Solved

Cannot add Windows 2003 Server as DC to a Windows 2003 Domain that already has two DC's

Posted on 2006-11-30
11
248 Views
Last Modified: 2011-10-03
This one's could get a bit confusing.  Overall, I can't add a new Windows Server 2003 machine to an existing 2003 domain (all forest and domain levels are 2003 on all other DC's) because of the following error:

"The Active Directory Installation Wizard cannot continue because the forest is not prepared for installing Windows Server 2003. Use the Adprep command-line tool to prepare both the forest and the domain."

I already ready through the MS KB http://support.microsoft.com/?kbid=278875 and had no luck.  The STRANGE thing is that my forrest and domain function levels are all 2003 and have been.  Of course I can't run ADPREP if they already at the highest level (I already tried anyway).

The only thing that COULD be confusing this, is the fact that our PDC and BDC (though these terms "technically" don't exist in 2003) were renamed a month ago.  Same domain, but new machine names.  The NETDOM went fine and we didn't have any errors.  I searched the registry and ADSIEDIT.MSC and all items (FRS References, etc) and everything has the new names.  Replication is working and both machines act well as DC's when one or the other is offline.

So... I can't figure out why I wouldn't be able to add a new 2003 DC to a 2003 Domain.  Once upon a time (6 months back) it was in mixed mode, but they were all promoted and things went OK.

Here's a snipped more from my DCPROMO.LOG:

11/30 21:55:45 [INFO] Installing the Directory Service
11/30 21:55:45 [INFO] Calling NtdsInstall for BRECKGROUP.LOCAL
11/30 21:55:45 [INFO] Starting Active Directory installation
11/30 21:55:45 [INFO] Validating user supplied options
11/30 21:55:45 [INFO] Determining a site in which to install
11/30 21:55:45 [INFO] Examining an existing Active Directory forest
11/30 21:55:45 [INFO] Error - The Active Directory Installation Wizard cannot continue because the forest is not prepared for installing Windows Server 2003. Use the Adprep command-line tool to prepare both the forest and the domain. For more information about using the Adprep, see Active Directory Help. (8467)
11/30 21:55:45 [INFO] NtdsInstall for BRECKGROUP.LOCAL returned 8467
11/30 21:55:45 [INFO] DsRolepInstallDs returned 8467
11/30 21:55:45 [ERROR] Failed to install to Directory Service (8467)


Thanks!
0
Comment
Question by:jgantes
  • 6
  • 5
11 Comments
 
LVL 31

Expert Comment

by:Toni Uranjek
ID: 18051878
Sorry for asking but is it possible that you are trying to add W2003 R2 and not just W2003 SP1?

If your answer is yes: http://technet2.microsoft.com/WindowsServer/en/library/5022eea0-54bc-422f-b98b-ddb836c8ee851033.mspx?mfr=true
0
 

Author Comment

by:jgantes
ID: 18051890
Yes, both other DC's are 2003 SP1, the one I'm adding is 2003 R2.  I think you've found it... now I need to read to figure out what to do... oh boy this looks long and  fun :-(  

Is there a short version :-P
0
 
LVL 31

Expert Comment

by:Toni Uranjek
ID: 18051898
To update the schema, on the schema master domain controller, insert Disc 2 and open the command prompt. Then, change to the Cmpnents\R2\Adprep folder of Disc 2, and type: adprep.exe /forestprep.

Is that short enough? :D
0
U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

 

Author Comment

by:jgantes
ID: 18051907
yea... thanks.  I just read that.  I wonder, could this have any adverse effects on my current domain controllers?  I guess their forest functions goes to an "R2" Forest function?

Do I need to do on both my DC's I'm assuming?  Sounds risky-- or am I over-reacting.

I found this too... http://www.experts-exchange.com/Operating_Systems/Windows_Server_2003/Q_21988432.html 


Thanks!
0
 

Author Comment

by:jgantes
ID: 18051944
This is really the answer... but I'm still confused... can I simply update the schema on my existing 2003 SP1 DC's or do I have actually upgrade them to R2?

See this article to see what I'm saying....

http://support.microsoft.com/kb/917385 
0
 
LVL 31

Expert Comment

by:Toni Uranjek
ID: 18051949
There should be no issues - I believe that you are over-reacting. :D
You should run adprep only on your domain controller which is FSMO holder and the replicate changes to other domain controllers
0
 
LVL 31

Accepted Solution

by:
Toni Uranjek earned 350 total points
ID: 18051959
From article:

To resolve this issue, run the adprep.exe /forestprep command from the Windows Server 2003 R2 installation disk 2 on the schema master. To do this, insert the Windows Server 2003 R2 installation disk 2, and then type the following command:
Drive:\CMPNENTS\R2\ADPREP\adprep.exe /forestprep

That's it!

Of course backup system state data on all domain controllers first -  standard procedure.
0
 

Author Comment

by:jgantes
ID: 18051979
Thanks a ton :-)

What's the best way to backup data?  Usually I take images, but that seems like overkill in this instance.


0
 
LVL 31

Expert Comment

by:Toni Uranjek
ID: 18051997
Imaging is not supported backup method for domain controllers. Use Windows Backup, backup everything!
0
 

Author Comment

by:jgantes
ID: 18052014
NT Backup?
0
 
LVL 31

Expert Comment

by:Toni Uranjek
ID: 18052022
Yes
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question