The schema holds the definition of the objects within Active Directory.
It is basically the template of classes of AD objects that defines what
attributes are associated with the class of object. For a good
explanation, click Start, Help, Search and type in "active directory schema
overview" for information about the schema.
A "schema mismatch" means that the schema definitions on one dc doesn't
match that on the other dc. Exchange is one of the applications that
extends the schema so it may have performed this on one dc and not properly
replicated to the other. You may be having AD replication issues.
You can download and run the mpsrpt_dirsvc.exe mpsreports utility from the
following location:
http://www.microsoft.com/downloads/details.aspx?FamilyID=cebf3c7c-7ca5-408f-
88b7-f9c79b7306c0&DisplayLang=en
check the repadmin.txt file (contains results of the repadmin /showreps
command) for AD replication errors and dcdiag.txt (dcdiag /v command) for
errors.
Also, the directory services event viewer log should have a 1203 event
saying what object failed to replicate and a 1481 event saying what
attribute caused the failure. Do you see this in your logs?
--------------------
| From: (e-mail address removed) (Kongo disperato)
| Newsgroups: microsoft.public.win2000.active_directory
| Subject: Re: I hate Schema Mismatch nightmare!!!
| Date: 15 Nov 2003 08:48:39 -0800
| Organization:
http://groups.google.com
| Lines: 186
| Message-ID: <
[email protected]>
| References: <
[email protected]>
<
[email protected]>
| NNTP-Posting-Host: 131.175.53.52
| Content-Type: text/plain; charset=ISO-8859-1
| Content-Transfer-Encoding: 8bit
| X-Trace: posting.google.com 1068914920 15332 127.0.0.1 (15 Nov 2003
16:48:40 GMT)
| X-Complaints-To: (e-mail address removed)
| NNTP-Posting-Date: Sat, 15 Nov 2003 16:48:40 +0000 (UTC)
| Path:
cpmsftngxa06.phx.gbl!cpmsftngxa09.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.su
l.t-online.de!newsfeed01.sul.t-online.de!t-online.de!fu-berlin.de!postnews1.
google.com!not-for-mail
| Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.active_directory:56379
| X-Tomcat-NG: microsoft.public.win2000.active_directory
|
| (e-mail address removed) ("David Pharr [MSFT]") wrote in message
| > I assume you mean 8418 - open a command prompt and type "net helpmsg
| > 8418" (without quotations) to get the definition: the replication
| > operation failed because of a schema mismatch between the servers
involved.
| >
| > What is the exact error in the ds log and the dcpromo.log? Bump up DS
| > logging to get more verbose information about the problem:
| >
| > 314980 HOW TO: Configure Active Directory Diagnostic Event Logging in
| > Windows
| >
http://support.microsoft.com/?id=314980
| >
| > Does this article appear to be what you are seeing?
| > 825782 Replication of the Partial Attribute Set on a Global Catalog
Server
| > Does
| >
http://support.microsoft.com/?id=825782
| >
| > David Pharr, (e-mail address removed)
| >
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| > --------------------
| > | From: (e-mail address removed) (Kongo disperato)
| > | Newsgroups: microsoft.public.win2000.active_directory
| > | Subject: I hate Schema Mismatch nightmare!!!
