Windows Forum

Ask something
Discussion Locked

Active Directory issue

0 helpful
7 replies

by quintar51

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi,

I recently rebuilt a server from scratch.
Formatted the HD, installed w2k sp3, installed DNS and ran DCPROMO.

The promotion goes without a hitch, and my local admin account does get upgraded to an enterprise admin account. However, when I tried installing exch2k with /forestprep, I received an error stating that I don't have permission to modify the schema.

I checked all permission on my enterprise admin account again. It does belong to both the enterprise admin group and theschema masters group. I added the schema snap-in, right-clicked on Active Directory Schema and went to Operations Masters. Normally, I am allowed to 'enable the schema to be modified on this domain controller', but in this case, it was grayed out.

I created a new user, added him to the enterprise admin group, and the same problem happens. I then demoted the DC and promoted it again, but the problem is still happening. I had to demote the server for now, until I can figure out what's causing this.

ANY IDEAS OUT THERE??

7 replies

by acattr

1. make sure your server can communicate with the global catalog server

2. is the "Remote Registry" service running on the server?

3. This issue may occur if Setup cannot contact the Schema Master or the other operations master role holders. http://tinyurl.com/4m4v to make sure all FSMO roles are assigned properly.

4. http://tinyurl.com/4m4w, another article describing answer 3.

by quintar51

I only have one server, and it is the GC. I did however disable the remote registry service, since I thought it would improve security and performance. oops :) thanks.

by azizhakim

By default your first server will hold all 5 fsmo roles.Run c:\dcdiag /test:knowsofroleholders /v.Since it is first install dc will hold all 5 roles.
If you have install resource kit tools from support dir on your server cd,you will need to register schema mgmt dll,thus c;\regsvr32 schmmgmt.dll.you will be notified of registration.Open mmc add schema management console.right click,bring up operation master,Check box schema may be modified.You could also enable schema writes with registry entryhklm\system\c c set\services\ntds\parameters add new D_word SchemaUpdatesAllowed set it to 1.Run forestprep.Hope I helped

This discussion is closed to new replies.