When attempting to upgrade from Windows Services for UNIX 3.0 to Windows Services for UNIX 3.5 on Windows Server 2003, you receive an error like:

Error when upgrading NIS Schema. Please look at the log file at:

C:\Documents and Settings\Administrator\Local Settings\Temp\sfusch.log for more details on the error.

NOTE: The installation rolls back to version 3.0.

The sfusch.log file contains entries like:

<b>SFUSCH.log
Start of schema extension. Time: Mon Aug 28 07:38:35 2006
Schema Naming Context
'CN=Schema,CN=Configuration,DC=example1,DC=com'
FSMO Role Owner
'CN=Adatum,CN=Servers,CN=Example2,CN=Sites,CN=Configuration,DC=example1,DC=com'
DNS Hostname of FSMO
'Adatum.example1.com'
Redirecting schema changes to 'CN=Adatum,CN=Servers,CN=Example2,CN=Sites,CN=Configuration,DC=example1,DC=com'
Default Naming Context
'DC=example1,DC=com'
Domain name = 'example1'
Done with getting information from Active Directory
Checking SFU schema version
Checking SFU V30 schema on server - Adatum
Verifying all extended schema attributes. AD Server = 'Adatum'.
Verifying all extended schema classes. AD Server = 'Adatum'.
Verifying all extended schema classes. AD Server = 'Adatum'.
Verifying all extended auxilliary schema classes. AD Server = 'Adatum'.
Checking existing SFU configuration version
Checking SFU V30 schema on server - Adatum
Verifying all extended schema attributes. AD Server = 'Adatum'.
Verifying all extended schema classes. AD Server = 'Adatum'.
Verifying all extended schema classes. AD Server = 'Adatum'.
Verifying all extended auxilliary schema classes. AD Server = 'Adatum'.
Marking DC as NIS server
SFU Schema Extension did not complete.
End of schema extension. Time: Mon Aug 28 07:38:39 2006</b>
This behavior will occur if there are Active Directory objects that use the same CN ( Common Name) as the domain controller object under OU=Domain Controllers.

To resolve this problem:

1. Install thew Windows Server 2003 Support Tools by double-clicking the Suptools.msi file in the Support\Tools folder on the Windows Server 2003 CD-ROM.

2. Start / Run / adsiedit.msc / OK.

3. Expand Domain \[Adatum\].

4. Expand DC=example DC=com.

5. Locate and rename all objects that use the same CN as the domain controller object, but DO NOT rename the domain controller object.