Solved

Upgrading schema to 2012 from 2003 DC.

Posted on 2015-01-08
7
224 Views
Last Modified: 2015-01-09
Upgrading schema to 2012 from 2003 DC. When running ADPrep domain prep from 2012 DVD on 2003 DC, I get an error not valid 32 application. Please advise. Is the ADPrep for 32 should be used from 2008 DVD?? Will it update domain for 2012?

The link below says prepare DC for 2008 but I need for 2012!! Can't find it anywhere to prepare for 2012 from 2003 DC
http://technet.microsoft.com/en-us/library/cc754670(v=ws.10).aspx
0
Comment
Question by:creative555
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 34

Expert Comment

by:it_saige
ID: 40538626
You need to run ADPREP32 from the 2012 media (DVD or ISO).  But at the same time, 2012 will auto-magically run ADPREP for you when you add the Active Directory Roles to the 2012 server (the wizard will prompt you to do so).

http://blogs.technet.com/b/askpfeplat/archive/2012/09/03/introducing-the-first-windows-server-2012-domain-controller.aspx

As a side note, you may run into a problem with running ADPREP for 2012 in a pure Windows Server 2003 DC environment.  The issue is resolved by changing the DCOM settings:

As referenced here: EE PAQ 28168026

And addressed here: http://www.kickassnetwork.net/?p=431

-saige-
0
 

Author Comment

by:creative555
ID: 40539162
I dont see ADPREP32 on windows server 2012 DVD....
0
 

Author Comment

by:creative555
ID: 40539165
I found a solution that I can run adprep /domain prep for any member 2008 server in the domain and this was successfull!! FOr some reason though adprep /domainprep /gpprep told me that this was already completed successfully and I did NOT run GPprep command.

I am wondering do I have to run adprep /domainprep /gpprep from infrustructure master???

I just ran it from 2008 member server and our infrastructure master is 2003 server....so same problem

please advise
0
Online Training Solution

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action. Forget about retraining and skyrocket knowledge retention rates.

 
LVL 34

Expert Comment

by:it_saige
ID: 40540155
According to Microsoft:
adprep /forestprep - must be ran on the schema operations master for the forest (once for the entire forest).
adprep /domainprep - must be ran on the infrastructure operations master for the domain (once in each domain).
adprep /domainprep /gpprep - must be ran on the infrastructure operations master for the domain (once in each domain).
Source

The important thing to note is that ADPREP is only ran once in the forest and once for each domain.  It is not per server.

What does your schema version report?

In powershell:
Get-ADObject (Get-ADRootDSE).schemaNamingContext -Property objectVersion

Open in new window

Here is a list of schema versions:

69 = Windows Server 2012 R2
56 = Windows Server 2012
47 = Windows Server 2008 R2
44 = Windows Server 2008
31 = Windows Server 2003 R2
30 = Windows Server 2003
13 = Windows 2000

Source

The schema version *should* be the version for the latest operating system on your domain controllers.  For example:
If you have 5 DC's, 3 are Windows Server 2003, 1 is Windows Server 2008 and 1 is Windows Server 2008 R2, your schema version would be 47.

-saige-
0
 

Author Comment

by:creative555
ID: 40540838
The following is incorrect for 2012 - adprep /forestprep - must be ran on the schema operations master for the forest (once for the entire forest).

I was able to run it from 2008 server that was NOT schema master and it worked!! SO you DO NOT have to run it from schma master and we have schema master so 2003 -so it would not work
0
 
LVL 34

Accepted Solution

by:
it_saige earned 500 total points
ID: 40540898
These are not my words, they are Microsoft's.  I tend to listen to *them* when it comes to *their* operating systems and how to successfully manage them.

Also, unless you ran ADPREP from the 2012 media, you did not ADPREP the domain for 2012, you did it for 2008.  ADPREP for 2012 is handled by the Active Directory Domain Services Role wizard from the 2012 server.

Consider the following:
Beginning with Windows Server 2012, Adprep.exe is integrated into the AD DS installation process and runs automatically as needed. For example, when you install the first domain controller that runs Windows Server 2012 into an existing domain and forest, then adprep /forestprep and adprep /domainprep automatically run and report the results of the operations.
Some organizations may prefer to run Adprep.exe separately, either in advance of an AD DS installation or simply to extend an existing AD DS schema to support new features such as the Device Registration Service in Windows Server 2012 R2. For this reason, Adprep.exe is also included in the \Support\Adprep folder of the operating system disk.
Also beginning with Windows Server 2012, there is only one 64-bit version of Adprep.exe. It can be run remotely from any server that runs a 64-bit version of Windows Server 2008 or later. The computer where you run it can be either domain-joined or in a workgroup. It includes new syntax and parameter options in order to run it remotely.
For more information about the objects and containers that are created when the schema is extended to support Windows Server 2012 R2 and Windows Server 2012, see Changes to Adprep.exe.
Considerations for using Adprep.exe in Windows Server 2012 R2 and Windows Server 2012

-saige-
0
 

Author Closing Comment

by:creative555
ID: 40541139
Thank you so much!! I absolutely agree that those are Microsoft word's and not yours :) Running from 2012 DVD worked!!!

Appreciate all the help!
0

Featured Post

Online Training Solution

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action. Forget about retraining and skyrocket knowledge retention rates.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
Let's recap what we learned from yesterday's Skyport Systems webinar.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Suggested Courses

632 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question