the following:
Notes:
One or more DNS servers is not authoritative for the domain
Zone serial numbers were not identical on every DNS server
One or more zone files may have expired
SOA record data was unavailable and/or missing on one or more DNS servers
At least one CNAME record for an AD forest GUID was missing from a DNS server
This is listed for some of the DC's in the child domain that I want to have
the functional level raised. Not sure if this is an issue. As I understand,
DNSLint is only capable of verifiying records for a root domain, not the
records for DC's located in a child. If I am incorrect, by all means please
correct me.
SOA record data from server:
Authoritative name server: Unknown
Hostmaster: Unknown
Zone serial number: Unknown
Zone expires in: Unknown
Refresh period: Unknown
Retry delay: Unknown
Default (minimum) TTL: Unknown
No Domain Controllers have failed or have been removed from our domain.
NTDSUtil doesn't reveal any old DC's lurking about in the metadata. I've
been googling the above error phrases without much luck.
Any help provided would be greatly appreciated.
.
- Follow-Ups:
- Re: Unable to Raise Domain Functional Level
- From: Herb Martin
- Re: Unable to Raise Domain Functional Level
- Prev by Date: Re: ADMT as Domain rename tool ? Advice needed Use RENDOM instead?
- Next by Date: Re: DCPROMO 2003 Advanced Server, forest version incorrect
- Previous by thread: RE: Migration from Windows server 2003 to SBS 2003 Premium
- Next by thread: Re: Unable to Raise Domain Functional Level
- Index(es):
Relevant Pages
|
Loading