Link to home
Start Free TrialLog in
Avatar of betheask
betheask

asked on

Cannot Add AD/DC to Windows Server 2008

I have a Windows Server 2003 network and I am trying to add a Windows 2008 Server Ent R2 as a DC to the network.  I ran adprep /forestprep , adprep /domainprep and adprep  /domainpprep on all of the  W2k3 Domain Controls.     When I tried to add AD roles to the Windows 2008 Server Ent R2 by running DCPROMO on the Windows 2008 Server I receive this error  To install a domain controller into the Active Directory forest, you must first prepare the forest using adprep /forest prep. needs to be run.   I then try to rerun adprep commands on the 2003 DCs I receive the error that the commands have already been run.  Please tell me what I need to do to make the 2008 server a DC on this Network.
Avatar of betheask
betheask

ASKER

This is the first Windows Server 2008 in the network.
Avatar of Glen Knight
Check all the DC's and the Windows 2008 server are all pointing to valid INTERNAL windows DNS servers ONLY they should not have any other entries.

If you make any changes here restart the NETLOGON service on the server you make changes to.

Is the 2007 DVD a 64 bit one? If so ate the 2003 servers32 bit?  If yes make sure you are running adprep32.exe /forestprep and make sure this is on the Schema Master, fund out where the FSMO roles are by following this guide:http://support.microsoft.com/kb/324801
Yes I checked all the DC's and the 2008 server and they are pointing to a valid INTERNAL DNS only.  I restarted the the server that has the Schema Master.  I used the adprep32.exe /forestprep on the Domain.   I still get the same error message.

Sam
The Windows server 2008 can see the Domain forest.
How many DC's do you have?

Can you post DCDIAG results from them all
Any help?
What does SPF-server do?
it is a file server at one of my location
Can you run NETDIAG on all DC's and post the results please.
OK first thing is to disable any network cards that are not being used.  There are a few that have APIPA addresses.  Make sure you disable them in device manager.

Also ensure that the servers only have valid INTERNAL DNS servers that are WINDOWS server in the network configuration

once you have made the above changes run DCDIAG /FIX on all DC's then try your  Windows 2008 server again.
ATL-Server has Connection 5 and 4 that need to be disabled.

SI-EXCHANGE has an invalid DNS entry.
I tried all of that with no success.
Have you disabled all the cards that are not being used?
And updated all the DNS?

You need to check the DNS zone and make sure there are no entries for any if the DC's with incorrect IP addresses?

Also make sure that you are not using the loopback address (127.0.0.1) in the DNS config of any of the network cards always use a proper IP address.

Can you post NETDIAG now you have made all those changes.
I tried all of that with no success again (see attached netdiags below)
atl-server-netDIAG2.txt
si-exchange-netdiag2.txt
si-server-netDIAG2.txt
spfm-server-netDIAG2.txt
spf-server-netDIAG2.txt
ATL-SERVER one if the DNS servers is on a different subnet do you have routing enabled between the subnets.

Also it's pointing to itself for DNS does it actually have DNS installed as it's saying the DNS is not registered correctly on this server? Can you run NETDIAG /FIX on this server.

 Also can you confirm the servers arecable to communicate with the WINS server that has been specified?
I assume since this is an 2008 server that you have tried adding the Active Directory Roles through the GUI?
Roles --- Add Role ----Active Directory Roles?
It can be done by running DCPROMO as well.
ATL-Server is a DNS server.

  I tried the GUI and the Cmd Line "DCPROMO"  with no success.
It has a secondary DNS server that is on a different subnet is this correct?

Which of the 5 are DNS servers?
all of them
Can they all PING all DNS servers?
Are they all at the same site?
Yes they and can be ping.  No they are not at the same site.   Atl-server and si-server or at the same, spf-server diff location, si-exchange diff location, and spfm-server is at diff location
And which location is the new server at?
And which server holds the FSMO roles?

Is there a Global Catalogue server at each site?
si-exchange
Which question is that answering?

I am trying to help you but need as much information as you can give me!

Can you give me a rundown of your configuration please?
SI-Exchange:    FSMO and Global Catalogue
SI-Server:         Global Catalogue
ATL-Server:     Global Catalogue
SPF-Server:     Global Catalogue
SPFM-Server:  Global catalogue


Sites? Subnets? Location of new server with reference to the others?
The new Windows 2008 server is at 192.168.88.x location.
What about the rest?
Are there any other servers at this location.

I am trying to help you but you need to help me too!
Yes the Atl-server and SI-server is at the same location the Windows 2008 server is.
any help?
Are there anyone out there that can help me with the problem?

You can call me at 404 725-5525.
I can help but I am finding it very difficult when you don't provide all the information I ask for.

If the 2008 server can communicate with the server that holds all the FSMO roles can you put this servers IP address I'm the DNS settings of your 2008 server?

Make sure there are no other entries then run IPCONFIG /FLUSHDNS on the 2008 server and try again.

Make sure you also have the DNS suffix specified in the advanced DNS settings on the 2008 network card.


If the 2008 server can communicate with the server that holds all the FSMO roles can you put this servers IP address I'm the DNS settings of your 2008 server?

Yes, Done see attached below:

Make sure there are no other entries then run IPCONFIG /FLUSHDNS on the 2008 server and try again.

There is no other    (see below).  
"Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\administrator.SI>ipconfig /flushdns

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

C:\Users\administrator.SI>
 


Make sure you also have the DNS suffix specified in the advanced DNS settings on the 2008 network card.
Done see attached:


 
WS2K8--Screan-2.doc
ASKER CERTIFIED SOLUTION
Avatar of Glen Knight
Glen Knight
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial