"Illegal Modify Operation" Error Message When You Use ADSI Edit to Raise the Forest Functional Level to the Windows Server 2003 Interim Level (817875)
The information in this article applies to:
- Microsoft Windows Server 2003, Datacenter Edition
- Microsoft Windows Server 2003, Enterprise Edition
- Microsoft Windows Server 2003, Standard Edition
- Microsoft Windows Small Business Server 2003, Standard Edition
- Microsoft Windows Small Business Server 2003, Premium Edition
SYMPTOMSWhen you use ADSI Edit to raise the forest functional level
to the Windows Server 2003 interim functional level (by setting the value of
the MsDS-Behavior Version attribute on the
CN=Partitions,CN=Configuration,DC= ForestRootDomain,DC=com
object to 1), you receive the following error message: Illegal modify operation. Some aspect of the modification is not permitted. However, when you click OK on the error message,
the value of the MsDS-Behavior Version attribute is set to 1,
as expected. CAUSEThis problem occurs if you use ADSI Edit to manually raise
the forest functional level from the default Microsoft Windows 2000 Server functional level
(where the MsDS-Behavior Version attribute is set to 0) to the
Windows Server 2003 interim functional level (where the MsDS-Behavior Version attribute is set to 1).WORKAROUNDTo work around this problem, use either of the following methods:
- You can safely ignore the error message described in the "Symptoms" section of this article. When you click OK
on the error message, the attribute on the Partitions container and the domain
head are set correctly to 1.
To make sure that the forest functional
level is raised to the Windows Server 2003 interim level, perform one or both of the
following tasks:
- Refresh the attribute list in ADSI Edit, and then verify
that the MsDS-Behavior Version attribute is set to 1.
- Verify the forest functional level in the domain properties:
- Start Active Directory Domains and Trusts, right-click
DomainName, and then click
Properties.
- Click the General tab, and then
verify that the correct level is displayed under Forest functional
level.
- Use Active Directory Domains and Trusts to raise the forest
functional level.
For
additional information about how to do so, click the following article number
to view the article in the Microsoft Knowledge Base:
322692
HOW TO: Raise the Domain Functional Level in Windows Server 2003
STATUS
Microsoft has confirmed that this is a bug in the Microsoft products that are
listed at the beginning of this article.
| Modification Type: | Major | Last Reviewed: | 3/1/2004 |
|---|
| Keywords: | kbpending kbbug KB817875 |
|---|
|