Problen promoting W2003 as additional DC over a VPN
Hello,
I recently created a new domain for a customer on a 2003 system. This was a brand-spankin'-new install, not an upgrade from 2000 or NT4. I had attempted to promote a 2000 system via a VPN to an additional domain controller but this was unsuccessfull. I was told that I should be using 2003 for this remote app, so I abandoned 2000 and installed 2003 at the remote location. Now when I try to promote the new 2003 to a DC (it is already a member server) I get:
Error - The Active Directory Installation Wizard cannot continue because the forest is not prepared for installing Windows Server 2003.
I have tried to run ADPREP /FORESTPREP and ADPREP /DOMAINPREP on the existing 2003 DC, and it, predicably, tells me that it has essentially already been run and has nothing to do.
DCPROMO.LOG:
04/17 21:46:11 [INFO] Promotion request for replica domain controller
04/17 21:46:11 [INFO] DnsDomainName anklenfoot.com
04/17 21:46:11 [INFO] ReplicaPartner (NULL)
04/17 21:46:11 [INFO] SiteName (NULL)
04/17 21:46:11 [INFO] DsDatabasePath C:\WINDOWS\NTDS, DsLogPath C:\WINDOWS\NTDS
04/17 21:46:11 [INFO] SystemVolumeRootPath C:\WINDOWS\SYSVOL
04/17 21:46:11 [INFO] Account anklenfoot.com\administrat
04/17 21:46:11 [INFO] Options 131264
04/17 21:46:11 [INFO] Validate supplied paths
04/17 21:46:11 [INFO] Validating path C:\WINDOWS\NTDS.
04/17 21:46:11 [INFO] Path is a directory
04/17 21:46:11 [INFO] Path is on a fixed disk drive.
04/17 21:46:11 [INFO] Validating path C:\WINDOWS\NTDS.
04/17 21:46:11 [INFO] Path is a directory
04/17 21:46:11 [INFO] Path is on a fixed disk drive.
04/17 21:46:11 [INFO] Validating path C:\WINDOWS\SYSVOL.
04/17 21:46:11 [INFO] Path is on a fixed disk drive.
04/17 21:46:11 [INFO] Path is on an NTFS volume
04/17 21:46:11 [INFO] Start the worker task
04/17 21:46:11 [INFO] Request for promotion returning 0
04/17 21:46:11 [INFO] Searching for a domain controller for the domain anklenfoot.com that contains the account AFC-SERVER02$
04/17 21:46:12 [INFO] Located domain controller AFC-SERVER01.anklenfoot.co
04/17 21:46:12 [INFO] Using site Default-First-Site-Name for server \\AFC-SERVER01.anklenfoot.
04/17 21:46:12 [INFO] Forcing time sync
04/17 21:46:12 [INFO] Forcing a time synch with \\AFC-SERVER01.anklenfoot.
04/17 21:46:12 [ERROR] Failed to get the current time on \\AFC-SERVER01.anklenfoot.
04/17 21:46:12 [ERROR] NON-FATAL error forcing a time sync (5). Ignoring
04/17 21:46:13 [INFO] Stopping service NETLOGON
04/17 21:46:13 [INFO] Stopping service NETLOGON
04/17 21:47:13 [INFO] Configuring service NETLOGON to 1 returned 0
04/17 21:47:13 [INFO] Stopped NETLOGON
04/17 21:47:13 [INFO] Deleting current sysvol path C:\WINDOWS\SYSVOL
04/17 21:47:17 [INFO] Created system volume path
04/17 21:47:17 [INFO] Copying initial Directory Service database file C:\WINDOWS\system32\ntds.d
04/17 21:47:18 [INFO] Installing the Directory Service
04/17 21:47:18 [INFO] Calling NtdsInstall for anklenfoot.com
04/17 21:47:18 [INFO] Starting Active Directory installation
04/17 21:47:18 [INFO] Validating user supplied options
04/17 21:47:18 [INFO] Determining a site in which to install
04/17 21:47:18 [INFO] Examining an existing Active Directory forest
04/17 21:47:19 [INFO] Error - The Active Directory Installation Wizard cannot continue because the forest is not prepared for installing Windows Server 2003. Use the Adprep command-line tool to prepare both the forest and the domain. For more information about using the Adprep, see Active Directory Help. (8467)
04/17 21:47:19 [INFO] NtdsInstall for anklenfoot.com returned 8467
04/17 21:47:19 [INFO] DsRolepInstallDs returned 8467
04/17 21:47:19 [ERROR] Failed to install to Directory Service (8467)
04/17 21:48:52 [INFO] Starting service NETLOGON
04/17 21:48:52 [INFO] Configuring service NETLOGON to 2 returned 0
04/17 21:49:42 [INFO] The attempted domain controller operation has completed
04/17 21:49:42 [INFO] DsRolepSetOperationDone returned 0
Any help or pointers greatly appreciated.
