You receive an error message when you update the schema to enable BitLocker Drive Encryption recovery information in an Active Directory forest

In an Active Directory forest, you update the schema to enable BitLocker Drive Encryption recovery information. However, when you use the BitLockerTPMSchemaExtension.ldf file to update the schema, you receive the following error message:

This problem occurs if the following conditions are true:

• The Active Directory forest in which you are updating the schema contains domain controllers that are running Windows Server 2008.
• The domain controller that serves as the schema master is running Microsoft Windows Server 2003.

If the domain controller is running the Beta 3 release of Windows Server 2008 or a later version, you do not have to use the BitLockerTPMSchemaExtension.ldf file to update the schema. Windows Server 2008 includes the necessary schema updates to support BitLocker Drive Encryption.

If the domain controller is running a version of Windows Server 2008 that is earlier than Beta 3, transfer the schema master role to a domain controller that is running Windows Server 2008. Then, reapply the schema updates. For more information about how to transfer the schema master role, click the following article number to view the article in the Microsoft Knowledge Base:

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

To obtain the BitLockerTPMSchemaExtension.ldf file, visit the following Microsoft Web site: After you update the Active Directory schema to support BitLocker Drive Encryption, you can back up the recovery information for BitLocker Drive Encryption in Active Directory. For more information, visit the following Microsoft TechNet Web site: