Hi, Im working my way through the Microsoft 70-640 Configuring Windows Server 2008 Active Directory Book and have come across something puzzling, because Im sure Im doing everything right and yet it doesnt work. Chapter 5, Lesson 1 - Redirect the default computer container (page 223). I have inputted the command (redircmp ou=Clients,DC=contoso,dc=com) both with and without quotation marks and yet each time I get the same error message : Error, unable to modify the wellknownobjects attribute. Verify that the domain functional level of the domain is at least Windows Server 2003: Operations Error. Redirection was NOT successful I am 100% sure of my domain function level (2008r2 forest and domain) and I am sure that the client OU isnt contained within another OU. Ive had a look at technet and other online stuff and I cant see why the command isnt working. Does anyone have any suggestions? (redirusr command will yield the same results too) (In case its relevent, All my servers are being run virtually on VMware player;my 2 domain controllers are running Server2008R2 Enterprise)

Hello, please verify with http://support.microsoft.com/kb/324949Best regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Hi and thanks for the reply, I think I have discovered what the problem is but at this stage lack the knowledge to solve it. I have just been looking at group policy stuff and had run gpresult /r and noticed in the results screen that it is stating that the Domain Type : Windows 2000. Im sure that this is what is causing the problem. How do I change this? As stated in my original post, my domain function level is definitely 2008 R2 and am unaware as to how it has been set like this. So, How do I raise/change the domain type?

Hello, the wrong Domain Type is NOT a problem in your case, it is a known problem/bug with gpresult, can be changed within the registry, see about in: http://blogs.technet.com/b/deds/archive/2008/06/20/gpresult-zeigt-falsches-domain-functional-level.aspx Best regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Is there an english translation for the blog you have referenced?

the issue here is that your domain seems to be running at 2000 native. If i'm not mistaken you require at least 2003 domain functional level to make this work. To do this you can open domain.msc (start -> run), right click your domain and select "raise domain functional level". make sure that you do not have any pre-2003 domain controllers in the environment as they will stop working when you make this change. It is a one way change and is NOT undoable...