Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1377
  • Last Modified:

Problen promoting W2003 as additional DC over a VPN

Hello,

I recently created a new domain for a customer on a 2003 system. This was a brand-spankin'-new install, not an upgrade from 2000 or NT4. I had attempted to promote a 2000 system via a VPN to an additional domain controller but this was unsuccessfull. I was told that I should be using 2003 for this remote app, so I abandoned 2000 and installed 2003 at the remote location. Now when I try to promote the new 2003 to a DC (it is already a member server) I get:

Error - The Active Directory Installation Wizard cannot continue because the forest is not prepared for installing Windows Server 2003.

I have tried to run ADPREP /FORESTPREP and ADPREP /DOMAINPREP on the existing 2003 DC, and it, predicably, tells me that it has essentially already been run and has nothing to do.

DCPROMO.LOG:

04/17 21:46:11 [INFO] Promotion request for replica domain controller
04/17 21:46:11 [INFO] DnsDomainName  anklenfoot.com
04/17 21:46:11 [INFO]       ReplicaPartner  (NULL)
04/17 21:46:11 [INFO]       SiteName  (NULL)
04/17 21:46:11 [INFO]       DsDatabasePath  C:\WINDOWS\NTDS, DsLogPath  C:\WINDOWS\NTDS
04/17 21:46:11 [INFO]       SystemVolumeRootPath  C:\WINDOWS\SYSVOL
04/17 21:46:11 [INFO]       Account anklenfoot.com\administrator
04/17 21:46:11 [INFO]       Options  131264
04/17 21:46:11 [INFO] Validate supplied paths
04/17 21:46:11 [INFO] Validating path C:\WINDOWS\NTDS.
04/17 21:46:11 [INFO]       Path is a directory
04/17 21:46:11 [INFO]       Path is on a fixed disk drive.
04/17 21:46:11 [INFO] Validating path C:\WINDOWS\NTDS.
04/17 21:46:11 [INFO]       Path is a directory
04/17 21:46:11 [INFO]       Path is on a fixed disk drive.
04/17 21:46:11 [INFO] Validating path C:\WINDOWS\SYSVOL.
04/17 21:46:11 [INFO]       Path is on a fixed disk drive.
04/17 21:46:11 [INFO]       Path is on an NTFS volume
04/17 21:46:11 [INFO] Start the worker task
04/17 21:46:11 [INFO] Request for promotion returning 0
04/17 21:46:11 [INFO] Searching for a domain controller for the domain anklenfoot.com that contains the account AFC-SERVER02$

04/17 21:46:12 [INFO] Located domain controller AFC-SERVER01.anklenfoot.com for domain anklenfoot.com

04/17 21:46:12 [INFO] Using site Default-First-Site-Name for server \\AFC-SERVER01.anklenfoot.com

04/17 21:46:12 [INFO] Forcing time sync
04/17 21:46:12 [INFO] Forcing a time synch with \\AFC-SERVER01.anklenfoot.com

04/17 21:46:12 [ERROR] Failed to get the current time on \\AFC-SERVER01.anklenfoot.com: 5
04/17 21:46:12 [ERROR] NON-FATAL error forcing a time sync (5).  Ignoring
04/17 21:46:13 [INFO] Stopping service NETLOGON

04/17 21:46:13 [INFO] Stopping service NETLOGON

04/17 21:47:13 [INFO] Configuring service NETLOGON to 1 returned 0
04/17 21:47:13 [INFO] Stopped NETLOGON
04/17 21:47:13 [INFO] Deleting current sysvol path C:\WINDOWS\SYSVOL
04/17 21:47:17 [INFO] Created system volume path
04/17 21:47:17 [INFO] Copying initial Directory Service database file C:\WINDOWS\system32\ntds.dit to C:\WINDOWS\NTDS\ntds.dit

04/17 21:47:18 [INFO] Installing the Directory Service

04/17 21:47:18 [INFO] Calling NtdsInstall for anklenfoot.com
04/17 21:47:18 [INFO] Starting Active Directory installation
04/17 21:47:18 [INFO] Validating user supplied options
04/17 21:47:18 [INFO] Determining a site in which to install
04/17 21:47:18 [INFO] Examining an existing Active Directory forest
04/17 21:47:19 [INFO] Error - The Active Directory Installation Wizard cannot continue because the forest is not prepared for installing Windows Server 2003. Use the Adprep command-line tool to prepare both the forest and the domain. For more information about using the Adprep, see Active Directory Help. (8467)
04/17 21:47:19 [INFO] NtdsInstall for anklenfoot.com returned 8467
04/17 21:47:19 [INFO] DsRolepInstallDs returned 8467
04/17 21:47:19 [ERROR] Failed to install to Directory Service (8467)
04/17 21:48:52 [INFO] Starting service NETLOGON

04/17 21:48:52 [INFO] Configuring service NETLOGON to 2 returned 0
04/17 21:49:42 [INFO] The attempted domain controller operation has completed

04/17 21:49:42 [INFO] DsRolepSetOperationDone returned 0

Any help or pointers greatly appreciated.


0
melevy
Asked:
melevy
  • 3
  • 2
2 Solutions
 
melevyAuthor Commented:
I should also mention that I've already raised the domain functional level to 2003, and the existing DC is the operations master of all the roles.
0
 
oBdACommented:
That would be W2k3 R2?Installing R2 as DC requires another adprep /forestprep from the \cmpnents\R2\adprep folder on the second R2 CD.
Check this document for details:
Extending Your Active Directory Schema for New Features in Windows Server 2003 R2
http://www.microsoft.com/downloads/details.aspx?familyid=5B73CF03-84DD-480F-98F9-526EC09E9BA8&displaylang=en
0
 
Jay_Jay70Commented:
Hi melevy,

i am guessing you have 2003 R2..

you need to run adprep from the second disk in the set raise the schema to R2 functionality :)

Cheers!
0
 [eBook] Windows Nano Server

Download this FREE eBook and learn all you need to get started with Windows Nano Server, including deployment options, remote management
and troubleshooting tips and tricks

 
melevyAuthor Commented:
Man you guys are good! Yes, the new server is R2, the first is not. I'll try that and post the results.
0
 
melevyAuthor Commented:
That worked, thanks!
0
 
Jay_Jay70Commented:
thankyou :)
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now