Article ID: 317842
Article Last Modified on 10/27/2006
APPLIES TO
- Microsoft Windows 2000 Service Pack 1
- Microsoft Windows 2000 Service Pack 2
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Advanced Server
This article was previously published under Q317842
SYMPTOMS
After you apply the Windows 2000 Security Rollup Package 1 (SRP1) to an Active Directory domain controller, you may not be able to read from and write to the userPassword attribute, and you may receive a "Server Unwilling to Perform" error message.
CAUSE
This problem may be caused by a specification change that is included in Windows 2000 SRP1 that disallowed read and write access to the userPassword attribute in Active Directory.
RESOLUTION
A supported hotfix is now available from Microsoft, but it is only intended to correct the problem that is described in this article. Only apply it to systems that are experiencing this specific problem. This hotfix may receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next Windows 2000 service pack that contains this hotfix.
To resolve this problem immediately, contact Microsoft Product Support Services to obtain the fix. For a complete list of Microsoft Product Support Services phone numbers and information about support costs, visit the following Microsoft Web site:
NOTE: In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The typical support costs will apply to additional support questions and issues that do not qualify for the specific update in question.
The English version of this fix should have the following file attributes or later:
Date Time Version Size File name
-----------------------------------------------------------
29-Jan-2002 16:52 5.00.2195.4685 123,664 Adsldp.dll
29-Jan-2002 16:52 5.00.2195.4851 130,832 Adsldpc.dll
29-Jan-2002 16:52 5.00.2195.4016 62,736 Adsmsext.dll
29-Jan-2002 16:52 5.00.2195.4882 356,624 Advapi32.dll
29-Jan-2002 16:52 5.00.2195.4874 135,440 Dnsapi.dll
29-Jan-2002 16:52 5.00.2195.4874 95,504 Dnsrslvr.dll
20-Feb-2002 10:50 5.00.2195.4848 521,488 Instlsa5.dll
20-Feb-2002 10:47 5.00.2195.4894 145,680 Kdcsvc.dll
26-Nov-2001 16:33 5.00.2195.4680 199,440 Kerberos.dll
07-Feb-2002 11:35 5.00.2195.4914 71,024 Ksecdd.sys
16-Jan-2002 15:02 5.00.2195.4848 503,568 Lsasrv.dll
16-Jan-2002 15:02 5.00.2195.4848 33,552 Lsass.exe
07-Dec-2001 16:05 5.00.2195.4745 107,280 Msv1_0.dll
20-Feb-2002 10:47 5.00.2195.4917 306,960 Netapi32.dll
29-Jan-2002 16:52 5.00.2195.4874 359,184 Netlogon.dll
20-Feb-2002 10:47 5.00.2195.4939 916,240 Ntdsa.dll
29-Jan-2002 16:52 5.00.2195.4847 388,368 Samsrv.dll
29-Jan-2002 16:52 5.00.2195.4874 128,784 Scecli.dll
29-Jan-2002 16:52 5.00.2195.4878 299,792 Scesrv.dll
29-Jan-2002 16:52 5.00.2195.4600 48,400 W32time.dll
06-Nov-2001 11:43 5.00.2195.4600 56,592 W32tm.exe
20-Feb-2002 10:47 5.00.2195.4921 125,712 Wldap32.dll
16-Jan-2002 15:02 5.00.2195.4848 503,568 Lsasrv.dll
STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.
MORE INFORMATION
The specification change that is described in the "Cause" section of this article is not included in Windows 2000 Service Pack 3 (SP3). The application of this hotfix reverts the computer to the original Windows 2000 behavior.
For additional information about how to obtain a hotfix for Windows 2000 Datacenter Server, click the article number below to view the article in the Microsoft Knowledge Base:
265173 The Datacenter Program and Windows 2000 Datacenter Server Product
For additional information about how to install multiple hotfixes with only one reboot, click the article number below to view the article in the Microsoft Knowledge Base:
296861 Use QChain.exe to Install Multiple Hotfixes with One Reboot
Keywords: kberrmsg kbbug kbfix kbwin2000presp3fix kbqfe kbenv kbhotfixserver KB317842
