• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 97
  • Last Modified:

Failing DC Promo

Had (2) 2003 DC's, Updated the primary to 2008 32 bit , ran DCpromo /forestprep and /domainprep without incident.
While updating the secondary machine I had some sort of corruption occur rendering the machine unbootable but otherwise intact. End result was that the machine was not DCpromo-ed out of the system.

Installed 2008 R2 64 bit on this machine, installation went fine.
Tried to DCPromo to a DC and DNS and it fails saying I need to run DCpromo  /forestprep and /domainprep again.  I learn that 2008 R2 had its own ADprep32 for use on a 32 bit existing DC so I copy that to my qorkign DC and run it. There is no feedback but it returns opt the cmd prompt without error

Still cant promote this second machine, same error.

On the working machine:
ADSIedit shows objectversion at 44 and ADupdate at revision 3 both indicating schema is at server 2008 not R2. Since the working server is indeed 2008 and not R2 I thought that was OK.

I am at a 2008 functional level

DCPromo continues to fail on the new R2 machine and I am out of ideas. I have gone through and cleaned out all the metadata of the old machine I could find.

What else can I try?
0
Salad-Dodger
Asked:
Salad-Dodger
  • 4
  • 2
1 Solution
 
Cliff GaliherCommented:
You will not successfully promote the 2008 R2 server while the schema is still at 2008, so the "I thought it was okay" is incorrect when it comes to promoting a new machine.

You must run adprep32 from media *or* copy the entire folder (not just the program.)  In the folder are all the schema files that adprep actually reads and processes, so if you only copy the .exe, it'll run just fine, but won't find schema files and therefore won't *do* anything.

So....first, go back and manually clean out old entries for failed DCs (in DNS, in ADUC, and using ntdsutil to clean up metadata.) Then use repladmin to verify replication is not reporting any errors and that your remaining DCs are healthy. Promoting a new DC into a dysfunctional AD environment is just asking to make problems worse.

Once you know you are healthy, run adprep from media or copy the whole folder. Whether you run adprep or adprep32 obviously depends on where you are running it.  Then dcpromo. And finally, rerun repladmin and make sure your environment is *still* healthy after the changes and that the new DC is behaving.

-Cliff
0
 
Salad-DodgerAuthor Commented:
Well now, that didn't translate from my google search ! Entire folder... OK copied that and typed adprep32 /forestprep. Now instead of saying nothing, it says I'm not part of the Schema or Enterprise admin groups, which is more than it did before! But not correct either, I am in those groups.
0
 
Cliff GaliherCommented:
make sure you are using "run as administrator" when you open the command prompt. UAC may be biting you.
0
[Webinar] Cloud and Mobile-First Strategy

Maybe you’ve fully adopted the cloud since the beginning. Or maybe you started with on-prem resources but are pursuing a “cloud and mobile first” strategy. Getting to that end state has its challenges. Discover how to build out a 100% cloud and mobile IT strategy in this webinar.

 
Salad-DodgerAuthor Commented:
Did that too.  Its like its mocking me now.
What is the Repadmin command you want to see done?
0
 
Salad-DodgerAuthor Commented:
Logged off and back on. Everything then went as it should. New machine is doing its thing now. Thank you.
0
 
Salad-DodgerAuthor Commented:
Entire Folder... Important step.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now