Error when trying to add a domain controller that's Server 2012 R2 in a Server 2003 functional level forest

Below is errors in adprep log on Server 2012 R2

[2015/06/19:08:33:31.926]
LDAP API ldap_search_s finished, return code is 0x0
[2015/06/19:08:33:31.926]
Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is (null).
[2015/06/19:08:33:31.927]
LDAP API ldap_search_ext_s finished, return code is 0x0
[2015/06/19:08:33:31.927]
Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is (null).
[2015/06/19:08:33:31.927]
LDAP API ldap_search_s finished, return code is 0x0
[2015/06/19:08:33:31.927]
Adprep does not find the tokenGroups attribute on the RootDSE object of the Active Directory Domain Controller. This attribute is not avaliable on Windows Server 2003 or lower version of Windows. Adprep will try to obtain token groups from the User object.
[2015/06/19:08:33:31.927]
The parameters /userdomain and /user are not specified. Using current logon user's domain ...
[2015/06/19:08:33:31.934]
Adprep failed to verify whether schema master has completed a replication cycle after last reboot.

[Status/Consequence]

The schema is not upgraded.

[User Action]

Check the log file ADPrep.log in the C:\Windows\debug\adprep\logs\20150619083331-test directory for possible cause of failure.
[2015/06/19:08:33:31.934]
Adprep encountered an LDAP error.

Error code: 0x32. Server extended error code: 0x2098, Server error message: 00002098: SecErr: DSID-03151D80, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0



DSID Info:
DSID: 0x180f0972
ldap error = 0x32
NT BUILD: 9600
NT BUILD: 16384