проблема с добавлением контроллера домена

[templar231 Профиль]

дано:
домен domain - win2000, проапгрейженый с nt4

контроллер домена: serv_2000 - win2k sp4
дополнительный контроллер: serv_2003 - win2k3 x64 sr2

при попытке добавить serv_2003 дополнительным контроллером домена в domain вылетает ошибка:

The operation failed because:

Active Directory could not replicate the directory partition CN=Configuration,DC=DOMAIN from the remote domain controller serv_2000.domain.

"The replication operation failed because of a schema mismatch between the servers involved."


serv_2000:

ipconfig /all

Host Name . . . . . . . . . . . . : serv_2000
Primary DNS Suffix . . . . . . . : domain
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : domain
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek RTL8139(A)-based PCI Fast Ethernet Adapter
Physical Address. . . . . . . . . : 00-80-48-15-7C-7C
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.254
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 192.168.0.254
192.168.0.1
Primary WINS Server . . . . . . . : 192.168.0.254

serv_2003:
ipconfig /all
Host Name . . . . . . . . . . . . : serv_2003
Primary Dns Suffix . . . . . . . : domain
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : domain
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP NC7782 Gigabit Server Adapter
Physical Address. . . . . . . . . : 00-17-08-50-0F-C4
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.241
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 192.168.0.254
192.168.0.1
Primary WINS Server . . . . . . . : 192.168.0.254

netdiag:
Netcard queries test . . . . . . . : Passed
Per interface results:
Adapter : Local Area Connection
Netcard queries test . . . : Passed
Host Name. . . . . . . . . : serv_2000
IP Address . . . . . . . . : 192.168.0.254
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.0.1
Primary WINS Server. . . . : 192.168.0.254
Dns Servers. . . . . . . . : 192.168.0.254
192.168.0.1
AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Passed
NetBT name test. . . . . . : Passed
WINS service test. . . . . : Passed
Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{FF43EAE5-0F58-42E8-9A4E-20A5E0B75386}
1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . . . : Passed
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '192.168.0.254'.
[WARNING] The DNS entries for this DC cannot be verified right now on DNS server 192.168.0.1, ERROR_TIMEOUT.
Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{FF43EAE5-0F58-42E8-9A4E-20A5E0B75386}
The redir is bound to 1 NetBt transport.
List of NetBt transports currently bound to the browser
NetBT_Tcpip_{FF43EAE5-0F58-42E8-9A4E-20A5E0B75386}
The browser is bound to 1 NetBt transport.
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed
Trust relationship test. . . . . . : Skipped
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Passed
IPSec policy service is active, but no policy is assigned.
The command completed successfully

dcdiag:
Performing initial setup:
Done gathering initial info.
Doing initial non skippeable tests
Testing server: Default-First-Site-Name\SERV_2000
Starting test: Connectivity
......................... SERV_2000 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\SERV_2000
Starting test: Replications
......................... SERV_2000 passed test Replications
Starting test: NCSecDesc
......................... SERV_2000 passed test NCSecDesc
Starting test: NetLogons
......................... SERV_2000 passed test NetLogons
Starting test: Advertising
Warning: SERV_2000 is not advertising as a time server.
......................... SERV_2000 failed test Advertising
Starting test: KnowsOfRoleHolders
......................... SERV_2000 passed test KnowsOfRoleHolders
Starting test: RidManager
......................... SERV_2000 passed test RidManager
Starting test: MachineAccount
......................... SERV_2000 passed test MachineAccount
Starting test: Services
......................... SERV_2000 passed test Services
Starting test: ObjectsReplicated
......................... SERV_2000 passed test ObjectsReplicated
Starting test: frssysvol
......................... SERV_2000 passed test frssysvol
Starting test: kccevent
......................... SERV_2000 passed test kccevent
Starting test: systemlog
......................... SERV_2000 passed test systemlog

Running enterprise tests on : DOMAIN
Starting test: Intersite
......................... DOMAIN passed test Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error 1355
A Good Time Server could not be located.
......................... DOMAIN failed test FsmoCheck


читал статьи по поводу сервера времени - настроил, serv_2000 берет время с себя самого, в оснастках AD все роли стоят на serv_2000.

хелп! где грабли, камрады?

upd: adprep естественно на serv_2000 запускался

[sea Профиль]

[templar231 Профиль]

[templar231 Профиль]

ап.
обновил windows 2000 на serv_2000 до win 2003. результат тот же.