adprep for a 2008 r2 server

I have a windows 2008 R2 standard server that I want to dcpromo. When I try I get prompted to run adprep/forest prep. I already have two 2008 servers service pack 2 64bit as dc's along with a windows 2003 server
jim3725Asked:
Who is Participating?
 
Darius GhassemConnect With a Mentor Commented:
Let things settle before demoting later today run dcdiag to check for any errors.

Once you are sure that is working then you can demote the server.

Here is how you raise the levels.

http://www.petri.co.il/raising-windows-server-2008-active-directory-domain-and-forest-functional-levels.htm
0
 
Lee W, MVPTechnology and Business Process AdvisorCommented:
But you don't have any R2 servers!

2008 R2 is DIFFERENT from 2008.  AD is newer.  You need to run ADPREP from the R2 disk (R2 is NOT Service Pack 2; R2 is equivalent to Win7, 2008 (non R2) is equivalent to Vista)
0
 
Stelian StanNetwork AdministratorCommented:
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
Darius GhassemCommented:
That is correct like leew said R2 is a different version the Windows 2008 server you need to run adprep32 off the R2 DVD
0
 
jim3725Author Commented:
I currently have 3 dc's , two of them are windows 2008 enterprise service pck2  64bit and the other one is 2003 server, I want to get the 2008 R2 standard server to be a dc, but I can't until I run adprep/forestprep and adprep/domainprep. I have the dvd with the support folder for the 2008 R2 ready. My question is do I have to run it from a dc server and if it's on the 2003 server I run adprep32 or if it's on 2008 server then it's just adprep.. The article is very good , I am just double checking..
0
 
Darius GhassemCommented:
You need to find out which DC is your schema master

http://www.petri.co.il/determining_fsmo_role_holders.htm

Once you have determined the schema master you run the adprep or adprep32 depending if the server is 32 or 64 bit.
0
 
jim3725Author Commented:
I have run adprep /forestprep from schema master successfuly along with adprep/domainprep.
I have verify the attribute changes as listed, revision value = 5 and object version 47.
I only have one problem now, I am trying to dcpromo the windows 2008 R2 server and got the following message.  A delegation for this dns server cannot be created because the authoritative parent zone cannot be found or it does not run windows dns server. If you are integrating with an existing DNS infrastructure (which I am) you should manually create a delegation to this dns server in the parent zone to ensure reliable name resolution from outside the domain. Otherwise no action is required. Should I continue??  I already had adds service installed,
0
 
Darius GhassemCommented:
Yes, you can proceed make sure you are pointing to the existing DNS server for primary in the TCP\IP settings of the new DC until replication as fully taken place.
0
 
jim3725Author Commented:
I have successfully dc promo the windows 2008 R2 server into my 2003 function domain.
I have one remaining question. I have a remaining 2003 server that I want to demote from being a dc. Once I do this, should I do anyting with the domain/forest functional levels? It is currently at windows server 2003.BTW,  I plan on letting things settle for a few days before demoting this windows 2003 server
0
 
jim3725Author Commented:
I ran dcdiag and everything passed except the following.
tarting test: NCSecDesc
    Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
       Replicating Directory Changes In Filtered Set
    access rights for the naming context:
    DC=ForestDnsZones,DC=PVH,DC=local
    Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
       Replicating Directory Changes In Filtered Set
    access rights for the naming context:
    DC=DomainDnsZones,DC=PVH,DC=local
    ......................... DC1 failed test NCSecDesc
0
 
jim3725Author Commented:
Very thorough information
0
 
Darius GhassemCommented:
The error is just stating you have not preped your domain for RODC servers and it is not required.
0
 
jim3725Author Commented:
Thanks for your help. I did have an issue on this server after it was dcpromo. I was running Virtual Machine Manager using Microsoft Sql 2005, and now that is not working. It is like a perminssion that is not letting me startup the sql service. Any thoughts on it
0
 
Darius GhassemCommented:
When you promote a server it disables the local users and computers you need to check the services and users to make sure that you have a domain user with permissions to start the service
0
 
jim3725Author Commented:
I will verify it, thanks darisug
0
 
Darius GhassemCommented:
Just to add if you add a domain user you need to go to the Domain Controller Group Policy to add the user to be able to logon as a service.
0
 
jim3725Author Commented:
The Sql server vmm service is using network service to logon.
0
 
jim3725Author Commented:
I get an error message of The SQL Server $VmM$ service terminated with service-specific error 17113
0
 
Darius GhassemCommented:
Open another question.

I am not for sure but this seems to be a permissions issue. SQL should be running under an account
0
 
jim3725Author Commented:
thanks , I believe sql was using a local acct prior to dc promo. I will try using another account, and i will post a new question if need be.. thanks for all your help
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.