Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Migration from Server 2003 - 2012 - Unable to promote to DC - ACCESS DENIED

Posted on 2014-02-24
4
Medium Priority
?
3,755 Views
1 Endorsement
Last Modified: 2014-03-04
We have a single server running as a file server / domain controller. We are having an issue migrating AD DS from Server 2003 to Server 2012.

When we run the Active Directory Services Configuration Wizard, we receive the following error at the prerequisites check:

Verification of prerequisite for Active Directory preparation failed. Unable to perform Exchange Schema conflict check for domain mydomain.local.
 Exception: Access is denied.
 Adprep could not retrieve data from the server server2003.mydomain.local through Windows Management Instrumentation (WMI).

I've verified that both servers Windows Firewall's are disabled, the Network Service has has logon right, and everyone has full permissions to WMI via WMIMGMT.MSC. I've also run commands to rebuild the WMI store and re-register.

We cannot connect to any PC via WMIMGMT.MSC on the LAN, so I'm starting to think its our Sonicwall TZ120. Everything else is working including DFS replication.
1
Comment
Question by:qualityip
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 59

Expert Comment

by:Cliff Galiher
ID: 39884746
A firewall issue will throw an unable to connect or similarly worded warning. "Access Denied" as very explicitly reserved for a successful connection, but the OS denying access because of permissions. Make sure you are logged in as a member of all necessary admin groups (schema admin being notable) and if you've ever set up delegated permissions in AD and removed default permissions, re-add them or add the user account to the delegated groups as well.
0
 
LVL 9

Expert Comment

by:VirastaR
ID: 39885484
0
 

Accepted Solution

by:
qualityip earned 0 total points
ID: 39892040
I found that the issue was fixed by checking "Enable Distributed Com" for My Computer under component services on the Server 2003 server.
0
 

Author Closing Comment

by:qualityip
ID: 39902804
Found the answer by researching myself
0

Featured Post

Free Backup Tool for VMware and Hyper-V

Restore full virtual machine or individual guest files from 19 common file systems directly from the backup file. Schedule VM backups with PowerShell scripts. Set desired time, lean back and let the script to notify you via email upon completion.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
In this Micro Tutorial viewers will learn how to restore single file or folder from Bare Metal backup image of their system. Tutorial shows how to restore files and folders from system backup. Often it is not needed to restore entire system when onl…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

670 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question