Solved

Run ADPREP.EXE on all DCs or just the PDC emulator?

Posted on 2007-04-04
2
424 Views
Last Modified: 2008-05-30
We have an AD forest, with a root domain and two child domains.  There are three DCs in the root domain, and two DCs in each of the two child domains.  All five of the DCs are Windows 2003 Server Standard.  I would like to get at least on of the DCs in the root domain upgraded to R2.  I want to use the Identity Management for Unix to authenticate my Debian Linux boxes against AD.  I know that I have to run ADPREP.EXE on the PDC emulator to extend the AD schema.  What I'm not clear on is whether or not I have to run ADPREP.EXE on all of the R1 DCs.

Thanks in advance,
Daris
0
Comment
Question by:jingaling
2 Comments
 
LVL 30

Accepted Solution

by:
LauraEHunterMVP earned 500 total points
ID: 18853359
/forestprep needs to be run once per forest against the Schema Master.  /domainprep needs to be run once per domain against the Infrastructure Master.  Once per domain is all you need, you don't need to adprep every single DC.

Be sure you're using the version of adprep that's on Disc 2 of the R2 media, or you'll receive a "the versions of the schema don't match" error when you try to run it.

Hope this helps.

Laura E. Hunter - Microsoft MVP: Windows Server - Networking
0
 

Author Comment

by:jingaling
ID: 18853855
Thanks.  
0

Featured Post

Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Remote Apps is a feature in server 2008 which allows users to run applications off Remote Desktop Servers without having to log into them to run the applications.  The user can either have a desktop shortcut installed or go through the web portal to…
This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now