I recently created a new domain for a customer on a 2003 system. This was a brand-spankin'-new install, not an upgrade from 2000 or NT4. I had attempted to promote a 2000 system via a VPN to an additional domain controller but this was unsuccessfull. I was told that I should be using 2003 for this remote app, so I abandoned 2000 and installed 2003 at the remote location. Now when I try to promote the new 2003 to a DC (it is already a member server) I get:
Error - The Active Directory Installation Wizard cannot continue because the forest is not prepared for installing Windows Server 2003.
I have tried to run ADPREP /FORESTPREP and ADPREP /DOMAINPREP on the existing 2003 DC, and it, predicably, tells me that it has essentially already been run and has nothing to do.
DCPROMO.LOG:
04/17 21:46:11 [INFO] Promotion request for replica domain controller
04/17 21:46:11 [INFO] DnsDomainName anklenfoot.com
04/17 21:46:11 [INFO] ReplicaPartner (NULL)
04/17 21:46:11 [INFO] SiteName (NULL)
04/17 21:46:11 [INFO] DsDatabasePath C:\WINDOWS\NTDS, DsLogPath C:\WINDOWS\NTDS
04/17 21:46:11 [INFO] SystemVolumeRootPath C:\WINDOWS\SYSVOL
04/17 21:46:11 [INFO] Account anklenfoot.com\administrat
04/17 21:46:11 [INFO] Options 131264
04/17 21:46:11 [INFO] Validate supplied paths
04/17 21:46:11 [INFO] Validating path C:\WINDOWS\NTDS.
04/17 21:46:11 [INFO] Path is a directory
04/17 21:46:11 [INFO] Path is on a fixed disk drive.
04/17 21:46:11 [INFO] Validating path C:\WINDOWS\NTDS.
04/17 21:46:11 [INFO] Path is a directory
04/17 21:46:11 [INFO] Path is on a fixed disk drive.
04/17 21:46:11 [INFO] Validating path C:\WINDOWS\SYSVOL.
04/17 21:46:11 [INFO] Path is on a fixed disk drive.
04/17 21:46:11 [INFO] Path is on an NTFS volume
04/17 21:46:11 [INFO] Start the worker task
04/17 21:46:11 [INFO] Request for promotion returning 0
04/17 21:46:11 [INFO] Searching for a domain controller for the domain anklenfoot.com that contains the account AFC-SERVER02$
04/17 21:46:12 [INFO] Located domain controller AFC-SERVER01.anklenfoot.co
04/17 21:46:12 [INFO] Using site Default-First-Site-Name for server \\AFC-SERVER01.anklenfoot.
04/17 21:46:12 [INFO] Forcing time sync
04/17 21:46:12 [INFO] Forcing a time synch with \\AFC-SERVER01.anklenfoot.
04/17 21:46:12 [ERROR] Failed to get the current time on \\AFC-SERVER01.anklenfoot.
04/17 21:46:12 [ERROR] NON-FATAL error forcing a time sync (5). Ignoring
04/17 21:46:13 [INFO] Stopping service NETLOGON
04/17 21:46:13 [INFO] Stopping service NETLOGON
04/17 21:47:13 [INFO] Configuring service NETLOGON to 1 returned 0
04/17 21:47:13 [INFO] Stopped NETLOGON
04/17 21:47:13 [INFO] Deleting current sysvol path C:\WINDOWS\SYSVOL
04/17 21:47:17 [INFO] Created system volume path
04/17 21:47:17 [INFO] Copying initial Directory Service database file C:\WINDOWS\system32\ntds.d
04/17 21:47:18 [INFO] Installing the Directory Service
04/17 21:47:18 [INFO] Calling NtdsInstall for anklenfoot.com
04/17 21:47:18 [INFO] Starting Active Directory installation
04/17 21:47:18 [INFO] Validating user supplied options
04/17 21:47:18 [INFO] Determining a site in which to install
04/17 21:47:18 [INFO] Examining an existing Active Directory forest
04/17 21:47:19 [INFO] Error - The Active Directory Installation Wizard cannot continue because the forest is not prepared for installing Windows Server 2003. Use the Adprep command-line tool to prepare both the forest and the domain. For more information about using the Adprep, see Active Directory Help. (8467)
04/17 21:47:19 [INFO] NtdsInstall for anklenfoot.com returned 8467
04/17 21:47:19 [INFO] DsRolepInstallDs returned 8467
04/17 21:47:19 [ERROR] Failed to install to Directory Service (8467)
04/17 21:48:52 [INFO] Starting service NETLOGON
04/17 21:48:52 [INFO] Configuring service NETLOGON to 2 returned 0
04/17 21:49:42 [INFO] The attempted domain controller operation has completed
04/17 21:49:42 [INFO] DsRolepSetOperationDone returned 0
Any help or pointers greatly appreciated.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Man you guys are good! Yes, the new server is R2, the first is not. I'll try that and post the results.
ASKER
That worked, thanks!
thankyou :)
ASKER