Server 2003 reporting wrong domain level

Posted on 2012-09-10
Last Modified: 2012-09-10
Good Afternoon All-
My goal is to install a new 2008R2 server and make it the DC with all the FSMO roles and remove the current 2003R2 server that is the DC with all the FSMO roles.   What I have done is run all the adprep commands to prepare the domain for 2008.  When I look in AD where I can raise the domain level I can see that it’s at 2003 level now.  Now the problem I’m seeing  is when I run DCpromo on the 2008R2 server it get to a point where it tell's me that the domain is at 2000 level and 2008 can’t be a DC.

2nd thing- I felt that after seeing the first error that maybe the current DC may be having an issue so I built a new 2003R2 server, I ran DCpromo on it which ran fine, then moved all FSMO roles and GC to it. At this point all looks good; I tried the DCpromo on the 2008R2 server again but still get the same error.

After the last test failed I decided to try one more test just to see if the new domain controller was working correctly, I turned off the old domain server.  Once the old DC was turned off I was unable to log on my test workstation to the domain.  I was unable to add a new workstation to the domain; it gave the error that a domain was not found.

At this point I put everything back to the way it was; the original DC is now back on and is the holder of all the FSMO roles and is a GC.  All domain functions are working correctly.

It would be great if someone could point me in the right direction.

Question by:tribaltrout
    LVL 18

    Assisted Solution

    Have you checked your Domain Functional Level and Forest Functional level both ..?

    You can check Domain Functional level from ADUC /DSA.MSC
    You can check Forest Functional level from Domains and trust see below link

    Author Comment

    Ahh, the domain level is at 2003 but the forest level is still at 2000.
    I was able to raise the forest level now to 2003.
    When I run dcpromo on the 2008R2 server I get the following message.

    The DNS Server service is already installed on this server.

    There are currently 2 DNS servers that are registered as authoritative name servers for this domain.

    A domain controller running Windows Server 2008 or Windows Server 2008 R2 could not be located in this domain. To install a read-only domain controller, the domain must have a domain controller running Windows Server 2008 or Windows Server 2008 R2.

    Is this a message that is to be expected or do I still have an issue?

    And thanks for getting me back on track...
    LVL 18

    Accepted Solution

    Point the Preferred DNS server to your old DC in the NIC card of the DC you are promoting and make sure all ports are opened and disable windows firewall for all three profiles in 2008

    Author Comment

    After making the changes to the forest level and then running dcpromo on the new 2008 server all is well.  Thanks for your help.
    LVL 18

    Expert Comment


    Nice to hear that your problem has been resolved Good luck ahead

    Featured Post

    The problems with reply email signatures

    Do you wish that you could place an email signature under a reply? Well, unfortunately, you can't. That great Exchange/Office 365 signature you've created will just appear at the bottom of an email chain. What a pain! Is there really no way to solve this? Well, there might be...

    Join & Write a Comment

    I was supporting a handful of Windows 2008 (non-R2) 2 node clusters with shared quorum disks. Some had SQL 2008 installed and some were just a vendor application that we supported. For the purposes of this article it doesn’t really matter which so w…
    Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
    This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now