Darren Crone
asked on
Having difficulty adding an additional domain controller
I am trying to add an additional domain controller because of old hardware and old Operating systems. I believe the original domain controller is Server 2003 and a secondary domain controller is Server 2000. I have one additional Server 2003 and Server 2008 R2 available and would like to make them the new domain controller(s). When I try dcpromo on the 2003 server I basically get "The version of the Active Directory schema of the source forest is not compatible with the version of Active Directory on this computer."
Thanks,
Darren
Thanks,
Darren
Open Active Directory Domains and Trusts
Right click on your domain name and go to properties
Check Domain Functionality Level and post result
Right click on your domain name and go to properties
Check Domain Functionality Level and post result
ASKER
Current domain functional level
Windows 2000 native
You cannot raise the domain functional level because this domain includes domain controllers that are not running the appropriate version of Windows
Windows 2000 native
You cannot raise the domain functional level because this domain includes domain controllers that are not running the appropriate version of Windows
Ok, so run Active directory site and services and check list of your all domain controllers.
It looks like one old controller (maybe old one, retired already) is listed.
You need to remove old controller to unlock option to raise forest functionality level
It looks like one old controller (maybe old one, retired already) is listed.
You need to remove old controller to unlock option to raise forest functionality level
Yep, sounds like you have an NT4.0 or NT3.51 DC still in the domain.
ASKER
Yes it shows both Domain controllers. How do I know which one to remove and could it be dangerous? Will things start "not working?" If there is some risk, I may be more comfortable doing this on the weekend :-)
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
In Active directory site and services you should see names of your all DC's in your forest.
Make sure you going to remove right one.
Make sure you going to remove right one.
Here is the correct procedure taken from micrsosoft msdn
Adding a Domain Controller to an Existing Domain
Commerce Server 2000
After you create multiple domain controllers, Active Directory frequently and automatically replicates directory information between them. If a domain controller becomes unavailable, directory information is still available through the other domain controllers.
To add an additional domain controller to an existing domain
Click Start, and then click Run.
In the Run dialog box, in the Open box, type dcpromo, and then click OK.
In the Domain Controller Type dialog box, select Additional domain controller. This creates the domain controller as a replication partner.
In the Network Credentials dialog box, type the user name of a domain administrator, the password, and the name of the domain, and then click Next.
In the Additional Domain Controller dialog box, click Next.
In the Database and Log Location dialog box, accept the defaults, and then click Next.
In the Shared System Volume dialog box, click Next.
In the Directory Services Restore Mode Administrator Password dialog box, leave the boxes blank, and then click Next.
On the Summary dialog box, click Next.
When the Completing Active Directory dialog box appears, click Finish, and then restart Windows.
Adding a Domain Controller to an Existing Domain
Commerce Server 2000
After you create multiple domain controllers, Active Directory frequently and automatically replicates directory information between them. If a domain controller becomes unavailable, directory information is still available through the other domain controllers.
To add an additional domain controller to an existing domain
Click Start, and then click Run.
In the Run dialog box, in the Open box, type dcpromo, and then click OK.
In the Domain Controller Type dialog box, select Additional domain controller. This creates the domain controller as a replication partner.
In the Network Credentials dialog box, type the user name of a domain administrator, the password, and the name of the domain, and then click Next.
In the Additional Domain Controller dialog box, click Next.
In the Database and Log Location dialog box, accept the defaults, and then click Next.
In the Shared System Volume dialog box, click Next.
In the Directory Services Restore Mode Administrator Password dialog box, leave the boxes blank, and then click Next.
On the Summary dialog box, click Next.
When the Completing Active Directory dialog box appears, click Finish, and then restart Windows.
ASKER
Before I delete the older Windows Server 2000 domain controller, I am backing up both domain controllers. Also, I have since noticed that I am receiving a tombstone error message when running dcdiag.exe. Can I fix this before I remove one of my domain controllers or maybe manually replicate? Thanks!
dcdiag.txt
dcdiag.txt
More here:
https://technet.microsoft.com/en-us/library/cc787290(v=ws.10).aspx