"The version of the Active Directory schema of the source forest is not compatible with the version of Active Directory on this computer."

cookd47
cookd47 used Ask the Experts™
on
I am trying to promote a Windows Server 2003 R2 to an additional domain controler in an Small Business Server 2003  Std (pre SBS R2 release).
I get the following error
"The version of the Active Directory schema of the source forest is not compatible with the version of Active Directory on this computer."

I tried to run the Adprep/ Forestprep and Adprep /domain prep on the SBS 2003 server; both report that Domain information has been updates.

Is tghe a problem with adding the R2 release?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Most Valuable Expert 2018
Distinguished Expert 2018

Commented:
If you're running Server 2003 R2, you need to run yet another adprep /forestprep from the \cmpnents\R2\adprep on the *second* R2 CD.
Error message when you run the Active Directory Installation Wizard: "The version of the Active Directory schema of the source forest is not compatible with the version of Active Directory on this computer"
http://support.microsoft.com/?kbid=917385

Extending Your Active Directory Schema for New Features in Windows Server 2003 R2
http://www.microsoft.com/downloads/details.aspx?familyid=5B73CF03-84DD-480F-98F9-526EC09E9BA8&displaylang=en

Steps for Extending the Schema
http://technet.microsoft.com/en-us/library/cc773360(WS.10).aspx
Top Expert 2009

Commented:
You'll need to update SBS 2003 R2 with the Server 2003 R2 AD Schema.  This is because even though SBS 2003 has the "R2", it doesn't actually include Win2k3 R2
Check out http://www.smallbizserver.net/Default.aspx?tabid=266&articleType=ArticleView&articleId=221
Good luck!

Author

Commented:
Can I run the R/2 adprep on Small Business Server 2003 Std (pre R/2 release)
Acronis in Gartner 2019 MQ for datacenter backup

It is an honor to be featured in Gartner 2019 Magic Quadrant for Datacenter Backup and Recovery Solutions. Gartner’s MQ sets a high standard and earning a place on their grid is a great affirmation that Acronis is delivering on our mission to protect all data, apps, and systems.

Most Valuable Expert 2018
Distinguished Expert 2018

Commented:
Yes; the AD schema is the same for all editions.

Author

Commented:
Adprep failed; here is the log:
Adprep created the log file ADPrep.log under C:\WINNT\system32\debug\adprep\logs\20090718113030 directory.



Adprep copied file F:\CMPNENTS\R2\ADPREP\schema.ini from installation point to local machine under directory C:\WINNT.



Adprep copied file F:\CMPNENTS\R2\ADPREP\sch31.ldf from installation point to local machine under directory C:\WINNT\system32.



Adprep copied file F:\CMPNENTS\R2\ADPREP\dcpromo.csv from installation point to local machine under directory C:\WINNT\system32\debug\adprep\data.



Adprep copied file F:\CMPNENTS\R2\ADPREP\409.csv from installation point to local machine under directory C:\WINNT\system32\debug\adprep\data.



Adprep successfully made the LDAP connection to the local domain controller SHPDC.



Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is (null).



LDAP API ldap_search_s() finished, return code is 0x0



Adprep successfully retrieved information from the local directory service.



Adprep successfully initialized global variables.

[Status/Consequence]

Adprep is continuing.





ADPREP WARNING:



Before running adprep, all Windows 2000 domain controllers in the forest should be upgraded to Windows 2000 Service Pack 1 (SP1) with QFE 265089, or to Windows 2000 SP2 (or later).



QFE 265089 (included in Windows 2000 SP2 and later) is required to prevent potential domain controller corruption.



For more information about preparing your forest and domain see KB article Q331161 at http://support.microsoft.com.



[User Action]

If ALL your existing Windows 2000 domain controllers meet this requirement, type C and then press ENTER to continue. Otherwise, type any other key and press ENTER to quit.



Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is CN=UID,CN=Schema,CN=Configuration,DC=SmithandHassler,DC=com.



LDAP API ldap_search_s() finished, return code is 0x0



Adprep successfully determined whether Microsoft Windows Services for UNIX (SFU) is installed or not. If adprep detected SFU, adprep also verified that Microsoft hotfix Q293783 for SFU has been applied.