| > | Date: 14 Nov 2003 12:48:02 -0800
| > | Organization:
http://groups.google.com
| > | Lines: 29
| > | Message-ID: <
[email protected]>
| > | NNTP-Posting-Host: 131.175.53.52
| > | Content-Type: text/plain; charset=ISO-8859-1
| > | Content-Transfer-Encoding: 8bit
| > | X-Trace: posting.google.com 1068842883 3750 127.0.0.1 (14 Nov 2003
| > 20:48:03 GMT)
| > | X-Complaints-To: (e-mail address removed)
| > | NNTP-Posting-Date: Fri, 14 Nov 2003 20:48:03 +0000 (UTC)
| > | Path:
| >
cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onlin
| >
e.de!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!postnews1.google.com!no
| > t-for-mail
| > | Xref: cpmsftngxa06.phx.gbl
microsoft.public.win2000.active_directory:56326
| > | X-Tomcat-NG: microsoft.public.win2000.active_directory
| > |
| > | Hi everybody, i'm really worried about my situation; I have this
| > | topology:
| > | - 2 DC windows 2000 SP4
| > | - 3 Exchange 2000 SP3 (one of these Front End server)
| > |
| > | I would like to insert a new DC windows 2003 to the domain;so after
| > | reading articles from Microsoft web site, i made the following steps:
| > | - verify patch on 2 DC win 2000 (sp4 installed)
| > | - upgrade SFU from 2.0 to 3.0
| > | - verify DNS configuration (not active directory integrated)
| > | - adprep /forestprep (no error)
| > | - adprep /domainprep (no error)
| > | - DCPROMO......but...
| > | but...after few minutes dcpromo stopped with the message "schema
| > | mismatch" between servers(in event viewer some warnings and a log of
| > | "internal AD processing).
| > | In dcpromo.log there is an error while replicating "directory
| > | partitions" 8148.
| > | -The replicas between 2 DC win2000 is okay
| > | -Repadmin returns me no errors
| > | -Dcdiag no errors
| > | -Replmon no errors
| > |
| > | The dcpromo failed!
| > |
| > | Please....help me! maybe in this weekend i'm going to visit someone in
| > | Lourdes....
| > |
| > | Andrea
| > |
|
|
| Thank you for the reply David, I have read that articles and the
| command "repadmin /showreps /v" is ok, no errors.
| I would like to know the meaning of "schema mismatch" ; is a problem
| between my 2 DC Window2000 even if there are no errors during
| replications?
| What i'm going to do now, as you suggest me, is to modify the logging
| on w2003 e try to dcpromo again.
| Another thing i noticed....as I told you we have 2 DC wind2000 Server1
| and Server2.
| Server2 has all FSMO roles and Server1 and Server2 are Global Catalog;
| so Server 1 has only GC.... on its registry, under NTDS parameters
| (HKLM/System/Currentcontrolset/Services/NTDS/Parameters) there are
| some links with an old DC of our domain. Obviously on Server2 there
| are not.
| Can I modify them?
| I don't remeber now exactly the names of the key, I could post you
| them.
| --------------------------
| Here is my dcpromo.log....
|
| 11/14 13:56:48 [INFO] Promotion request for replica domain controller
| 11/14 13:56:48 [INFO] DnsDomainName test.it
| 11/14 13:56:48 [INFO] ReplicaPartner (NULL)
| 11/14 13:56:48 [INFO] SiteName (NULL)
| 11/14 13:56:48 [INFO] DsDatabasePath C:\WINDOWS\NTDS, DsLogPath
| C:\WINDOWS\NTDS
| 11/14 13:56:48 [INFO] SystemVolumeRootPath C:\WINDOWS\SYSVOL
| 11/14 13:56:48 [INFO] Account test.it\administrator
| 11/14 13:56:48 [INFO] Options 192
| 11/14 13:56:48 [INFO] Validate supplied paths
| 11/14 13:56:48 [INFO] Validating path C:\WINDOWS\NTDS.
| 11/14 13:56:48 [INFO] Path is a directory
| 11/14 13:56:48 [INFO] Path is on a fixed disk drive.
| 11/14 13:56:48 [INFO] Validating path C:\WINDOWS\NTDS.
| 11/14 13:56:48 [INFO] Path is a directory
| 11/14 13:56:48 [INFO] Path is on a fixed disk drive.
