Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

W2008 AD Upgrade Problem

Posted on 2014-03-02
7
Medium Priority
?
294 Views
Last Modified: 2014-05-02
I am looking to upgrade AD from W2008 SBS to W2012.
There are are 2 AD controllers - SBS2008 plus W2008 R2 at another site, permanently connected by a VPN.
I have run the command Dcdiag /v /c /d /e /s:DCName.
Part of the output says (note I have removed direct server and domain name references):

"      Starting test: VerifyEnterpriseReferences
       The following problems were found while verifying various important DN
       references.  Note, that  these problems can be reported because of
       latency in replication.  So follow up to resolve the following
       problems, only if the same problem is reported on all DCs for a given
       domain or if  the problem persists after replication has had
       reasonable time to replicate changes.
       [1] Problem: Missing Expected Value
            Base Object:
            CN="servername",OU=Domain Controllers,DC="domain name",DC=local
            Base Object Description: "DC Account Object"
            Value Object Attribute Name: msDFSR-ComputerReferenceBL
            Value Object Description: "SYSVOL FRS Member Object"
            Recommended Action: See Knowledge Base Article: Q312862
"
Now I believe this refers to missing FRS Objects and FRS attributes and I need the file "Topchk.cmd" to parse the output of "NtrfsUtl ds" command. It just isn't clear to me where I get "Topchk.cmd" from and why its access appears to be restricted?

Thanks for any help
0
Comment
Question by:ajmcqueen
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
7 Comments
 
LVL 38

Assisted Solution

by:Mahesh
Mahesh earned 668 total points
ID: 39898870
You don't need to find "Topchk.cmd" mentioned in KB article in question

Just go to adsiedit and go to domain.com\system\File replication services\domain System volume and check server properties and all related attributes are correct
For Ex:ServerReference
You need to find out missing \ invalid attributes mentioned in KB article and need to correct them according to steps provided in KB article

Mahesh
0
 
LVL 74

Assisted Solution

by:Jeffrey Kane - TechSoEasy
Jeffrey Kane - TechSoEasy earned 1332 total points
ID: 39898881
While I think its a good idea to run the DCDIAG and diagnose whatever problems it comes up with, I've found that adding a Server 2012 DC to an existing domain is sometimes easier to do from the Server 2012 itself as the checks it does on the network provide fairly good feedback.

http://blogs.technet.com/b/askpfeplat/archive/2012/09/03/introducing-the-first-windows-server-2012-domain-controller.aspx

Once it gets added you can move the FSMO roles over to it and then be sure to fully uninstall Exchange from your SBS before demoting it so you don't leave any remnant Exchange objects in AD.

Jeff
0
 

Author Comment

by:ajmcqueen
ID: 39898926
Jeff

Actually, I have to migrate Exchange over to the 2012 Server - to Exchange 2013.
0
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 39898997
I don't suggest that you run Exchange 2013 on a DC.  While this is not "unsupported" it's definitely not recommended.  Exchange on an SBS was a different story because of the way the wizards configured multiple services at the same time in order to ensure things would run well and be secure.

Since you will have virtualization rights with the Server 2012, you can install a Hyper-V host and then two separate Server 2012's -- one being the DC and the other for Exchange.  Of course, be sure you have a server with enough resources to do this.

Follow this checklist to do the Exchange Migration:
http://technet.microsoft.com/en-us/library/ff805032(v=exchg.150).aspx

And still -- be sure to fully uninstall Exchange 2010 from your SBS before demoting it.  Otherwise you'll leave some nasty legacy stuff in your AD.

Jeff
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 39898999
0
 

Author Comment

by:ajmcqueen
ID: 39899129
OK. I was aware of the issue of not running Exchange on a DC. The plan is to put a copy of W2012 on the SBS server hardware to run as a DC. Obviously I will need a 3rd server as a temporary stand-in to run as a DC until the SBS has been wiped.
0
 
LVL 74

Accepted Solution

by:
Jeffrey Kane - TechSoEasy earned 1332 total points
ID: 39899526
That is just another reason that doing it virtually is the way to go.
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A bad practice commonly found during an account life cycle is to set its password to an initial, insecure password. The Password Reset Tool was developed to make the password reset process easier and more secure.
It’s time for spooky stories and consuming way too much sugar, including the many treats we’ve whipped for you in the world of tech. Check it out!
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question