Re: Add W2K8 Standard member Server to W2k3 Standard Domain

Whew! i found a forum that indicated it was McAfee. I disabled reran and
all forest domain gp and rodc completed successfully. thank you

"Meinolf Weber [MVP-DS]" wrote:

Hello COB,

Did you run the command on the schema master with an account of the schema
admin groups? Check with "netdom query fsmo" on your DC and post the output
here.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Meinolf,

ran the adprep /forestprep. below is the last few statements from the
adprep log followed by the last statements made in the dos window.
Not sure what to do from here. your thoughts?

Updating change from:" International ISDN Number (Others)" to
"International ISDN Number (Others)" for locale 409, object
inetOrgPerson-Display and property attributeDisplayNames.

Adprep was unable to complete because the call back function failed.

[Status/Consequence]

Error message: Error(110) while running
""C:\WINDOWS\system32\LDIFde.exe" -o ObjectGuid -d
"CN=nTFRSReplicaSet-Display,CN=401,CN=DisplaySpecifiers,CN=Configurati
on,DC=ballwin,DC=mo,DC=us" -u -f
"C:\DOCUME~1\ADMINI~1.BAL\LOCALS~1\Temp\TMPDCF.tmp" -j
"C:\WINDOWS\debug\adprep\logs\20090127144717" -s
BALL06.ballwin.mo.us". Could not move file
C:\WINDOWS\debug\adprep\logs\20090127144717\LDIF.err to
C:\WINDOWS\debug\adprep\logs\20090127144717\DisplaySpecifierUpgradeLdi
fError.001.txt. The system cannot find the file specified.

(0x80070002).

[User Action]

Check the log file ADPrep.log, in the
C:\WINDOWS\debug\adprep\logs\20090127144717 directory for more
information.

Adprep was unable to update forest information.

[Status/Consequence]

Adprep requires access to existing forest-wide information from the
schema master in order to complete this operation.

[User Action]

Check the log file, ADPrep.log, in the
C:\WINDOWS\debug\adprep\logs\20090127144717 directory for more
information.

*****change to DOS window here *************

Adprep was unable to complete because the call back function failed.
[Status/Consequence]
Error message: Error(110) while running
""C:\WINDOWS\system32\LDIFde.exe" -o
Obj
ectGuid -d
"CN=nTFRSReplicaSet-Display,CN=401,CN=DisplaySpecifiers,CN=Configurat
ion,DC=ballwin,DC=mo,DC=us" -u -f
"C:\DOCUME~1\ADMINI~1.BAL\LOCALS~1\Temp\TMPDCF
.tmp" -j "C:\WINDOWS\debug\adprep\logs\20090127144717" -s
BALL06.city.mo.us".
Could not move file
C:\WINDOWS\debug\adprep\logs\20090127144717\LDIF.err to
C:\
WINDOWS\debug\adprep\logs\20090127144717\DisplaySpecifierUpgradeLdifEr
ror.001.tx
t. The system cannot find the file specified.
(0x80070002).
[User Action]
Check the log file ADPrep.log, in the
C:\WINDOWS\debug\adprep\logs\2009012714471
7 directory for more information.
Adprep was unable to update forest information.
[Status/Consequence]
Adprep requires access to existing forest-wide information from the
schema
maste
r in order to complete this operation.
[User Action]
Check the log file, ADPrep.log, in the
C:\WINDOWS\debug\adprep\logs\200901271447
17 directory for more information.
"Meinolf Weber [MVP-DS]" wrote:

Hello COB,

You can leave the FSMO roles also on the 2003 DC, i prefer always to
have the FSMO roles on newest OS version. But if you do the main work
at the 2003 DC's site leave them there. Why not moving the 2003 as a
failover to the other site and use the 2008?

I would make the new DC at least DNS server, so you have redundancy
if the main site server is down and the clients are configured to use
it. Also make it Global catalog server.

Since Windows 2000 there is no longer a PDC/BDC concept, all DC's
are the same. The differences are the 5 FSMO roles, which can be hold
from any DC according to some rules.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
do I have to have the new w2008 server have the fsmo roles, dns, and
dhcp? This server will be located at another location and just
wanted it to at least be a defined BDC.

I was planning to make it a dns server.

"Meinolf Weber [MVP-DS]" wrote:

Hello COB,

Even if you use a single domain, this is also your forest. So, you
have to run adprep /forestprep, adprep /domainprep and if you think
about the future also run adprep /rodcprep.

You can either run dcpromo /adv or choose the server manager, roles
and add the AD Domain services.

See here about some detailed steps:

!!!NEVER START BEFORE HAVING CREATED AND TESTED A BACKUP OF YOUR
DATA/MACHINE!!!

