"Operation Failed" Error Message When You Use Windows 2000 DCPROMO to Source Active Directory from a Windows Server 2003 Domain Controller (328909)


The information in this article applies to:

  • Microsoft Windows Server 2003, 64-Bit Datacenter Edition
  • Microsoft Windows Server 2003, 64-Bit Enterprise Edition
  • Microsoft Windows Server 2003, Datacenter Edition
  • Microsoft Windows Server 2003, Enterprise Edition
  • Microsoft Windows Server 2003, Standard Edition
  • Microsoft Windows Small Business Server 2003, Premium Edition
  • Microsoft Windows Small Business Server 2003, Standard Edition
This article was previously published under Q328909

SYMPTOMS

If you try to use the Microsoft Windows 2000 Active Directory Installation Wizard (DCPROMO) to source Active Directory from a Windows Server 2003 domain controller that is hosting application partitions, you may receive the following error message in the Dcpromo.log and Dcpromoui.log file dialog boxes:
The operation failed because:

An ldap read of operational attribute from fqdn of source dc
"An error occurred while installing the directory service.
For more information, see the log."

CAUSE

Windows 2000 domain controllers must have Windows 2000 Service Pack 2 (SP2) or later installed to use DCPROMO to source Active Directory from a Windows Server 2003 domain controller. This issue occurs if you do not have SP2 or later installed in this scenario.

MORE INFORMATION

The Active Directory Installation Wizard (DCPROMO) adds additional domain controllers to the forest in the following roles:
  • An additional (replica) domain controller in an existing domain.
  • A new child domain in an existing tree.
  • A new tree in an existing forest.
After you receive the error message described in the "Symptoms" section, the Dcpromo.log file reports the following:
...
MM/DD HH:MM:SS [INFO] Examining existing Enterprise Directory Service
MM/DD HH:MM:SS [INFO] Error - An ldap read of operational attributes from server <source dc>.<domain name> failed. (8200)
MM/DD HH:MM:SS [INFO] NtdsInstall for CORP.COM returned 8200
MM/DD HH:MM:SS [INFO] DsRolepInstallDs returned 8200
MM/DD HH:MM:SS [ERROR] Failed to install to Directory Service (8200)
...
And the Dcpromoui.log reports the following:
dcpromoui t:0x454 01378        OperationStatus      : 0x2008 !0 => error 
dcpromoui t:0x454 01379        DisplayString        : An ldap read of operational attributes from server DC01.CORP.COM failed. 
..
dcpromoui t:0x454 01382        Enter State::SetOperationResultsMessage An ldap read of operational attributes from server DC01.CORP.COM failed. 
dcpromoui t:0x454 01383        Exit  State::SetOperationResultsMessage An ldap read of operational attributes from server DC01.CORP.COM failed. 
dcpromoui t:0x454 01384      Exit  DoProgressLoop 
dcpromoui t:0x454 01385    Exit  DS::CreateReplica 
..
dcpromoui t:0x454 01389    Active Directory Installation Failed 
dcpromoui t:0x454 01390    Enter GetErrorMessage 80072008 
dcpromoui t:0x454 01391    Exit  GetErrorMessage 80072008 
dcpromoui t:0x454 01392    An error occurred while installing the directory service. For more information, see the event log.  
dcpromoui t:0x454 01393    Enter State::SetOperationResults result FAILURE 
dcpromoui t:0x454 01394    Exit  State::SetOperationResults result FAILURE 
dcpromoui t:0x454 01395    Enter ComposeFailureMessage 
dcpromoui t:0x454 01396      Enter State::GetOperationResultsMessage An ldap read of operational attributes from server DC01.CORP.COM failed. 
dcpromoui t:0x454 01397      Exit  State::GetOperationResultsMessage An ldap read of operational attributes from server DC01.CORP.COM failed. 
dcpromoui t:0x454 01398      Enter State::SetFailureMessage The operation failed because:

An ldap read of operational attributes from server DC01.CORP.COM failed.

"An error occurred while installing the directory service. For more information, see the event log. " 
dcpromoui t:0x454 01399      Exit  State::SetFailureMessage The operation failed because:

An ldap read of operational attributes from server DC01.CORP.COM failed.

"An error occurred while installing the directory service. For more information, see the event log. " 
dcpromoui t:0x454 01404    posting failure message to progress window 
dcpromoui t:0x454 01405  Exit  PromoteThreadProc 
dcpromoui t:0x294 01406              Enter ProgressDialog::OnDestroy 
dcpromoui t:0x294 01407              Exit  ProgressDialog::OnDestroy 
dcpromoui t:0x294 01408            Exit  Dialog::ModalExecute 
dcpromoui t:0x294 01409            OPERATION FAILED 
dcpromoui t:0x294 01410          Exit  DoOperation 
dcpromoui t:0x294 01411          Enter Wizard::SetNextPageID id = 156 
dcpromoui t:0x294 01412          Exit  Wizard::SetNextPageID id = 156 
dcpromoui t:0x294 01413        Exit  ConfirmationPage::OnWizNext 
dcpromoui t:0x294 01414        Enter FailurePage::OnInit 
dcpromoui t:0x294 01415        Exit  FailurePage::OnInit 
dcpromoui t:0x294 01416        Enter FailurePage::OnSetActive 
dcpromoui t:0x294 01417          Enter State::GetOperationResultsCode FAILURE 
dcpromoui t:0x294 01418          Exit  State::GetOperationResultsCode FAILURE 
dcpromoui t:0x294 01419          Enter State::GetFailureMessage The operation failed because:

An ldap read of operational attributes from server DC01.CORP.COM failed.

"An error occurred while installing the directory service. For more information, see the event log. " 
dcpromoui t:0x294 01420          Exit  State::GetFailureMessage The operation failed because:

WORKAROUND

To work around this issue, first determine whether the target domain or forest mode is compatible with Windows 2000 domain controllers (for example, the domain or forest functional level has not been advanced to a Windows Server 2003 domain or forest functional level). Then, install Windows 2000 SP2 or later on the Windows 2000 domain controller that is being promoted.
Modification Type:MajorLast Reviewed:12/19/2003
Keywords:kbprb kberrmsg KB328909
©2003 Microsoft Corporation. All rights reserved.