Quantcast
Channel: Directory Services forum
Viewing all articles
Browse latest Browse all 31638

New Replica Of AD LDS Fails When Functional Level Is Too High

$
0
0

I have a simple AD LDS instance setup on a Windows 2016 server:

c:\windows\ADAM\adaminstall /answer:E:\ADLDS\instance3\adaminstall.cfg

with the content of E:\ADLDS\instance3\adaminstall.cfg

[ADAMInstall]
ApplicationPartitionsToReplicate=*
InstallType=Unique
InstanceName=instance2
LocalLDAPPortToListenOn=3891
LocalSSLPortToListenOn=6361
AddPermissionsToServiceAccount=Yes
NewApplicationPartitionToCreate=dc=com
DataFilesPath=E:\ADLDS\instance2\data
LogFilesPath=E:\ADLDS\instance2\log
Administrator=myAdminGroup

I can add a replica instance using the following installfile

[ADAMInstall]
ConfigurationSetLevel=5
ApplicationPartitionsToReplicate=*
InstallType=Replica
InstanceName=instance3
LocalLDAPPortToListenOn=3892
LocalSSLPortToListenOn=6362
DataFilesPath=E:\ADLDS\instance3\data
LogFilesPath=E:\ADLDS\instance3\log
SourceServer=localhost
SourceLDAPPort=3891
Administrator=MyAdminGroup


But if I change the functional level of the first instance to WIN2012R2 (msDS-Behavior-Version=6) before I create the replica instance, the creation of the replica fails:

Active Directory Lightweight Directory Services could not create the NTDS Settings object for this Active Directory Lightweight Directory Services
 instance CN=NTDS Settings,CN=<Server name>$instance3,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,CN={6BA71401-BACF-47A0-A59B-9F8CC
9A6E9C2} on the remote AD LDS instance localhost:3891. Ensure the provided network credentials have sufficient permissions.
Error code: 0x80072177
The version of the operating system installed on this server is incompatible with the functional level of the domain or forest.

This problem is already described in https://jorgequestforknowledge.wordpress.com/category/active-directory-lightweight-directory-services-adlds/functional-level/ but there the author saysthis issue does not exist in Windows 2016 anymore, but apparently it does.

Is there any way one can add a replica to a AD LDS instance where the functional level is on WIN2012R2?


Viewing all articles
Browse latest Browse all 31638

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>