- On the old server open DNS management console and check that you
are running Active directory integrated zone (easier for
replication, if you have more then one DNS server)

- run replmon from the run line or repadmin /showrepl (only if more
then one existing DC), dcdiag /v and netdiag /v from the command
prompt on the old machine to check for errors, if you have some
post the complete output from the command here or solve them first.
For this tools you have to install the support\tools\suptools.msi
from the 2003 installation disk.

- run adprep /forestprep and adprep /domainprep and adprep
/rodcprep from the 2008 installation disk against the 2003 schema
master, with an account that is member of the Schema admins, to
upgrade the schema to the new version (44), you can check the
version with "schupgr" in a command prompt.

- Install the new machine as a member server in your existing
domain

- configure a fixed ip and set the preferred DNS server to the old
DNS server only

- run dcpromo and follow the wizard to add the 2008 server to an
existing domain, make it also Global catalog.

- if you are prompted for DNS configuration choose Yes. If not,
install DNS role after promotion.

- for DNS give the server time for replication, at least 15
minutes. Because you use Active directory integrated zones it will
automatically replicate the zones to the new server. Open DNS
management console to check that they appear

- if the new machine is domain controller and DNS server run again
replmon, dcdiag and netdiag (copy the netdiag from the 2003 to
2008, will work) on both domain controllers

- Transfer, NOT seize the 5 FSMO roles to the new Domain controller
(http://support.microsoft.com/kb/324801 applies also for 2008)

- you can see in the event viewer (Directory service) that the
roles are transferred, also give it some time

- reconfigure the DNS configuration on your NIC of the 2008 server,
preferred DNS itself, secondary the old one

- if you use DHCP do not forget to reconfigure the scope settings
to point to the new installed DNS server

- export and import of DHCP database for 2008 choose "netshell dhcp
backup" and "netshell dhcp restore" command
(http://technet.microsoft.com/en-us/library/cc772372.aspx)

Demoting the old DC (if needed)

- reconfigure your clients/servers that they not longer point to
the old DC/DNS server on the NIC

- to be sure that everything runs fine, disconnect the old DC from
the network and check with clients and servers the connectivity,
logon and also with one client a restart to see that everything is
ok

- then run dcpromo to demote the old DC, if it works fine the
machine will move from the DC's OU to the computers container,
where you can delete it by hand. Can be that you got an error
during demoting at the beginning, then uncheck the Global catalog
on that DC and try again

- check the DNS management console, that all entries from the
machine are disappeared or delete them by hand if the machine is
off the network for ever

- also you have to start AD sites and services and delete the old
servername under the site, this will not be done during demotion

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties,
and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
I have a Win2K8 Standard server setup on my W2k3 domain as a
member server. I want to promote it to a DC. I understand that I
need to put the W2k8 dvd into the W2k3 server and then run the
adprep /forestprep.

If i am a single domain, do I have to run the forestprep? Can I
skip that step and go to the adprep /domainprep? I guess i don't
feel like i have a forest with a single domain of 80 pcs.

What other steps after the domainprep so I need to do? I see on
the w2k8 server that the menu containing "Roles" shows active
directory specifics. Do I just select the active directory
related items or do I still need to run the dcpromo from the
command prompt on the W2k8 server?




.

Relevant Pages

  • Re: Protected Forest with One Child domain
    ... The forest is in native mode. ... so your child DNS servers can resolve both their ... INTERNAL zone on every DNS server using AD-Integrated Forest ...
    (microsoft.public.windows.server.dns)
  • Re: Add W2K8 Standard member Server to W2k3 Standard Domain
    ... adprep log followed by the last statements made in the dos window. ... You can leave the FSMO roles also on the 2003 DC, ... I would make the new DC at least DNS server, so you have redundancy if the ... I was planning to make it a dns server. ...
    (microsoft.public.windows.server.general)
  • Re: New Domain
    ... If you don't have the tools installed, install them from your server install ... Paul Bergson ... DC again for the new domain tree under the existing forest. ... "The DSA operation is unable to proceed because of a DNS lookup ...
    (microsoft.public.windows.server.active_directory)
  • Re: Add W2K8 Standard member Server to W2k3 Standard Domain
    ... adprep log followed by the last statements made in the dos window. ... You can leave the FSMO roles also on the 2003 DC, ... I would make the new DC at least DNS server, ... I was planning to make it a dns server. ...
    (microsoft.public.windows.server.general)
  • Re: DNS-Urgent-Help -Please
    ... One DC can host multiple ZONESs in the forest, ... ensure you have at least 2 DNS servers with each zone. ... DC a DNS server and point the DCs and clients to this server for name ...
    (microsoft.public.win2000.active_directory)
Loading