Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 622
  • Last Modified:

adprep Hell!!

I am trying to add a 2003 server to our domain and remove all 2000 servers. When I run adprep on the 2000 GC it says there is a schema conflict with exchange 2000. I have tried all the ldifde scripts with no success. Can I just demote the exchange server then run adprep on GC with out messing up exchange?
0
jasonduncan76
Asked:
jasonduncan76
  • 7
  • 4
  • 3
  • +1
1 Solution
 
Sam PanwarSr. Server AdministratorCommented:
Hi,
1. You have to not required this i think first stop the all the service of the exchange server then run adprep its work
2.you can also use the Deployment Tools for it
http://www.microsoft.com/downloads/details.aspx?FamilyID=271E51FD-FE7...
They have step by step instructions to help your upgrade go better for the Exchange portion.
0
 
Sam PanwarSr. Server AdministratorCommented:
Steps:

1) Install Windows 2003 server on the new box.

2) Update the active directory on the DC(running Windows
2000) to avoid mangling of AD Objects by following

http://support.microsoft.com/default.aspx?scid=kb;en-
us;314649

3) Run Windows 2003 Server adprep/forestprep, &
adprep/domainprep on Windows 2003 server.

4) Run forestprep & Domainprep for exchange 2003 serverfrom Windows 2003 server(where exchange 2k3 will be
installed..) from windows 2003 server

5) Install Exchange 2003 on windows 2003 server

6) Move mailboxes from exchange 2000 to Exchange 2003 server by performing exchange tasks on active directory
users-->move mailboxes.

7) Follow the following article to remove Exchange 2000 server

http://support.microsoft.com/default.aspx?kbid=307917 
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
jasonduncan76Author Commented:
Thanks for the response, but I had turned the exchange server off and still the adprep would not run. Does the exchange server need to be on and the services stopped? The link you posted says

The download you requested is unavailable. If you continue to see this message when trying to access this download, go to the "Search for a Download" area on the Download Center home page

0
 
miloudiCommented:

Just an addition,

First make SURE you have a full backup of everything you will be working on. I cannot stress this enough.
Now make sure you have all available updates and service packs to both servers. Then on the 2000 server run:
adprep /forestprep from the i386 folder of the Windows 2003 CD.
once /forestprep is all done, run
adprep /domainprep from the i386 folder of the Windows 2003 CD.

Now your domain is ready to accept the new Windows 2003  DC.

Now join the Windows 2003 server to the domain as a member server (if you havent already)
Next run DC Promo  and select the option to add a Domain Controller to Esixting Domain in Exisiting Forest.

If everything was done right. You will now have 2 domain controllers in your domain.  Now force replication so that both servers are in sync (You can use Sites and services or Repmon from the Resource tools to force replication).

Make sure that if you are running DNS on the 2000 server that you also install it on the 2003 server. Also, update your DHCP server to reflect the new DNS Server (If DHCP is on the 2000 server transfer it to 2003.)

Now you have 2 options:
1. Demote the Windows 2000 server and let it transfer the FSMO roles automatically to the other DC (which is the 2003 DC) as part of the DCPROMO process
or
2. Transfer the FSMO Roles manually then run dc promo. ( I would choose this option)

If you chose option 1, then just run DCPROMO on the 2000 DC and cross your fingers. After DCPROMO is done the 2000 server will be just a member server. At which point you can unjoin and discard of the server (make sure you transfer anything else that may be on the server, for example file and printer shares before you unjoin.)

Now if you choose option 2. Start by transfering all 5 of the fsmo roles to the 2003 DC. A very good detailed documentatio n with *pictures* at http://www.petri.co.il/transferring_fsmo_roles.htm.

Once you transfer all the roles make sure that everything went well by determining the new role holders. Again documentation with *Pictures* here: http://www.petri.co.il/determining_fsmo_role_holders.htm

Now you can run DCPROMO on the 2000 server and demote it to a member server. Once a member server you can unjoin the server from the domain and discard of the server (make sure you tranfer anything else that may be on the server, for example file and printer shares before you unjoin.)

All done!!!

YOu might also want to read the below article on common mistakes on this type of operation:
http://support.microsoft.com/default.aspx?scid=kb;en-us;555040


0
 
miloudiCommented:

Just another thought,

If you can afford to do this one step at a time, do it.
Because i see you want to use 2003 for exchange as welll....
Here is a beautiful article about it:
http://www.computerperformance.co.uk/exchange2003/exchange_2003_upgrade_2000.htm

and i like petri stuff, it is good and it works..
another good site for exchange after you get it up and running is :
www.msexchange.org
 cheers......
Amine
0
 
miloudiCommented:
I didn't supply the article for the Flexible Single Master Operations (FSMO) roles...
from MS:
http://support.microsoft.com/kb/324801....

0
 
jasonduncan76Author Commented:
Thanks for everyones response. My problem is ADPREP /FORESTPREP WILL NOT RUN. It returns an error that there is a problem with the exchange 2000 schema. I have checked the microsoft kb and it says to download a hotfix but doesnt give a link to download it. I have checked on google for it as well with no luck.
0
 
jar3817Commented:
You need to fix the things Exchange 2000 messed up in your AD.

do this:
ldifde.exe /i /f inetOrgPersonFix.ldf /c "DC=your" "DC=addomain,DC=name"

You'll find the inetOrgPersonFix.ldf file on the 2003 cd: \support\tools\support.cab

Read about it here:
http://www.petri.co.il/windows_2003_adprep_fix_for_e2k.htm

After fixing your AD adprep should run fine.
0
 
jasonduncan76Author Commented:
jar3817

I tried running that script and it gives me a non-specific error.  Just to make sure I set up right. Assuming my domain name is apple.com could you post the proper command for the ldifde.exe and the inetorgpersonfix.ldf setup please.
0
 
jar3817Commented:
assuming your ad domain name is "apple.com" the command would be:

ldifde.exe /i /f inetOrgPersonFix.ldf /c "DC=apple,DC=com"


If your domain name is "some.sub.domain.apple.com":

ldifde.exe /i /f inetOrgPersonFix.ldf /c "DC=some,DC=sub,DC=domain,DC=apple,DC=com"
0
 
jasonduncan76Author Commented:
Do I make any changes to the script inetorgpersonfix.ldf or do I leave it as-is?
0
 
jar3817Commented:
Leave it as is.
0
 
miloudiCommented:
jasonduncan76,

When you say:
"My problem is ADPREP /FORESTPREP WILL NOT RUN."
do you mean the AD one or the exchange one ???
because exchange domainprep and forestprep are different........

 
0
 
jasonduncan76Author Commented:
Thanks jar3817 I have to put the project on hold for two more weeksends. But I will try this Monday.

miloudi- adprep will not run on the GC- Thanks


Thanks for everyone pitching in!!!

I will update monday.
0
 
jasonduncan76Author Commented:
Thank for everyone help

The domain wanted the prevent script.

ldifde -i -f inetorgprevent -v -c DC=X "DC=apple,DC=com"

Page editor please put this solution with the accepted answer
0
 
jasonduncan76Author Commented:
ldifde -i -f inetorgpersonprevent -v -c DC=X "DC=apple,DC=com"


opps...
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 7
  • 4
  • 3
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now