"The procedure entry point SaferCreateLevel could not be located" error message when you run the Adprep /forestprep command on a slipstream version of Windows Server 2003 that includes the 835732 hotfix (883394)



The information in this article applies to:

  • Microsoft Windows Server 2003, Enterprise Edition
  • Microsoft Windows Server 2003, Datacenter Edition
  • Microsoft Windows Server 2003, Standard Edition

SYMPTOMS

When you run the Adprep /forestprep command on a slipstream version of Microsoft Windows Server 2003 that includes the update that is described in Microsoft Knowledge Base article 835732, you may receive the following error message:
The procedure entry point SaferCreateLevel could not be located in the dynamic link library ADVAPI32.dll.
For additional information about the update in article 835732, click the following article number to view the article in the Microsoft Knowledge Base:

835732 MS04-011: Security Update for Microsoft Windows

CAUSE

This issue occurs because the Adprep.exe utility finds the Schannel.dll file that is available at the install point instead of the Schannel.dll file that is available in the domain controller computer in the %windir%\system32 folder. The version of the Schannel.dll file that resides in the %windir%\system32 folder is the correct binary file for this scenario.

Note Even though you receive the error message that is mentioned in the "Symptoms" section, the Adprep /forestprep command runs successfully.

WORKAROUND

To work around this issue, use one of the following methods.

Method 1: Copy files from the installation point to a temporary folder

  1. Copy the following files from the installation point to a temporary folder on the domain controller:
    • Adprep.exe
    • Sch14-30.ldf
    • Schema.ini
    • All files with .csv extension
    • All files with .cs_ extension
  2. Run the Adprep /forestprepcommand from the temporary folder that you created in step 1.

Method 2: Compress the Schannel.dll file

Compress the Schannel.dll file that is located on the install point by using the Compress.exe utility. The file name extension is changed to "Schannel.dl_" after you compress the file.

To download the Microsoft compress.exe utility that is included with Windows Server 2003 Resource Kit Tools, visit the following Microsoft Web site:Note Alternatively, you can rename the Schannel.dll file by changing the file name extension.

Method 3: Delete all the binaries that are included in the update

Delete the following binary files that are included in the hotfix that is described in Knowledge Base article 835732:
  • Callcont.dll
  • Eventlog.dll
  • H323.tsp
  • H323msp.dll
  • Helpctr.exe
  • Ipnathlp.dll
  • Isasrv.dll
  • Msasn1.dll
  • Mst120.dll
  • Nmcom.dll
  • Rttcdll.dll
  • Schannel.dll
Then, run the Adprep /forestprep command.

Modification Type:MajorLast Reviewed:10/29/2004
Keywords:kbtshoot kbprb KB883394 kbAudITPRO