Same issue here and it's been making my weekends non-existent. Until now ......
Don't install SFU it doesn't work, remove it.
My AD is on Server 2003 Standard ( 32bit )
Usual warnings about backing up etc, this could be considered as dangerous ( by M$ ) although its mostly painless - this is the process you do when you want to install a Server 2008 R2 Domain Controller into a 2003 Forest.
Resolved like this :
Logon as a schema admin ( enterprise admin )
Drive through your DNS Tree and remove ALL the entries ( apart from your A Record ) relating to your Zentyal Server, be careful not to delete any of the Windows Server entries or you will be in trouble
You need the Windows Server 2008 R2 Installation DVD
start a cmd prompt
cd \support\adprep
adprep32 /forestprep
Now thats about all you need to do as it upgrades the schema as required but you should do the following as well :
adprep32 /domainprep /gppprep
I removed File Sharing Module, reinstalled it, configured it and enabled it whilst tailing the zentyal.log and it worked like a charm
This is the M$ note about the last command :
http://support.microsoft.com/kb/324392The functionality of the adprep domainprep /gpprep command depends on the state of the domain. If the updated adprep /domainprep command has not been run, this command is the functional equivalent of the adprep /domainprep command in the original release of Windows Server 2003. In these circumstances, the command performs all the domain operations that are listed in Microsoft Knowledge Base article 309628. These operations include setting the permissions for GPOs in the SYSVOL. If the updated adprep /domainprep command has already been run, the adprep /domainprep /gpprep command adds only the inheritable access control entries (ACEs) on GPOs in the Sysvol shared resource. The additional ACEs give enterprise domain controllers read access permissions on GPOs. These permissions are required to support Resultant Set of Policy (RSoP) functionality for site-based policy.