Adprep was unable to upgrade the schema on the schema master.

[Status/Consequence]

The schema will not be restored to its original state.

[User Action]

Check the Ldif.err log file in the C:\WINNT\system32\debug\adprep\logs\20090718113030 directory for detailed information.



Adprep set the value of registry key System\CurrentControlSet\Services\NTDS\Parameters\Schema Update Allowed to 0



Adprep was unable to update forest-wide information.

[Status/Consequence]

Adprep requires access to existing forest-wide information from the schema master in order to complete this operation.

[User Action]

Check the log file, Adprep.log, in the C:\WINNT\system32\debug\adprep\logs\20090718113030 directory for more information.



Top Expert 2009

Commented:
yeah, just refer to the link, you'll  be fine

Author

Commented:
The "Link" is for problems with Server 2000
Most Valuable Expert 2018
Distinguished Expert 2018

Commented:
Anything in the ldif.err log file?
Is your account member of the Schema Admins and Enterprise Admins group?
Has this machine been upgraded from W2k to W2k3, or why is systemroot C:\WinNT?

Author

Commented:
There is no ldf file; this is a 7 year old PC; SBS ws reinstalled about 4 months ago after a "system crash"
I am using the Administrator ID
Most Valuable Expert 2018
Distinguished Expert 2018

Commented:
I'm referring to the second to last "[User Action]" in the adprep.log, "Check the Ldif.err log file in the C:\WINNT\system32\debug\adprep\logs\20090718113030 directory for detailed information."
"Using the Administrator ID" doesn't mean anything. Have you verified that this account is actually a member of the two groups?

Author

Commented:
The Administrator ID is a memner of both groups; I checked the folder, there is only an Adprep log, which is included in the case notes
Most Valuable Expert 2018
Distinguished Expert 2018

Commented:
Again: was the inital installation of this SBS a Windows 2000 that has been upgraded, or how did the "C:\WinNT" system folder come about?
Anything in the event log?
Run netdiag.exe and dcdiag.exe on the DC, check for errors.
Windows Server 2003 Service Pack 1 32-bit Support Tools
http://www.microsoft.com/downloads/details.aspx?FamilyID=6ec50b78-8be1-4e81-b3be-4e7ac4f0912d&displaylang=en

Windows Server 2003 Service Pack 2 32-bit Support Tools
http://www.microsoft.com/downloads/details.aspx?FamilyID=96a35011-fd83-419d-939b-9a772ea2df90

Author

Commented:
This is not an upgrade
Nothing in event log
I installed Support Tools and ran test:




C:\Program Files\Support Tools>dcdiag

Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\SHPDC
      Starting test: Connectivity
         ......................... SHPDC passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\SHPDC
      Starting test: Replications
         ......................... SHPDC passed test Replications
      Starting test: NCSecDesc
         ......................... SHPDC passed test NCSecDesc
      Starting test: NetLogons
         ......................... SHPDC passed test NetLogons
      Starting test: Advertising
         ......................... SHPDC passed test Advertising
      Starting test: KnowsOfRoleHolders
         ......................... SHPDC passed test KnowsOfRoleHolders
      Starting test: RidManager
         ......................... SHPDC passed test RidManager
      Starting test: MachineAccount
         ......................... SHPDC passed test MachineAccount
      Starting test: Services
            IsmServ Service is stopped on [SHPDC]
         ......................... SHPDC failed test Services
      Starting test: ObjectsReplicated
         ......................... SHPDC passed test ObjectsReplicated
      Starting test: frssysvol
         ......................... SHPDC passed test frssysvol
      Starting test: frsevent
         ......................... SHPDC passed test frsevent
      Starting test: kccevent
         ......................... SHPDC passed test kccevent
      Starting test: systemlog
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 07/18/2009   14:08:36
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 07/18/2009   14:08:37
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 07/18/2009   14:08:40
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 07/18/2009   14:08:40
            (Event String could not be retrieved)
         ......................... SHPDC failed test systemlog
      Starting test: VerifyReferences
         ......................... SHPDC passed test VerifyReferences

   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom

   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom

   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom

   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom

   Running partition tests on : SmithandHassler
      Starting test: CrossRefValidation
         ......................... SmithandHassler passed test CrossRefValidatio
n
      Starting test: CheckSDRefDom
         ......................... SmithandHassler passed test CheckSDRefDom

   Running enterprise tests on : SmithandHassler.com
      Starting test: Intersite
         ......................... SmithandHassler.com passed test Intersite
      Starting test: FsmoCheck
         ......................... SmithandHassler.com passed test FsmoCheck

C:\Program Files\Support Tools>netdiag

......................................

