[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 837
  • Last Modified:

Promoting a Domain controller running Windows Server 2008 having issues promoting it.

I have a network running Windows 2003 domain controllers. I do have one domain controller already that is running Windows Server 2008. I am trying to promote another Windows 2008 server into the network but now I am getting errors that I have to run adprep on the forest and domain when i have already done that. I can't get around it.

Has anyone had this issue and if so how can i work around it.

Thanks for the help
0
djreddog
Asked:
djreddog
  • 10
  • 8
  • 5
  • +2
3 Solutions
 
Darius GhassemCommented:
Depending if this new server is a 2008 R2 you will have to run adprep again if you ran adprep for Windows 2008 Server and not Windows 2008 Server R2.
0
 
Mike KlineCommented:

Can you download adfind  http://www.joeware.net/freetools/tools/adfind/index.htm
run
 
adfind -sc schver

47 = 2008 R2
44 = 2008
31 = W2K3 R2
30 = W2K3
13 = W2K
 

...just want to see what version you are at
It is odd if you already have a 2008 DC it should let you add another 2008 DC, if you were going to 2008 R2 you would need another schema extension.
Thanks
Mike
0
 
NJComputerNetworksCommented:
"I am getting errors that I have to run adprep"

Can you post the actual error? or maybe screen shot it?
0
Never miss a deadline with monday.com

The revolutionary project management tool is here!   Plan visually with a single glance and make sure your projects get done.

 
djreddogAuthor Commented:
When I run adprep and tells me it has already been updated same thing when I run forestprep or domainprep.

When i try to run the DCpromo on the new server it tells me I need to run these commands on the domain controller.

Thanks for the update but still having the issues..
0
 
djreddogAuthor Commented:
It returned the #44 so that is Windows Server 2008 :)
0
 
Darius GhassemCommented:
Run dcdiag on existing AD to check for any errors.
0
 
djreddogAuthor Commented:
Not sure if this is going to be an issue or not but I do have some other info.

The domain controller currently in the network is a Windows Server 2008 enterprise 32bit and the one they're trying to put in the network is a Windows Server 2008 R2 enterprise 64bit.

Thanks
0
 
Mike KlineCommented:
Yes that is the issue,  you will need to run adprep for 2008 R2

If you current DCs are 32 bit use adprep32  more on that here  http://policelli.com/blog/?p=433

Thanks

Mike
0
 
djreddogAuthor Commented:
Yes ever test passed :)
0
 
Darius GhassemCommented:
So, you must run the adprep32 from the R2 DVD.
0
 
djreddogAuthor Commented:
Ok when i try to do that i get an error for both domain prep and forest prep

Microsoft Windows [Version 6.0.6002]
Copyright (c) 2006 Microsoft Corporation.  All rights reserved.


D:\support\adprep>adprep32 /domainprep
Adprep was unable to check the current user's group membership.
[Status/Consequence]
Adprep has stopped without making changes.
[User Action]
Verify the current logged on user is a member of Domain Admins group, Enterprise
 Admins group and Schema Admins group if /forestprep is specified, or is a membe
r of Domain Admins group if /domainprep is specified.

Adprep encountered a Win32 error.
Error code: 0x5 Error message: Access is denied..



0
 
djreddogAuthor Commented:
The user I am login with is in the domain and enterprise admin groups. Just and FYI
0
 
Mike KlineCommented:
Are  you running forestprep on your schema master and domainprep on your infrastructure master

Thanks

Mike
0
 
jorlando66Commented:
The 2008 r2 machine should be joined to the domain as a member server.
Log into the 2008 r2 box with an account that has domain admin, schema admin and enterprise admin rights.
run adprep
promote the r2 server.

2008 r2 requires adprep be run on the 2008 domain before the r2 server can take on roles of a dc.
0
 
djreddogAuthor Commented:
jorlando66, That is my issue I have done that and now it is still asking me to run the adprep but when i try it again it tells me it has already been done.

Mike, I am running it against that box.

Any other thoughts?
0
 
Mike KlineCommented:
Yeah I'm not sure

1.  You are running adprep /forestprep on the schema master domain controller.
2.  Running with an account that has full schema/EA rights.
3.  dcdiag is clean

...I'll let you know if I think of something but what you are doing looks ok.
0
 
Darius GhassemCommented:
So, when you run the adprep32 from the R2 DVD you are getting the above message. You are running on the schema master role holder? When you run dcdiag on this machine all passes.
0
 
djreddogAuthor Commented:
Yes I think i got it now but I am running into another issue. I ran the adprep32 /forest and domain prep and that ran fine. I now tried the dcpromo now and I get the following error.

you will not be able to install a read-only domain controller in this domain because adprep /rodcprep was not run do you want to continue.

I am not sure if I want it to be a read only. I would like to start moving roles to this once it's a domain controller.

 
0
 
Darius GhassemCommented:
The error is common and it is because you haven't ran rodprep which is for read-only DCs. This is not required.
0
 
Mike KlineCommented:
You can run /rodcprep if you want to at some point use RODCs but if you don't need them right now you are ok.   You can read more on RODCs here  http://technet.microsoft.com/en-us/library/cc753223(WS.10).aspx

Generally used in unsecured locations.

If you don't do it now and in the future want an RODC you can also run the prep for it at that time.

Thanks

Mike
0
 
Darius GhassemCommented:
The experts answered the question correctly. I'm not sure why the author states no answer was given when the author posted it was working then asked another question which was answered.
0
 
djreddogAuthor Commented:
I have tried everything I was told and I still have the issue in hand. SO all these issues above are not helping. i have followed all of those as asked
0
 
Darius GhassemCommented:
You post below indicated that the problem was fixed and you were having another issue that was explain to you.


Yes I think i got it now but I am running into another issue. I ran the adprep32 /forest and domain prep and that ran fine. I now tried the dcpromo now and I get the following error.
0
 
Darius GhassemCommented:
0
 
djreddogAuthor Commented:
I had to rebuild the Domain controller. I also have to rebuild the entire domain. It was a long weekend but I had it completed after completely rebuilding a 2003 domain into a 2008 domain. The network was hit with a virus and needed to be rebuilt.

0

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

  • 10
  • 8
  • 5
  • +2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now