Solved

Going form server 2k to 2k3

Posted on 2008-10-01
17
449 Views
Last Modified: 2013-12-05
Ok first off I have searched this site over several times and tried following what I saw but key steps are missing for me.
I have allso searched Microsofts site and they are as vague to me as what I have found everywhere else.

and now to the point and what i have done so far.

I am attempting to add a windows 2003 server to a windows 2000 server as a domain controler.
I have a Brand new out of the box from dell power edge 1950 with windows 2003 server pre-installed.
And I want to Make it our New Domain Controler
I understand that to do this I must first run Addprep /forestprep and addprep /domainprep, On my Current domain controler witch is my Server 2000 machine.
Now I found the addprep folder on my 2003 CD and I copied it to the root of my win2k server and I ran it from the command line, and of course I get a error, I did a search on my system to find any and all Log files addprep might have made and I find one in 'C:WiNNT\system32\debug\adprep\logs\20081001074927"
and this is what the log shows me.

Adprep created the log file ADPrep.log under C:\WINNT\system32\debug\adprep\logs\20081001074927 directory.



Adprep copied file D:\CMPNENTS\R2\ADPREP\schema.ini from installation point to local machine under directory C:\WINNT.



Adprep copied file D:\CMPNENTS\R2\ADPREP\sch14.ldf from installation point to local machine under directory C:\WINNT\system32.



Adprep copied file D:\CMPNENTS\R2\ADPREP\sch15.ldf from installation point to local machine under directory C:\WINNT\system32.



Adprep copied file D:\CMPNENTS\R2\ADPREP\sch16.ldf from installation point to local machine under directory C:\WINNT\system32.



Adprep copied file D:\CMPNENTS\R2\ADPREP\sch17.ldf from installation point to local machine under directory C:\WINNT\system32.



Adprep copied file D:\CMPNENTS\R2\ADPREP\sch18.ldf from installation point to local machine under directory C:\WINNT\system32.



Adprep copied file D:\CMPNENTS\R2\ADPREP\sch19.ldf from installation point to local machine under directory C:\WINNT\system32.



Adprep copied file D:\CMPNENTS\R2\ADPREP\sch20.ldf from installation point to local machine under directory C:\WINNT\system32.



Adprep copied file D:\CMPNENTS\R2\ADPREP\sch21.ldf from installation point to local machine under directory C:\WINNT\system32.



Adprep copied file D:\CMPNENTS\R2\ADPREP\sch22.ldf from installation point to local machine under directory C:\WINNT\system32.



Adprep copied file D:\CMPNENTS\R2\ADPREP\sch23.ldf from installation point to local machine under directory C:\WINNT\system32.



Adprep copied file D:\CMPNENTS\R2\ADPREP\sch24.ldf from installation point to local machine under directory C:\WINNT\system32.



Adprep copied file D:\CMPNENTS\R2\ADPREP\sch25.ldf from installation point to local machine under directory C:\WINNT\system32.



Adprep copied file D:\CMPNENTS\R2\ADPREP\sch26.ldf from installation point to local machine under directory C:\WINNT\system32.



Adprep copied file D:\CMPNENTS\R2\ADPREP\sch27.ldf from installation point to local machine under directory C:\WINNT\system32.



Adprep copied file D:\CMPNENTS\R2\ADPREP\sch28.ldf from installation point to local machine under directory C:\WINNT\system32.



Adprep copied file D:\CMPNENTS\R2\ADPREP\sch29.ldf from installation point to local machine under directory C:\WINNT\system32.



Adprep copied file D:\CMPNENTS\R2\ADPREP\sch30.ldf from installation point to local machine under directory C:\WINNT\system32.



Adprep copied file D:\CMPNENTS\R2\ADPREP\sch31.ldf from installation point to local machine under directory C:\WINNT\system32.



Adprep copied file D:\CMPNENTS\R2\ADPREP\dcpromo.csv from installation point to local machine under directory C:\WINNT\system32\debug\adprep\data.



Adprep copied file D:\CMPNENTS\R2\ADPREP\409.csv from installation point to local machine under directory C:\WINNT\system32\debug\adprep\data.



Adprep successfully made the LDAP connection to the local domain controller MIDTEXBDC.



Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is (null).



LDAP API ldap_search_s() finished, return code is 0x0



Adprep successfully retrieved information from the local directory service.



Adprep successfully initialized global variables.

[Status/Consequence]

Adprep is continuing.





ADPREP WARNING:



Before running adprep, all Windows 2000 domain controllers in the forest should be upgraded to Windows 2000 Service Pack 1 (SP1) with QFE 265089, or to Windows 2000 SP2 (or later).



QFE 265089 (included in Windows 2000 SP2 and later) is required to prevent potential domain controller corruption.



For more information about preparing your forest and domain see KB article Q331161 at http://support.microsoft.com.



[User Action]

If ALL your existing Windows 2000 domain controllers meet this requirement, type C and then press ENTER to continue. Otherwise, type any other key and press ENTER to quit.



Adprep was unable to check the forest update status.

