craigothy
asked on
2008 dcpromo /domainprep /gpprep fails on Windows 2000 Server
Trying to migrate to 2008 and for some reason, dcpromo /domainprep /gpprep is failing on a 2000 domain controller. /forestprep and /domainprep both went just fine however /domainprep /gpprep is failing with the following:
Adprep was unable to complete because the call back function failed.
Any ideas?
Adprep was unable to complete because the call back function failed.
Any ideas?
Brian Pierce
Try disabling your anti-virus software and then trying again
ASKER
Yes, it is currently disabled. I did that before running forestprep.
Check out this link. Do a dcdiag /v then post results.
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.windows.server.active_directory&tid=eff5b2ce-8cd1-4553-b133-8913f9446fdc&cat=en_US_09e458e2-5a48-4d89-a40f-847f472bc08e&lang=en&cr=US&sloc=&p=1
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.windows.server.active_directory&tid=c2f97ec4-b66c-4f8c-a724-fbce3751e123&cat=&lang=&cr=&sloc=&p=1
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.windows.server.active_directory&tid=eff5b2ce-8cd1-4553-b133-8913f9446fdc&cat=en_US_09e458e2-5a48-4d89-a40f-847f472bc08e&lang=en&cr=US&sloc=&p=1
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.windows.server.active_directory&tid=c2f97ec4-b66c-4f8c-a724-fbce3751e123&cat=&lang=&cr=&sloc=&p=1
ASKER
Here is the output from dcdiag /v
Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local machine SPRAG1, is a DC.
* Connecting to directory service on server SPRAG1.
* Collecting site info.
* Identifying all servers.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\SP
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... SPRAG1 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\SP
Starting test: Replications
* Replications Check
......................... SPRAG1 passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for
CN=Schema,CN=Configuration
* Security Permissions Check for
CN=Configuration,DC=Hsvuti
* Security Permissions Check for
DC=Hsvutil,DC=org
......................... SPRAG1 passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
......................... SPRAG1 passed test NetLogons
Starting test: Advertising
The DC SPRAG1 is advertising itself as a DC and having a DS.
The DC SPRAG1 is advertising as an LDAP server
The DC SPRAG1 is advertising as having a writeable directory
The DC SPRAG1 is advertising as a Key Distribution Center
The DC SPRAG1 is advertising as a time server
The DS SPRAG1 is advertising as a GC.
......................... SPRAG1 passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=SPRAG1,CN=Serv
rst-Site-Name,CN=Sites,CN=
Role Domain Owner = CN=NTDS Settings,CN=SPRAG1,CN=Serv
rst-Site-Name,CN=Sites,CN=
Role PDC Owner = CN=NTDS Settings,CN=SPRAG1,CN=Serv
-Site-Name,CN=Sites,CN=Con
Role Rid Owner = CN=NTDS Settings,CN=SPRAG1,CN=Serv
-Site-Name,CN=Sites,CN=Con
Role Infrastructure Update Owner = CN=NTDS Settings,CN=SPRAG1,CN=Serv
s,CN=Default-First-Site-Na
......................... SPRAG1 passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 3603 to 1073741823
* SPRAG1.Hsvutil.org is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 3103 to 3602
* rIDNextRID: 3309
* rIDPreviousAllocationPool is 3103 to 3602
......................... SPRAG1 passed test RidManager
Starting test: MachineAccount
* SPN found :LDAP/SPRAG1.Hsvutil.org/H
* SPN found :LDAP/SPRAG1.Hsvutil.org
* SPN found :LDAP/SPRAG1
* SPN found :LDAP/SPRAG1.Hsvutil.org/H
* SPN found :LDAP/c24fc27f-6be3-4a0d-b
rg
* SPN found :E3514235-4B06-11D1-AB04-0
a9-e06b312aab9b/Hsvutil.or
* SPN found :HOST/SPRAG1.Hsvutil.org/H
* SPN found :HOST/SPRAG1.Hsvutil.org
* SPN found :HOST/SPRAG1
* SPN found :HOST/SPRAG1.Hsvutil.org/H
* SPN found :GC/SPRAG1.Hsvutil.org/Hsv
......................... SPRAG1 passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
* Checking Service: Dnscache
* Checking Service: NtFrs
......................... SPRAG1 passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
SPRAG1 is in domain DC=Hsvutil,DC=org
Checking for CN=SPRAG1,OU=Domain Controllers,DC=Hsvutil,DC=
n DC=Hsvutil,DC=org on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=SPRAG1,CN=Serv
e-Name,CN=Sites,CN=Configu
=Hsvutil,DC=org on 1 servers
Object is up-to-date on all servers.
......................... SPRAG1 passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service Event log test
The SYSVOL has been shared, and the AD is no longer
prevented from starting by the File Replication Service.
......................... SPRAG1 passed test frssysvol
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minut
es.
......................... SPRAG1 passed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
......................... SPRAG1 passed test systemlog
Running enterprise tests on : Hsvutil.org
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope
provided by the command line arguments provided.
......................... Hsvutil.org passed test Intersite
Starting test: FsmoCheck
GC Name: \\SPRAG1.Hsvutil.org
Locator Flags: 0xe00003fd
PDC Name: \\SPRAG1.Hsvutil.org
Locator Flags: 0xe00003fd
Time Server Name: \\SPRAG1.Hsvutil.org
Locator Flags: 0xe00003fd
Preferred Time Server Name: \\SPRAG1.Hsvutil.org
Locator Flags: 0xe00003fd
KDC Name: \\SPRAG1.Hsvutil.org
Locator Flags: 0xe00003fd
......................... Hsvutil.org passed test FsmoCheck
C:\Program Files\Support Tools>
Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local machine SPRAG1, is a DC.
