Solved

Migration from Server 2003 - 2012 - Unable to promote to DC - ACCESS DENIED

Posted on 2014-02-24
4
3,495 Views
1 Endorsement
Last Modified: 2014-03-04
We have a single server running as a file server / domain controller. We are having an issue migrating AD DS from Server 2003 to Server 2012.

When we run the Active Directory Services Configuration Wizard, we receive the following error at the prerequisites check:

Verification of prerequisite for Active Directory preparation failed. Unable to perform Exchange Schema conflict check for domain mydomain.local.
 Exception: Access is denied.
 Adprep could not retrieve data from the server server2003.mydomain.local through Windows Management Instrumentation (WMI).

I've verified that both servers Windows Firewall's are disabled, the Network Service has has logon right, and everyone has full permissions to WMI via WMIMGMT.MSC. I've also run commands to rebuild the WMI store and re-register.

We cannot connect to any PC via WMIMGMT.MSC on the LAN, so I'm starting to think its our Sonicwall TZ120. Everything else is working including DFS replication.
1
Comment
Question by:qualityip
  • 2
4 Comments
 
LVL 56

Expert Comment

by:Cliff Galiher
ID: 39884746
A firewall issue will throw an unable to connect or similarly worded warning. "Access Denied" as very explicitly reserved for a successful connection, but the OS denying access because of permissions. Make sure you are logged in as a member of all necessary admin groups (schema admin being notable) and if you've ever set up delegated permissions in AD and removed default permissions, re-add them or add the user account to the delegated groups as well.
0
 
LVL 9

Expert Comment

by:VirastaR
ID: 39885484
0
 

Accepted Solution

by:
qualityip earned 0 total points
ID: 39892040
I found that the issue was fixed by checking "Enable Distributed Com" for My Computer under component services on the Server 2003 server.
0
 

Author Closing Comment

by:qualityip
ID: 39902804
Found the answer by researching myself
0

Featured Post

U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Synchronize a new Active Directory domain with an existing Office 365 tenant
A procedure for exporting installed hotfix details of remote computers using powershell
In this Micro Tutorial viewers will learn how to restore their server from Bare Metal Backup image created with Windows Server Backup feature. As an example Windows 2012R2 is used.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now