[Status/Consequence]

Adprep queries the directory to see if the forest has already been prepared. If the information is unavailable or unknown, Adprep proceeds without attempting this operation.

[User Action]

Restart Adprep and check the Adprep.log file. Verify in the log file that this forest has already been successfully prepared.

Adprep encountered a Win32 error.

Error code: 0x57 Error message: The parameter is incorrect..



And this is the end of the log.
I checked and double checked to make sure the Domain admin account had enterprise and schema rights and it does.
Please asist
Thank you in advance
James
0
Comment
Question by:HiGear21
  • 9
  • 6
  • 2
17 Comments
 
LVL 8

Assisted Solution

by:sstone55423
sstone55423 earned 120 total points
ID: 22616232
Which Adprep did you use, the one on CD1, or the one on CD2?  The on on CD2 is the one you want.  Run it from the CD.  Does your Windows 2000 DC have the latest SP installed?  (SP4)  Are there any other DC's, or just that one?  Did you join the Windows 2003 member server to the domian first?
0
 
LVL 70

Assisted Solution

by:KCTS
KCTS earned 40 total points
ID: 22616233
run ADPREP from the CD.
Note:
You need to put the 2003 CD in the 2000 DC and run Adprep.
If the new Windows 2003 server is the R2 version and the existing set-up is not then you need to run Adprep  from CD2 of the R2 disks on the existing Domain controller. Adprep is in the \CMPNENTS\R2\ folder on CD2
you need to run

adprep /forestprep
and
adprep /domainprep
0
 
LVL 70

Assisted Solution

by:KCTS
KCTS earned 40 total points
ID: 22616248
The complete process is:-
The process is as follows

Install Windows 2003 on the new machine
Assign the new computer an IP address and subnet mask on the existing network

Make sure that the preferred DNS server on new machine points to the existing DNS Server on the Domain (normally the existing domain controller)

Join the new machine to the existing domain as a member server

If the new Windows 2003 server is the R2 version and the existing set-up is not then you need to run Adprep  from CD2 of the R2 disks on the existing Domain controller. Adprep is in the \CMPNENTS\R2\ folder on CD2
you need to run

adprep /forestprep
and
adprep /domainprep

From the command line promote the new machine to a domain controller with the DCPROMO command from the command line Select Additional Domain Controller in an existing Domain

Once Active Directory is installed then install DNS. You can do this through Add/Remove Programs->Windows Components->Networking Services->DNS.  If you are using Active Directory Integrated DNS then DNS will br replicated from the other DC/DNS.

Next make the new machine a global catalog server, go to Administrative Tools, Active Directory Sites and Services, Expand, Sites, Default first site and Servers. Right click on the new server and select properties and tick the Global Catalog checkbox. (Global catalog is essential for logon as it needs to be queried to establish Universal Group Membership)

If necessary install DHCP on the new DC. You can do this through Add/Remove Programs->Windows Components->Networking Services->DHCP.

You will then need to remove any existiing DHCP prior to authorising the new DHCP Server. When setting up the new DHCP server dont forget to set the default gateway (router) and DNS Servers. Talking of which all the clients (and the domain controllers themselves) need to have their Preferred DNS server set the new domain controller.

Both Domain Controllers by this point will have Active Directory, Global Catalog, DNS and the domain could function for a while at least should any one of them fail.

If you really want rid of the old DC then:-

Transfer all the FSMO roles to the new DC: See http://www.petri.co.il/transferring_fsmo_roles.htm

Check that you have:-
Made the other DC a global catalog:
Installed DHCP on the new DC, set up the scope and authorise it. (If using DHCP)
Make sure that all clients use the new DC as their Preferred DNS server (either by static or DHCP options)

Power down to old DC and make sure that all is well, once satisfied power on the old DC again, then run DCPROMO for remove it's domain controller status. This is essential to avoid replication errors

If you want to remove the machine from the domain then you can do so one it's DC role has been removed
0
 

Author Comment

by:HiGear21
ID: 22617635
I am sorry i forgot to more very important pieces of information.
The new machine is Windows 2003 Server 64 bit version
And when I used the Second cd From the command line I get a error saying is a invalis win32 app and thats correct I expected that. So with that in mind I grabed the 32bit version put in disk 2 ran the coomand line and ended up with the befor mentioned error when i ran adprep /forestprep
0
 
LVL 8

Assisted Solution

by:sstone55423
sstone55423 earned 120 total points
ID: 22619777
You have to use the ADprep from the 64 bit CD, on 64-bit systems, and the AD prep from the 32-bit CD on older 32-bit systems (such as the old Windows 2000 DC).
0
 

Author Comment

by:HiGear21
ID: 22619812
Thats what I said I did, sorry if that was not clear. I ran the 32bit version from the 32 bit Domain Controler, and the event log with the error is what i posted.
0
 

Author Comment

by:HiGear21
ID: 22624987
This is a copy directly out of the Command window

Microsoft Windows 2000 [Version 5.00.2195]
(C) Copyright 1985-2000 Microsoft Corp.

C:\Documents and Settings\Administrator.MIDTEX>cd..

