Exchange Server Forums

You do not have the rights required to upgrade the AD schema

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2000] >> Installation >> You do not have the rights required to upgrade the AD schema

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

You do not have the rights required to upgrade the AD s... - 3.Jul.2002 9:38:00 PM

AngeloO

Posts: 8
Joined: 3.Jul.2002
From: Italy
Status: offline

In a network I have 4 x Winnt4.0 Srv BDC e 1 x W2K Domain Controller
(Global Catalog); attempting to install the Active Directory Connector
on the GC (Win2k Domain Controller) to join to a 5.5 Exchange Site in the same domain
I receive this msg: " You do not have the rights required to upgrade the AD schema " !

The W2k Server has been upgraded to Win2k from a NT4 Server Pdc !

No errors during the upgrade and neither during the Active Directory Migration.
The DNS Service is installed on the W2k Server (Active Directory Integrated).

Already checked the integrity of the Active Directory through the MSTOOLS :

NETDIAG
DCDIAG

All the five FSMO roles results be on the Server Win2K (it's a global catalog):
RID Master, FSMO-PDC Emulator, Infrastructure Master FSMO, Domain Naming Master FSMO,
Schema Master FSMO.

No errors in the event viewer.

In Active Directory Schema flagged the voice
"the Schema may be modified on this Domain Controller".

No other issues on the network , but I can't Install Exchange Server 2000 .

The user account I'm using for the job is member of
Scheda Admins, Domain Admins, Enterprise Admins, Administrators.

The log file generated by Active Directory Connector
includes this:

-Leaving ScGetSchemaVersion
CedsContext::ScInitCompSelected (i:\admin\src\edss\edssetup\edssetup.cxx:406)
Error code 0xc0070002 (2) : The system cannot find the file specified
-ScRunLDIFScript (i:\admin\src\libs\exsetup\exmisc.cxx:1267)
Error code 0xc007200e (8206): The directory service is busy
-DS or RPC is busy. Sleep 250ms
-ScImportActiveDSSchemaChanges (i:\admin\src\libs\exsetup\exmisc.cxx:
The directory service is busy
................ and so on..

Already checked the remote logging service started.

The server got 2GB of Ram , 2 CPU x PIII 1Ghz and
1 raid 5 SCSI HW.
The server doesn't have other softwares installed:
already Windows 2000 Server SP2;
the Active directory connector uses is the SP2.

Tips ??

Thanks

Angelo Orlando (MCP)

Post #: 1

Featured Links*

RE: You do not have the rights required to upgrade the ... - 4.Jul.2002 2:03:00 AM

DaDougInc

Posts: 827
Joined: 17.May2002
From: NC
Status: offline

Here are a few items to check:

1) Be sure that you have local admin rights to that particular server. Check the permissions for the Temp directory so that the account you are logged on has 'Full Control' to the folder.
Verify that the Temp directory Environment Variable is appearing as Drive:\Winnt\Temp rather
then %USERPROFILE%\Local Settings\Temp.

2) Reboot the GC and if Exchange is on a W2K DC, be sure to change the LDAP port from 389 to 390 (per Q312501)

3) Be sure that ALL Antivirus and/or 3rd party products are temporarily disabled

4) Verify that the TCP/IP settings are pointed to the Internal DNS servers ONLY and that these servers are running fine (probably is with the Netdiag response).

5) Be sure to follow Q253286 - XADM: ADC Installation Requirements

6) Try installing on another W2K server (not the GC itself) - maybe considering bringing in another W2K DC.

7) Triple check your permissions within Active Directory

8) Are you using the Exchange Sp2 ADC?

Let me know what fixes this for personal reference! Thanks and Good Luck!

(in reply to AngeloO)

Post #: 2

RE: You do not have the rights required to upgrade the ... - 4.Jul.2002 12:15:00 PM

AngeloO

Posts: 8
Joined: 3.Jul.2002
From: Italy
Status: offline

For DaDogInc:

thanks for the tips but still nothing;
below the last checks I did.

1) Be sure that you have local admin rights to that particular server. Check the permissions for the Temp directory so that the account you are logged on has 'Full Control' to the folder.
Verify that the Temp directory Environment Variable is appearing as Drive:\Winnt\Temp rather
then %USERPROFILE%\Local Settings\Temp.

RE: Done.It's all OK

2) Reboot the GC and if Exchange is on a W2K DC, be sure to change the LDAP port from 389 to 390 (per Q312501)

RE: The Exchange Server 5.5 (sp4) is installed on a Windows NT Server 4.0 sp6 BDC in the same domain;no need to change LDAP port on the Win2k Srv.

3) Be sure that ALL Antivirus and/or 3rd party products are temporarily disabled

RE: NO antivirus installed on the Win2K SRV DC(GC)

4) Verify that the TCP/IP settings are pointed to the Internal DNS servers ONLY and that these servers are running fine (probably is with the Netdiag response).

RE: The DNS Server is on the Win2K SRV DC (GC)
as Active Directory Integrated and.No issues
on the DNS Event viewer.The same Win2K SRV DC (GC)
server points on itself (and the other BDC point
to Win2K SRV DC...

5) Be sure to follow Q253286 - XADM: ADC Installation Requirements

RE: Done, it's all OK

6) Try installing on another W2K server (not the GC itself) - maybe considering bringing in another W2K DC.

RE: I've opened an incident with Microst for this issue and I'm waiting an answer

7) Triple check your permissions within Active Directory

RE: triple checked the permission in the Active Directory for the user I'm using to do this job.

8) Are you using the Exchange Sp2 ADC?

RE: Yes, I'm using the Exchange Sp2 ADC:
I've tried too to use the Exchange Sp1 ADC
and the native.

Still nothing

(in reply to AngeloO)

Post #: 3

RE: You do not have the rights required to upgrade the ... - 4.Jul.2002 9:16:00 PM

DaDougInc

Posts: 827
Joined: 17.May2002
From: NC
Status: offline

Tough issue - let me know the results from Microsoft tech support so I can learn too!

Thanks and good luck!

(in reply to AngeloO)

Post #: 4

RE: You do not have the rights required to upgrade the ... - 4.Jul.2002 10:05:00 PM

AngeloO

Posts: 8
Joined: 3.Jul.2002
From: Italy
Status: offline

Talked with Microsoft: I sent them the configuration of my Win2k DC GC, the log generated
by Active directory connector.
Basically MS said me to do all the checks of your list in the previous post.
The steps I followed for the migration were corrects and they don't have explanations about the reason this happened to me (but I'm not the first they said me).
Generally this happened using a migration server for the migration to Active Directory :
NT 4.0 Srv BDC - promoted to PDC - Upgraded to Win2K and AD -
installation of the new main server Win2K Srv Dc and
transfering on the main server of the roles
depromotion of the migration server.

Through ADSI Edit I still checked the 5 roles FSMO and so on.. all correct ... for MS
in the Active Directory Schema of the domain there're not problems.

Before to pass my Incident to the high planes they said me to try promoting another Win2K Server
to Domain Controller and to promote it to Global Catalog and to transfer on it all the 5 roles.

Done this I tried to execute the Active Directory Connector from my first Win2K DC and all's worked.

Tomorrow I'll be back to the customer to go on with the installation.
MS said me to pass back on the first server Win2K Srv DC the 5 roles and after of this to execute the Exchange 2000 Server setup /FORESTPREP to verify the final resolution of the issues.

My doubts were (and maybe still are) on this procedure,I thought : if I promote another server to
Domain Controller it will take the same AD Schema from my first DC.Luckly it was not so.

ThaNKS FOR THE TIPS

(in reply to AngeloO)

Post #: 5