Solved

Failing DC Promo

Posted on 2015-01-20
6
81 Views
Last Modified: 2015-01-20
Had (2) 2003 DC's, Updated the primary to 2008 32 bit , ran DCpromo /forestprep and /domainprep without incident.
While updating the secondary machine I had some sort of corruption occur rendering the machine unbootable but otherwise intact. End result was that the machine was not DCpromo-ed out of the system.

Installed 2008 R2 64 bit on this machine, installation went fine.
Tried to DCPromo to a DC and DNS and it fails saying I need to run DCpromo  /forestprep and /domainprep again.  I learn that 2008 R2 had its own ADprep32 for use on a 32 bit existing DC so I copy that to my qorkign DC and run it. There is no feedback but it returns opt the cmd prompt without error

Still cant promote this second machine, same error.

On the working machine:
ADSIedit shows objectversion at 44 and ADupdate at revision 3 both indicating schema is at server 2008 not R2. Since the working server is indeed 2008 and not R2 I thought that was OK.

I am at a 2008 functional level

DCPromo continues to fail on the new R2 machine and I am out of ideas. I have gone through and cleaned out all the metadata of the old machine I could find.

What else can I try?
0
Comment
Question by:Salad-Dodger
  • 4
  • 2
6 Comments
 
LVL 57

Accepted Solution

by:
Cliff Galiher earned 500 total points
ID: 40560870
You will not successfully promote the 2008 R2 server while the schema is still at 2008, so the "I thought it was okay" is incorrect when it comes to promoting a new machine.

You must run adprep32 from media *or* copy the entire folder (not just the program.)  In the folder are all the schema files that adprep actually reads and processes, so if you only copy the .exe, it'll run just fine, but won't find schema files and therefore won't *do* anything.

So....first, go back and manually clean out old entries for failed DCs (in DNS, in ADUC, and using ntdsutil to clean up metadata.) Then use repladmin to verify replication is not reporting any errors and that your remaining DCs are healthy. Promoting a new DC into a dysfunctional AD environment is just asking to make problems worse.

Once you know you are healthy, run adprep from media or copy the whole folder. Whether you run adprep or adprep32 obviously depends on where you are running it.  Then dcpromo. And finally, rerun repladmin and make sure your environment is *still* healthy after the changes and that the new DC is behaving.

-Cliff
0
 
LVL 1

Author Comment

by:Salad-Dodger
ID: 40560941
Well now, that didn't translate from my google search ! Entire folder... OK copied that and typed adprep32 /forestprep. Now instead of saying nothing, it says I'm not part of the Schema or Enterprise admin groups, which is more than it did before! But not correct either, I am in those groups.
0
 
LVL 57

Expert Comment

by:Cliff Galiher
ID: 40560958
make sure you are using "run as administrator" when you open the command prompt. UAC may be biting you.
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 
LVL 1

Author Comment

by:Salad-Dodger
ID: 40560970
Did that too.  Its like its mocking me now.
What is the Repadmin command you want to see done?
0
 
LVL 1

Author Comment

by:Salad-Dodger
ID: 40560994
Logged off and back on. Everything then went as it should. New machine is doing its thing now. Thank you.
0
 
LVL 1

Author Closing Comment

by:Salad-Dodger
ID: 40560995
Entire Folder... Important step.
0

Featured Post

Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Some time ago I faced the need to use a uniform folder structure that spanned across numerous sites of an enterprise to be used as a common repository for the Software packages of the Configuration Manager 2007 infrastructure. Because the procedu…
Have you considered what group policies are backwards and forwards compatible? Windows Active Directory servers and clients use group policy templates to deploy sets of policies within your domain. But, there is a catch to deploying policies. The…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question