Microsoft KB Archive/328909

= &quot;Operation Failed&quot; Error Message When You Use Windows 2000 DCPROMO to Source Active Directory from a Windows Server 2003 Domain Controller =

Article ID: 328909

Article Last Modified on 12/3/2007

-

APPLIES TO


 * Microsoft Windows Server 2003, 64-Bit Datacenter Edition
 * Microsoft Windows Server 2003, Enterprise x64 Edition
 * Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
 * Microsoft Windows Server 2003, Standard Edition (32-bit x86)
 * Microsoft Windows Small Business Server 2003 Premium Edition
 * Microsoft Windows Small Business Server 2003 Standard Edition

-



This article was previously published under Q328909



SYMPTOMS
If you try to use the Microsoft Windows 2000 Active Directory Installation Wizard (DCPROMO) to source Active Directory from a Windows Server 2003 domain controller that is hosting application partitions, you may receive the following error message in the Dcpromo.log and Dcpromoui.log file dialog boxes:

The operation failed because:

An ldap read of operational attribute from fqdn of source dc

&quot;An error occurred while installing the directory service.

For more information, see the log.&quot;



CAUSE
Windows 2000 domain controllers must have Windows 2000 Service Pack 2 (SP2) or later installed to use DCPROMO to source Active Directory from a Windows Server 2003 domain controller. This issue occurs if you do not have SP2 or later installed in this scenario.



MORE INFORMATION
The Active Directory Installation Wizard (DCPROMO) adds additional domain controllers to the forest in the following roles:
 * An additional (replica) domain controller in an existing domain.
 * A new child domain in an existing tree.
 * A new tree in an existing forest.

After you receive the error message described in the &quot;Symptoms&quot; section, the Dcpromo.log file reports the following: ... MM/DD HH:MM:SS [INFO] Examining existing Enterprise Directory Service MM/DD HH:MM:SS [INFO] Error - An ldap read of operational attributes from server. failed. (8200) MM/DD HH:MM:SS [INFO] NtdsInstall for CORP.COM returned 8200 MM/DD HH:MM:SS [INFO] DsRolepInstallDs returned 8200 MM/DD HH:MM:SS [ERROR] Failed to install to Directory Service (8200) ... And the Dcpromoui.log reports the following: dcpromoui t:0x454 01378       OperationStatus      : 0x2008 !0 => error dcpromoui t:0x454 01379       DisplayString        : An ldap read of operational attributes from server DC01.CORP.COM failed. .. dcpromoui t:0x454 01382       Enter State::SetOperationResultsMessage An ldap read of operational attributes from server DC01.CORP.COM failed. dcpromoui t:0x454 01383       Exit  State::SetOperationResultsMessage An ldap read of operational attributes from server DC01.CORP.COM failed. dcpromoui t:0x454 01384     Exit  DoProgressLoop dcpromoui t:0x454 01385   Exit  DS::CreateReplica .. dcpromoui t:0x454 01389   Active Directory Installation Failed dcpromoui t:0x454 01390   Enter GetErrorMessage 80072008 dcpromoui t:0x454 01391   Exit  GetErrorMessage 80072008 dcpromoui t:0x454 01392   An error occurred while installing the directory service. For more information, see the event log. dcpromoui t:0x454 01393   Enter State::SetOperationResults result FAILURE dcpromoui t:0x454 01394   Exit  State::SetOperationResults result FAILURE dcpromoui t:0x454 01395   Enter ComposeFailureMessage dcpromoui t:0x454 01396     Enter State::GetOperationResultsMessage An ldap read of operational attributes from server DC01.CORP.COM failed. dcpromoui t:0x454 01397     Exit  State::GetOperationResultsMessage An ldap read of operational attributes from server DC01.CORP.COM failed. dcpromoui t:0x454 01398     Enter State::SetFailureMessage The operation failed because:

An ldap read of operational attributes from server DC01.CORP.COM failed.

&quot;An error occurred while installing the directory service. For more information, see the event log. &quot; dcpromoui t:0x454 01399     Exit  State::SetFailureMessage The operation failed because:

An ldap read of operational attributes from server DC01.CORP.COM failed.

&quot;An error occurred while installing the directory service. For more information, see the event log. &quot; dcpromoui t:0x454 01404   posting failure message to progress window dcpromoui t:0x454 01405 Exit  PromoteThreadProc dcpromoui t:0x294 01406             Enter ProgressDialog::OnDestroy dcpromoui t:0x294 01407             Exit  ProgressDialog::OnDestroy dcpromoui t:0x294 01408           Exit  Dialog::ModalExecute dcpromoui t:0x294 01409           OPERATION FAILED dcpromoui t:0x294 01410         Exit  DoOperation dcpromoui t:0x294 01411         Enter Wizard::SetNextPageID id = 156 dcpromoui t:0x294 01412         Exit  Wizard::SetNextPageID id = 156 dcpromoui t:0x294 01413       Exit  ConfirmationPage::OnWizNext dcpromoui t:0x294 01414       Enter FailurePage::OnInit dcpromoui t:0x294 01415       Exit  FailurePage::OnInit dcpromoui t:0x294 01416       Enter FailurePage::OnSetActive dcpromoui t:0x294 01417         Enter State::GetOperationResultsCode FAILURE dcpromoui t:0x294 01418         Exit  State::GetOperationResultsCode FAILURE dcpromoui t:0x294 01419         Enter State::GetFailureMessage The operation failed because:

An ldap read of operational attributes from server DC01.CORP.COM failed.

&quot;An error occurred while installing the directory service. For more information, see the event log. &quot; dcpromoui t:0x294 01420         Exit  State::GetFailureMessage The operation failed because:



WORKAROUND
To work around this issue, first determine whether the target domain or forest mode is compatible with Windows 2000 domain controllers (for example, the domain or forest functional level has not been advanced to a Windows Server 2003 domain or forest functional level). Then, install Windows 2000 SP2 or later on the Windows 2000 domain controller that is being promoted.

Keywords: kbprb kberrmsg KB328909

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.