• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 586
  • Last Modified:

Cannot Add AD/DC to Windows Server 2008

I have a Windows Server 2003 network and I am trying to add a Windows 2008 Server Ent R2 as a DC to the network.  I ran adprep /forestprep , adprep /domainprep and adprep  /domainpprep on all of the  W2k3 Domain Controls.     When I tried to add AD roles to the Windows 2008 Server Ent R2 by running DCPROMO on the Windows 2008 Server I receive this error  To install a domain controller into the Active Directory forest, you must first prepare the forest using adprep /forest prep. needs to be run.   I then try to rerun adprep commands on the 2003 DCs I receive the error that the commands have already been run.  Please tell me what I need to do to make the 2008 server a DC on this Network.
0
betheask
Asked:
betheask
  • 19
  • 18
1 Solution
 
betheaskAuthor Commented:
This is the first Windows Server 2008 in the network.
0
 
Glen KnightCommented:
Check all the DC's and the Windows 2008 server are all pointing to valid INTERNAL windows DNS servers ONLY they should not have any other entries.

If you make any changes here restart the NETLOGON service on the server you make changes to.

Is the 2007 DVD a 64 bit one? If so ate the 2003 servers32 bit?  If yes make sure you are running adprep32.exe /forestprep and make sure this is on the Schema Master, fund out where the FSMO roles are by following this guide:http://support.microsoft.com/kb/324801
0
 
betheaskAuthor Commented:
Yes I checked all the DC's and the 2008 server and they are pointing to a valid INTERNAL DNS only.  I restarted the the server that has the Schema Master.  I used the adprep32.exe /forestprep on the Domain.   I still get the same error message.

Sam
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
betheaskAuthor Commented:
The Windows server 2008 can see the Domain forest.
0
 
Glen KnightCommented:
How many DC's do you have?

Can you post DCDIAG results from them all
0
 
betheaskAuthor Commented:
0
 
betheaskAuthor Commented:
Any help?
0
 
Glen KnightCommented:
What does SPF-server do?
0
 
betheaskAuthor Commented:
it is a file server at one of my location
0
 
Glen KnightCommented:
Can you run NETDIAG on all DC's and post the results please.
0
 
Glen KnightCommented:
OK first thing is to disable any network cards that are not being used.  There are a few that have APIPA addresses.  Make sure you disable them in device manager.

Also ensure that the servers only have valid INTERNAL DNS servers that are WINDOWS server in the network configuration

once you have made the above changes run DCDIAG /FIX on all DC's then try your  Windows 2008 server again.
0
 
Glen KnightCommented:
ATL-Server has Connection 5 and 4 that need to be disabled.

SI-EXCHANGE has an invalid DNS entry.
0
 
betheaskAuthor Commented:
I tried all of that with no success.
0
 
Glen KnightCommented:
Have you disabled all the cards that are not being used?
And updated all the DNS?

You need to check the DNS zone and make sure there are no entries for any if the DC's with incorrect IP addresses?

Also make sure that you are not using the loopback address (127.0.0.1) in the DNS config of any of the network cards always use a proper IP address.

Can you post NETDIAG now you have made all those changes.
0
 
betheaskAuthor Commented:
I tried all of that with no success again (see attached netdiags below)
atl-server-netDIAG2.txt
si-exchange-netdiag2.txt
si-server-netDIAG2.txt
spfm-server-netDIAG2.txt
spf-server-netDIAG2.txt
0
 
Glen KnightCommented:
ATL-SERVER one if the DNS servers is on a different subnet do you have routing enabled between the subnets.

Also it's pointing to itself for DNS does it actually have DNS installed as it's saying the DNS is not registered correctly on this server? Can you run NETDIAG /FIX on this server.

 Also can you confirm the servers arecable to communicate with the WINS server that has been specified?
0
 
mikeewaltonCommented:
I assume since this is an 2008 server that you have tried adding the Active Directory Roles through the GUI?
Roles --- Add Role ----Active Directory Roles?
0
 
Glen KnightCommented:
It can be done by running DCPROMO as well.
0
 
betheaskAuthor Commented:
ATL-Server is a DNS server.

  I tried the GUI and the Cmd Line "DCPROMO"  with no success.
0
 
Glen KnightCommented:
It has a secondary DNS server that is on a different subnet is this correct?

Which of the 5 are DNS servers?
0
 
betheaskAuthor Commented:
all of them
0
 
Glen KnightCommented:
Can they all PING all DNS servers?
Are they all at the same site?
0
 
betheaskAuthor Commented:
Yes they and can be ping.  No they are not at the same site.   Atl-server and si-server or at the same, spf-server diff location, si-exchange diff location, and spfm-server is at diff location
0
 
Glen KnightCommented:
And which location is the new server at?
0
 
Glen KnightCommented:
And which server holds the FSMO roles?

Is there a Global Catalogue server at each site?
0
 
betheaskAuthor Commented:
si-exchange
0
 
Glen KnightCommented:
Which question is that answering?

I am trying to help you but need as much information as you can give me!

Can you give me a rundown of your configuration please?
0
 
betheaskAuthor Commented:
SI-Exchange:    FSMO and Global Catalogue
SI-Server:         Global Catalogue
ATL-Server:     Global Catalogue
SPF-Server:     Global Catalogue
SPFM-Server:  Global catalogue


0
 
Glen KnightCommented:
Sites? Subnets? Location of new server with reference to the others?
0
 
betheaskAuthor Commented:
The new Windows 2008 server is at 192.168.88.x location.
0
 
Glen KnightCommented:
What about the rest?
Are there any other servers at this location.

I am trying to help you but you need to help me too!
0
 
betheaskAuthor Commented:
Yes the Atl-server and SI-server is at the same location the Windows 2008 server is.
0
 
betheaskAuthor Commented:
any help?
0
 
betheaskAuthor Commented:
Are there anyone out there that can help me with the problem?

You can call me at 404 725-5525.
0
 
Glen KnightCommented:
I can help but I am finding it very difficult when you don't provide all the information I ask for.

If the 2008 server can communicate with the server that holds all the FSMO roles can you put this servers IP address I'm the DNS settings of your 2008 server?

Make sure there are no other entries then run IPCONFIG /FLUSHDNS on the 2008 server and try again.

Make sure you also have the DNS suffix specified in the advanced DNS settings on the 2008 network card.
0
 
betheaskAuthor Commented:


If the 2008 server can communicate with the server that holds all the FSMO roles can you put this servers IP address I'm the DNS settings of your 2008 server?

Yes, Done see attached below:

Make sure there are no other entries then run IPCONFIG /FLUSHDNS on the 2008 server and try again.

There is no other    (see below).  
"Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\administrator.SI>ipconfig /flushdns

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

C:\Users\administrator.SI>
 


Make sure you also have the DNS suffix specified in the advanced DNS settings on the 2008 network card.
Done see attached:


 
WS2K8--Screan-2.doc
0
 
Glen KnightCommented:
And on the schema FSMO role master have you run adprep /forestprep?
If the Windows 2008 DVD is 64 bit and the Windows 2003
schema is 32 bit you will need to run adprep32 /forestprep

also run adprep /domainprep (or adprep32 /domainprep)

the adprep utility is on the 2008 DVD make sure you run it from the disk or a local copy if the disk because it runs scripts that are on th disk.
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

  • 19
  • 18
Tackle projects and never again get stuck behind a technical roadblock.
Join Now