    Computer Name: SHPDC
    DNS Host Name: shpdc.SmithandHassler.com
    System info : Microsoft Windows Server 2003 (Build 3790)
    Processor : x86 Family 15 Model 2 Stepping 9, GenuineIntel
    List of installed hotfixes :
        KB923561
        KB924667-v2
        KB925398_WMP64
        KB925876
        KB925902-v2
        KB927891
        KB929123
        KB930178
        KB932168
        KB933729
        KB933854
        KB936357
        KB936782
        KB938127
        KB938127-IE7
        KB938464-v2
        KB941569
        KB942830
        KB942831
        KB943055
        KB943460
        KB944338-v2
        KB944653
        KB945553
        KB946026
        KB948496
        KB949014
        KB950760
        KB950762
        KB950974
        KB951066
        KB951748
        KB952004
        KB952069
        KB952954
        KB953838-IE7
        KB954550-v5
        KB954600
        KB955069
        KB955839
        KB956572
        KB956802
        KB957097
        KB958644
        KB958687
        KB958690
        KB959426
        KB960225
        KB960715
        KB960803
        KB961063
        KB961064
        KB961118
        KB961373
        KB961501
        KB963027
        KB963027-IE7
        KB967715
        KB968537
        KB969805
        KB969897-IE7
        KB969897-IE8
        KB969898
        KB970238
        KB970483
        KB971930-IE8
        Q147222


Netcard queries test . . . . . . . : Passed



Per interface results:

    Adapter : Server Local Area Connection

        Netcard queries test . . . : Passed

        Host Name. . . . . . . . . : shpdc
        IP Address . . . . . . . . : 192.168.1.176
        Subnet Mask. . . . . . . . : 255.255.255.0
        Default Gateway. . . . . . : 192.168.1.1
        Primary WINS Server. . . . : 192.168.1.176
        Dns Servers. . . . . . . . : 192.168.1.176


        AutoConfiguration results. . . . . . : Passed

        Default gateway test . . . : Passed

        NetBT name test. . . . . . : Passed
        [WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenge
r Service', <20> 'WINS' names is missing.
            No remote names have been found.

        WINS service test. . . . . : Passed


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
    List of NetBt transports currently configured:
        NetBT_Tcpip_{54596954-3423-45C6-9689-89275EEF7335}
    1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
    [WARNING] You don't have a single interface with the <00> 'WorkStation Servi
ce', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
    PASS - All the DNS entries for DC are registered on DNS server '192.168.1.17
6'.


Redir and Browser test . . . . . . : Passed
    List of NetBt transports currently bound to the Redir
        NetBT_Tcpip_{54596954-3423-45C6-9689-89275EEF7335}
    The redir is bound to 1 NetBt transport.

    List of NetBt transports currently bound to the browser
        NetBT_Tcpip_{54596954-3423-45C6-9689-89275EEF7335}
    The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
    No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

    Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully

C:\Program Files\Support Tools>

Author

Commented:
Checked another SBS SErver (Pre R/2 Premium); the %system% is c:\Windows

I cannot explain why this one is c:\winnt ; It is about a year older
Most Valuable Expert 2018
Distinguished Expert 2018
Commented:
If you haven't done so yet, the next thing I'd try is to simply reboot the machine and try it again.
You might have a look at this article before you try it again; shouldn't be necessary on W2k3, but the WinNT is somewhat strange, unless this was an unattended setup in which someone deliberately used WinNT as systemroot.
Schema Updates Require Write Access to Schema in Active Directory
http://support.microsoft.com/kb/285172

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial