Introducing 2008 Domain Controller to 2003 network with ADPREP /FORESTPREP Fails

We are trying to add a 2008 server into our active directory.  Currently we have a forest domain with FDC1 and a backups domain controller to this called FDC2.

Then below that we have user domain controllers for each branch that users use for signing on.  These are DC1, DC2, DC3.  Currently they have been 2003 servers up until now and we have to add a 2008.

I am on FDC1 and running adprep \forestprep to which I get the following error attached:
ADPREP-ERROR.JPG
bergquistcompanyAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Red_TechCommented:
Do you have an antivirus running like McAfee? It can interfere with this.
0
Mike KlineCommented:
are you running the /forestrpep on your schema master?

Is this 2008 or 2008R2.  I'm only asking because 2008 R2 includes adprep32 if your current OS is 32 bit

Thanks

Mike
0
backhaulCommented:
Afternoon:

Seems like you may not have access to the whole schema (ie., Status/Consequence line).  
What rights do you have and what does the adprep.log state?
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

Darius GhassemCommented:
You should be running on your schema master. Make sure you are running the command prompt at a elevated permission.

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/A_3644-Windows-2008-Server-R2-adprep-adprep32.html
0
bergquistcompanyAuthor Commented:
We uninstalled McAfee completely after seeing several posts on it online, but get the same error.

We are running it on the schema master after confirming it's role.  It is 2008 R2 and we are using 32 bit adprep
0
bergquistcompanyAuthor Commented:
adprep log:
Adprep created the log file ADPrep.log under C:\WINDOWS\debug\adprep\logs\20120410110917 directory.



Adprep copied file C:\Documents and Settings\Administrator.BQROOT\Desktop\adprep\schema.ini from installation point to local machine under directory C:\WINDOWS.



Adprep copied file C:\Documents and Settings\Administrator.BQROOT\Desktop\adprep\schupgrade.cat from installation point to local machine under directory C:\WINDOWS\system32.



Adprep copied file C:\Documents and Settings\Administrator.BQROOT\Desktop\adprep\PAS.ldf from installation point to local machine under directory C:\WINDOWS\system32.



Adprep copied file C:\Documents and Settings\Administrator.BQROOT\Desktop\adprep\dcpromo.csv from installation point to local machine under directory C:\WINDOWS\debug\adprep\data.



Adprep successfully made the LDAP connection to the local Active Directory Domain Controller BQROOT.



Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is (null).



LDAP API ldap_search_s() finished, return code is 0x0



Adprep successfully retrieved information from the local Active Directory Domain Services.



Adprep successfully initialized global variables.

[Status/Consequence]

Adprep is continuing.





ADPREP WARNING:



Before running adprep, all Windows 2000 Active Directory Domain Controllers in the forest should be upgraded to Windows 2000 Service Pack 4 (SP4) or later.



[User Action]

If ALL your existing Windows 2000 Active Directory Domain Controllers meet this requirement, type C and then press ENTER to continue. Otherwise, type any other key and press ENTER to quit.



Adprep set the value of registry key System\CurrentControlSet\Services\NTDS\Parameters\Schema Update Allowed to 1



Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is cn=27a03717-5963-48fc-ba6f-69faa33e70ed,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=bergquistcompany,DC=com.



LDAP API ldap_search_s() finished, return code is 0x20



Adprep verified the state of operation cn=27a03717-5963-48fc-ba6f-69faa33e70ed,cn=Operations,cn=ForestUpdates,CN=Configuration,DC=bergquistcompany,DC=com.

[Status/Consequence]

The operation has not run or is not currently running. It will be run next.



Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is (null).



LDAP API ldap_search_s() finished, return code is 0x0



Adprep was unable to upgrade the schema on the schema master.

[Status/Consequence]

The schema will not be restored to its original state.

[User Action]

Check the Ldif.err log file in the (null) directory for detailed information.

Adprep encountered a Win32 error.

Error code: 0x202b Error message: A referral was returned from the server..



Adprep set the value of registry key System\CurrentControlSet\Services\NTDS\Parameters\Schema Update Allowed to 0



Adprep was unable to update forest information.

[Status/Consequence]

Adprep requires access to existing forest-wide information from the schema master in order to complete this operation.

[User Action]

Check the log file, ADPrep.log, in the C:\WINDOWS\debug\adprep\logs\20120410110917 directory for more information.
0
Darius GhassemCommented:
Run dcdiag post results.

Are you sure you are on schema master?

Go through the link I posted see what your current levels are for the schema.
0
bergquistcompanyAuthor Commented:
DCDIAG: Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator.BQROOT>dcdiag

Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests

   Testing server: Chanhassen\BQROOT
      Starting test: Connectivity
         ......................... BQROOT passed test Connectivity

Doing primary tests

   Testing server: Chanhassen\BQROOT
      Starting test: Replications
         ......................... BQROOT passed test Replications
      Starting test: NCSecDesc
         ......................... BQROOT passed test NCSecDesc
      Starting test: NetLogons
         ......................... BQROOT passed test NetLogons
      Starting test: Advertising
         Warning: BQROOT is not advertising as a global catalog.
         Check that server finished GC promotion.
         Check the event log on server that enough source replicas for the GC ar
e available.
         ......................... BQROOT failed test Advertising
      Starting test: KnowsOfRoleHolders
         ......................... BQROOT passed test KnowsOfRoleHolders
      Starting test: RidManager
         ......................... BQROOT passed test RidManager
      Starting test: MachineAccount
         ......................... BQROOT passed test MachineAccount
      Starting test: Services
            NETLOGON Service is paused on [BQROOT]
         ......................... BQROOT failed test Services
      Starting test: ObjectsReplicated
         ......................... BQROOT passed test ObjectsReplicated
      Starting test: frssysvol
         ......................... BQROOT passed test frssysvol
      Starting test: frsevent
         ......................... BQROOT passed test frsevent
      Starting test: kccevent
         ......................... BQROOT passed test kccevent
      Starting test: systemlog
         ......................... BQROOT passed test systemlog
      Starting test: VerifyReferences
         ......................... BQROOT passed test VerifyReferences

   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom

   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom

   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom

   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom

   Running partition tests on : bergquistcompany
      Starting test: CrossRefValidation
         ......................... bergquistcompany passed test CrossRefValidati
on
      Starting test: CheckSDRefDom
         ......................... bergquistcompany passed test CheckSDRefDom

   Running enterprise tests on : bergquistcompany.com
      Starting test: Intersite
         ......................... bergquistcompany.com passed test Intersite
      Starting test: FsmoCheck
         ......................... bergquistcompany.com passed test FsmoCheck

C:\Documents and Settings\Administrator.BQROOT>
0
bergquistcompanyAuthor Commented:
we ran the role lookup
Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator.BQROOT>dsquery server -hasfsmo schema
"CN=BQROOT,CN=Servers,CN=Chanhassen,CN=Sites,CN=Configuration,DC=bergquistcompan
y,DC=com"

C:\Documents and Settings\Administrator.BQROOT>
0
Darius GhassemCommented:
Start you netlogon service this paused.

GC is having an issue as well but start netlogon then run another dcdiag
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
bergquistcompanyAuthor Commented:
Started and just tried adprep again and appears to have started!  THANK YOU!  Finished successfully.
0
backhaulCommented:
So just to make sure of the solution here:

dcdiag produced the output on the netlogon service:
    Starting test: NetLogons
         ......................... BQROOT passed test NetLogons
      Starting test: Advertising
         Warning: BQROOT is not advertising as a global catalog.
         Check that server finished GC promotion.
         Check the event log on server that enough source replicas for the GC ar
e available.

Open in new window

"
Which states points to the netlogon service as not running (ie., paused).
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.