Microsoft KB Archive/817875

= &quot;Illegal Modify Operation&quot; Error Message When You Use ADSI Edit to Raise the Forest Functional Level to the Windows Server 2003 Interim Level =

Article ID: 817875

Article Last Modified on 12/3/2007

-

APPLIES TO


 * Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
 * Microsoft Windows Server 2003, Standard Edition (32-bit x86)
 * Microsoft Windows Small Business Server 2003 Standard Edition
 * Microsoft Windows Small Business Server 2003 Premium Edition

-



SYMPTOMS
When you use ADSI Edit to raise the forest functional level to the Windows Server 2003 interim functional level (by setting the value of the MsDS-Behavior Version attribute on the CN=Partitions,CN=Configuration,DC= ,DC=com object to 1), you receive the following error message:

Illegal modify operation. Some aspect of the modification is not permitted.

However, when you click OK on the error message, the value of the MsDS-Behavior Version attribute is set to 1, as expected.



CAUSE
This problem occurs if you use ADSI Edit to manually raise the forest functional level from the default Microsoft Windows 2000 Server functional level (where the MsDS-Behavior Version attribute is set to 0) to the Windows Server 2003 interim functional level (where the MsDS-Behavior Version attribute is set to 1).



WORKAROUND
To work around this problem, use either of the following methods:  You can safely ignore the error message described in the &quot;Symptoms&quot; section of this article. When you click OK on the error message, the attribute on the Partitions container and the domain head are set correctly to 1.

To make sure that the forest functional level is raised to the Windows Server 2003 interim level, perform one or both of the following tasks:  Refresh the attribute list in ADSI Edit, and then verify that the MsDS-Behavior Version attribute is set to 1. Verify the forest functional level in the domain properties:  Start Active Directory Domains and Trusts, right-click  , and then click Properties. Click the General tab, and then verify that the correct level is displayed under Forest functional level. </ul> </li> Use Active Directory Domains and Trusts to raise the forest functional level. For additional information about how to do so, click the following article number to view the article in the Microsoft Knowledge Base:

322692 HOW TO: Raise the Domain Functional Level in Windows Server 2003

</li></ul>

<div class="status_section">

STATUS
Microsoft has confirmed that this is a bug in the Microsoft products that are listed at the beginning of this article.

<div class="moreinformation_section">

MORE INFORMATION
For more information about domain and forest functionality in Windows Server 2003, visit the following Microsoft Web site:

http://technet2.microsoft.com/WindowsServer/en/library/b3674c9b-fab9-4c1e-a8f6-7871264712711033.mspx?mfr=true

Keywords: kbpending kbbug KB817875

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.