C:\Documents and Settings>cd..

C:\>d:

D:\>cd \cmpnents\r2\adprep

D:\CMPNENTS\R2\ADPREP>adprep /forestprep

ADPREP WARNING:

Before running adprep, all Windows 2000 domain controllers in the forest should
be upgraded to Windows 2000 Service Pack 1 (SP1) with QFE 265089, or to Windows
2000 SP2 (or later).

QFE 265089 (included in Windows 2000 SP2 and later) is required to prevent poten
tial domain controller corruption.

For more information about preparing your forest and domain see KB article Q3311
61 at http://support.microsoft.com.

[User Action]
If ALL your existing Windows 2000 domain controllers meet this requirement, type
 C and then press ENTER to continue. Otherwise, type any other key and press ENT
ER to quit.


c
Adprep was unable to check the forest update status.
[Status/Consequence]
Adprep queries the directory to see if the forest has already been prepared. If
the information is unavailable or unknown, Adprep proceeds without attempting th
is operation.
[User Action]
Restart Adprep and check the Adprep.log file. Verify in the log file that this f
orest has already been successfully prepared.

Adprep encountered a Win32 error.
Error code: 0x57 Error message: The parameter is incorrect..




D:\CMPNENTS\R2\ADPREP>
0
 
LVL 8

Assisted Solution

by:sstone55423
sstone55423 earned 120 total points
ID: 22625637
>Adprep was unable to check the forest update status.
Do the GPO's give full rights to th Enterprise Admins group?
What are the results of a DCdiag -v > out.txt
 
I am concerned that the Scheme master FSMO role is not running somewhere (on a DC).
netdom query fsmo  
If not, we may need to go to this DC and seize the role.
 
 
 
0
Too many email signature updates to deal with?

Do you feel like you are taking up all of your time constantly visiting users’ desks to make changes to email signatures? Wish you could manage all signatures from one central location, easily design them and deploy them quickly to users? Well, there is an easy way!

 

Author Comment

by:HiGear21
ID: 22627824
As far as I can tell the GPO does.
I am not sure how to run DCdiag, I was kind of thrown into this out of the blue and am just going from what I have read thus far. and I know nothing about the Flexible single master operation.
0
 

Author Comment

by:HiGear21
ID: 22627927
Ok I just tried to go into the domain security policy and the Domain controler Security policy and it tells me:
Failed to open the Group Polocy object. you may not have appropriate rights.
So I was wronge it apears it does not, how do I correct that?
0
 
LVL 8

Assisted Solution

by:sstone55423
sstone55423 earned 120 total points
ID: 22628402
DCdiag is run form the command line on the server.  You may have to load it from the windows support tools CD.
If you show as not having rights, then may be a rights issue.  What user name are you logged in as, and what groups does that user belong to?  I assume you are using the administrator account?  
0
 

Author Comment

by:HiGear21
ID: 22636592
I swear this is a battle every step of the way, I am unable to run DCdiag  at all, when I try to run it I get a error saying "The Procedure entry point __mb_cur_max_func could not be located in the dynamic link library msvcrt.dll. I tried running it form the command line as you see in the SS and I allso tried double clicking on the exe in the Dir and got the exact same error...I attached a screen shot of this.

allso when I tried to install support tools it tells me it has to be installed on a XP or higher machine.....
At this point its looking like it would be a lot easyer to just turn off the old DC and rebuild everything from scratch..allthough I really dont want to do that.
Dcdiag.jpeg
Stools.jpeg
0
 
LVL 8

Assisted Solution

by:sstone55423
sstone55423 earned 120 total points
ID: 22637356
The support tools has to be loaded on the new server if it is from the 2008 CD.
The first error, this is the 32-bit Windows 2008 disk being started on the Older Windows 2003 server, right?
0
 

Author Comment

by:HiGear21
ID: 22637745
it is the 32 bit 2003 server disk on the 2000 server.
0
 
LVL 8

Assisted Solution

by:sstone55423
sstone55423 earned 120 total points
ID: 22638368
Ok.  WIndows 2003 Disk 2 ADprep - 32-bit, running on your Windows 2000 DC.  Can you check the FSMO roles, as well as your administrator groups?
0
 

Author Comment

by:HiGear21
ID: 22638438
The administrator account Is the domain admin acount and as far as I can tell by looking its in every group. and other than looking at domain Polocies how would I check the FSMO roles?
0
 

Accepted Solution

by:
HiGear21 earned 0 total points
ID: 22781674
After 2 1/2 hours on the Phone with Micro Soft This has finnaly been resolved, Seems there was remnants of a prior Domain Controler in the DNS tables and thats why it would let me run it.
0

Featured Post

Why do Marketing keep bothering you?

Is your marketing department constantly asking for new email signature updates? Are they requesting a different design for every department? Do they need yet another banner added? Don’t let it get you down! There is an easy way to manage all of these requests...

Join & Write a Comment

Suggested Solutions

Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip Migration Tip #1 – Source Server Health can be found here: http://www.experts-exchang…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now