* Connecting to directory service on server SPRAG1.
* Collecting site info.
* Identifying all servers.
* Found 2 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\SP
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... SPRAG1 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\SP
Starting test: Replications
* Replications Check
......................... SPRAG1 passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions Check for
CN=Schema,CN=Configuration
* Security Permissions Check for
CN=Configuration,DC=Hsvuti
* Security Permissions Check for
DC=Hsvutil,DC=org
......................... SPRAG1 passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
......................... SPRAG1 passed test NetLogons
Starting test: Advertising
The DC SPRAG1 is advertising itself as a DC and having a DS.
The DC SPRAG1 is advertising as an LDAP server
The DC SPRAG1 is advertising as having a writeable directory
The DC SPRAG1 is advertising as a Key Distribution Center
The DC SPRAG1 is advertising as a time server
The DS SPRAG1 is advertising as a GC.
......................... SPRAG1 passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=SPRAG1,CN=Serv
rst-Site-Name,CN=Sites,CN=
Role Domain Owner = CN=NTDS Settings,CN=SPRAG1,CN=Serv
rst-Site-Name,CN=Sites,CN=
Role PDC Owner = CN=NTDS Settings,CN=SPRAG1,CN=Serv
-Site-Name,CN=Sites,CN=Con
Role Rid Owner = CN=NTDS Settings,CN=SPRAG1,CN=Serv
-Site-Name,CN=Sites,CN=Con
Role Infrastructure Update Owner = CN=NTDS Settings,CN=SPRAG1,CN=Serv
s,CN=Default-First-Site-Na
......................... SPRAG1 passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 3603 to 1073741823
* SPRAG1.Hsvutil.org is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 3103 to 3602
* rIDNextRID: 3309
* rIDPreviousAllocationPool is 3103 to 3602
......................... SPRAG1 passed test RidManager
Starting test: MachineAccount
* SPN found :LDAP/SPRAG1.Hsvutil.org/H
* SPN found :LDAP/SPRAG1.Hsvutil.org
* SPN found :LDAP/SPRAG1
* SPN found :LDAP/SPRAG1.Hsvutil.org/H
* SPN found :LDAP/c24fc27f-6be3-4a0d-b
rg
* SPN found :E3514235-4B06-11D1-AB04-0
a9-e06b312aab9b/Hsvutil.or
* SPN found :HOST/SPRAG1.Hsvutil.org/H
* SPN found :HOST/SPRAG1.Hsvutil.org
* SPN found :HOST/SPRAG1
* SPN found :HOST/SPRAG1.Hsvutil.org/H
* SPN found :GC/SPRAG1.Hsvutil.org/Hsv
......................... SPRAG1 passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
* Checking Service: Dnscache
* Checking Service: NtFrs
......................... SPRAG1 passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
SPRAG1 is in domain DC=Hsvutil,DC=org
Checking for CN=SPRAG1,OU=Domain Controllers,DC=Hsvutil,DC=
n DC=Hsvutil,DC=org on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=SPRAG1,CN=Serv
e-Name,CN=Sites,CN=Configu
=Hsvutil,DC=org on 1 servers
Object is up-to-date on all servers.
......................... SPRAG1 passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service Event log test
The SYSVOL has been shared, and the AD is no longer
prevented from starting by the File Replication Service.
......................... SPRAG1 passed test frssysvol
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minut
es.
......................... SPRAG1 passed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
......................... SPRAG1 passed test systemlog
Running enterprise tests on : Hsvutil.org
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope
provided by the command line arguments provided.
......................... Hsvutil.org passed test Intersite
Starting test: FsmoCheck
GC Name: \\SPRAG1.Hsvutil.org
Locator Flags: 0xe00003fd
PDC Name: \\SPRAG1.Hsvutil.org
Locator Flags: 0xe00003fd
Time Server Name: \\SPRAG1.Hsvutil.org
Locator Flags: 0xe00003fd
Preferred Time Server Name: \\SPRAG1.Hsvutil.org
Locator Flags: 0xe00003fd
KDC Name: \\SPRAG1.Hsvutil.org
Locator Flags: 0xe00003fd
......................... Hsvutil.org passed test FsmoCheck
C:\Program Files\Support Tools>
I don't see anything wrong in the dcdiag. Can you post the adprep log?
C:\WINNT\system32\debug\ad
C:\WINNT\system32\debug\ad
ASKER
Use adprep.exe located on Windows Server 2008 media. It's important that you use correct version of adprep.exe
adprep/forestprep
adprep/domainprep /gpprep
Also see following link:
http://technet.microsoft.com/en-us/library/cc771461.aspx
adprep/forestprep
adprep/domainprep /gpprep
Also see following link:
http://technet.microsoft.com/en-us/library/cc771461.aspx
What seems to be going on is that adprep can't find the infrastructure master FSMO role. Do you know what server is holding this FMSO role? Can you move the FSMO role without error to another DC? If you are still having problems with this role you might will have to seize the role.
ASKER
Yes, that is what we are using. We have copied the \sources directory from the 2008 CD locally to the Windows 2000 server and are running it from c:\sources\adprep.
ASKER
There does not appear to be a problem with the role. I transferred it and then transferred it back without any errors whatsoever. /domainprep /gpprep still fails with the same reason.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
The registry key is what seemed to be the issue. Made the changes and /domainprep /gpprep worked fine. Thanks!