Link to home
Start Free TrialLog in
Avatar of Darren Crone
Darren CroneFlag for United States of America

asked on

Having difficulty adding an additional domain controller

I am trying to add an additional domain controller because of old hardware and old Operating systems. I believe the original domain controller is Server 2003 and a secondary domain controller is Server 2000. I have one additional Server 2003 and Server 2008 R2 available and would like to make them the new domain controller(s). When I try dcpromo on the 2003 server I basically get "The version of the Active Directory schema of the source forest is not compatible with the version of Active Directory on this computer."
Thanks,
Darren
Avatar of Mal Osborne
Mal Osborne
Flag of Australia image

Easy problem, you need to  raise the domain and forest functional levels to 2000 Native, from 2000 Mixed.

More here:
https://technet.microsoft.com/en-us/library/cc787290(v=ws.10).aspx
Open Active Directory Domains and Trusts
Right click on your domain name and go to properties

Check Domain Functionality Level and post result
Avatar of Darren Crone

ASKER

Current domain functional level
Windows 2000 native
You cannot raise the domain functional level because this domain includes domain controllers that are not running the appropriate version of Windows
Ok, so run Active directory site and services and check list of your all domain controllers.
It looks like one old controller (maybe old one, retired already) is listed.

You need to remove old controller to unlock option to raise forest functionality level
Yep, sounds like you have an NT4.0 or NT3.51 DC still in the domain.
Yes it shows both Domain controllers. How do I know which one to remove and could it be dangerous? Will things start "not working?" If there is some risk, I may be more comfortable doing this on the weekend :-)
ASKER CERTIFIED SOLUTION
Avatar of Tom Cieslik
Tom Cieslik
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
In Active directory site and services you should see names of your all DC's in your forest.
Make sure you going to remove right one.
Here is the correct procedure taken from  micrsosoft msdn

Adding a Domain Controller to an Existing Domain

Commerce Server 2000
After you create multiple domain controllers, Active Directory frequently and automatically replicates directory information between them. If a domain controller becomes unavailable, directory information is still available through the other domain controllers.
To add an additional domain controller to an existing domain
Click Start, and then click Run.

In the Run dialog box, in the Open box, type dcpromo, and then click OK.

In the Domain Controller Type dialog box, select Additional domain controller. This creates the domain controller as a replication partner.

In the Network Credentials dialog box, type the user name of a domain administrator, the password, and the name of the domain, and then click Next.

In the Additional Domain Controller dialog box, click Next.

In the Database and Log Location dialog box, accept the defaults, and then click Next.

In the Shared System Volume dialog box, click Next.

In the Directory Services Restore Mode Administrator Password dialog box, leave the boxes blank, and then click Next.

On the Summary dialog box, click Next.  

When the Completing Active Directory dialog box appears, click Finish, and then restart Windows.
Before I delete the older Windows Server 2000 domain controller, I am backing up both domain controllers. Also, I have since noticed that I am receiving a tombstone error message when running dcdiag.exe. Can I fix this before I remove one of my domain controllers or maybe manually replicate? Thanks!
dcdiag.txt