| 11/14 13:56:48 [INFO] Validating path C:\WINDOWS\SYSVOL
| 11/14 13:56:48 [INFO] Path is on an NTFS volume
| 11/14 13:56:48 [INFO] Start the worker task
| 11/14 13:56:48 [INFO] Request for promotion returning 0
| 11/14 13:56:48 [INFO] Searching for a domain controller for the domain
| test.it that contains the account server2003$
|
| 11/14 13:56:48 [INFO] Located domain controller server2_2000 for
| domain test.it
|
| 11/14 13:56:48 [INFO] Using site Fucini for server
| \\server2_2000.test.it
|
| 11/14 13:56:48 [INFO] Forcing time sync
| 11/14 13:56:48 [INFO] Forcing a time synch with \\server2_2000.test.it
|
| 11/14 13:56:48 [INFO] Stopping service NETLOGON
|
| 11/14 13:56:48 [INFO] Stopping service NETLOGON
|
| 11/14 13:57:48 [INFO] Configuring service NETLOGON to 1 returned 0
| 11/14 13:57:48 [INFO] Stopped NETLOGON
| 11/14 13:57:48 [INFO] Deleting current sysvol path C:\WINDOWS\SYSVOL
| 11/14 13:58:00 [INFO] Created system volume path
| 11/14 13:58:00 [INFO] Copying initial Directory Service database file
| C:\WINDOWS\system32\ntds.dit to C:\WINDOWS\NTDS\ntds.dit
|
| 11/14 13:58:00 [INFO] Installing the Directory Service
|
| 11/14 13:58:00 [INFO] Calling NtdsInstall for test.it
| 11/14 13:58:00 [INFO] Starting Active Directory installation
| 11/14 13:58:00 [INFO] Validating user supplied options
| 11/14 13:58:00 [INFO] Determining a site in which to install
| 11/14 13:58:00 [INFO] Examining an existing Active Directory forest
| 11/14 13:58:00 [INFO] Configuring the local domain controller to host
| Active Directory
| 11/14 13:58:02 [INFO] Creating the NTDS Settings object for this
| domain controller on the remote domain controller
| server2_2000.test.it…
| 11/14 13:58:02 [INFO] Replicating the schema directory partition
| 11/14 13:58:07 [INFO] Replicating
| CN=Schema,CN=Configuration,DC=test,DC=it: received 1000 out of
| approximately 1739 objects
| 11/14 13:58:11 [INFO] Replicating
| CN=Schema,CN=Configuration,DC=test,DC=it: received 1999 out of
| approximately 1999 objects
| 11/14 13:58:13 [INFO] Replicating
| CN=Schema,CN=Configuration,DC=test,DC=it: received 2731 out of
| approximately 2731 objects
| 11/14 13:58:13 [INFO] Replicated the schema container.
| 11/14 13:58:13 [INFO] Active Directory updated the schema cache.
| 11/14 13:58:13 [INFO] Replicating the configuration directory
| partition
| 11/14 13:58:29 [INFO] Replicating CN=Configuration,DC=test,DC=it:
| received 1000 out of approximately 1393 objects
| 11/14 13:58:31 [INFO] Replicating CN=Configuration,DC=test,DC=it:
| received 1259 out of approximately 1393 objects
| 11/14 13:58:31 [INFO] Replicated the configuration container.
| 11/14 13:58:31 [INFO] Replicating critical domain information
| 11/14 13:58:32 [INFO] Error - Active Directory could not replicate the
| directory partition DC=test,DC=it from the remote domain controller
| server2_2000.test.it. (8418)
| 11/14 13:58:32 [INFO] NtdsInstall for test.it returned 8418
| 11/14 13:58:32 [INFO] DsRolepInstallDs returned 8418
| 11/14 13:58:32 [ERROR] Failed to install to Directory Service (8418)
| 11/14 13:58:43 [INFO] Starting service NETLOGON
|
| 11/14 13:58:43 [INFO] Configuring service NETLOGON to 2 returned 0
| 11/14 13:58:43 [INFO] The attempted domain controller operation has
| completed
|
| 11/14 13:58:43 [INFO] DsRolepSetOperationDone returned 0
|
| --------------------
|
| Thank you very much!!
|
David Pharr, (e-mail address removed)
This posting is provided "AS IS" with no warranties, and confers no rights.
