Solved

Windows 2003 Server -- raise "forest level" error ?

Posted on 2014-12-10
3
514 Views
Last Modified: 2014-12-23
I logged into my Windows 2003 Standard 32bit Server "domain controller" as administrator on the DOMAIN (not local PC), tried to raise the FOREST FUNCTIONAL LEVEL from 2000 to 2003 so it matches the server's DOMAIN FUNCTIONAL LEVEL, and got a "you do not have sufficient privilege to raise the forest functional level" error.

Anyone have possible solutions ?
0
Comment
Question by:finance_teacher
  • 2
3 Comments
 
LVL 33

Accepted Solution

by:
it_saige earned 500 total points
ID: 40491635
Make sure that the user you used is -
a member of either the Domain Admins group (in the forest root domain) or the Enterprise Admins group in Active Directory
Source

-saige-
0
 

Author Comment

by:finance_teacher
ID: 40491712
Steps
 1. logged into DC as administrator on the DOMAIN (not local PC)
 2. opened AD User/Groups
 3. tried to add the below per your suggestion
 4. get "you do not have permission to modify the group ROOT/TLD/Users/Enterprise Admins" ... error

How can I find out which administrator type account
can grant my administrator account access to this ?
0
 
LVL 33

Assisted Solution

by:it_saige
it_saige earned 500 total points
ID: 40491733
Look at your users group memberships:

Example -Capture.JPG
Or the members of the Enterprise Admins group:

Example -Capture.JPG
-saige-
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Resolve DNS query failed errors for Exchange
Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question