Re: Add W2K8 Standard member Server to W2k3 Standard Domain
- From: Meinolf Weber [MVP-DS] <meiweb(nospam)@gmx.de>
- Date: Tue, 27 Jan 2009 22:06:47 +0000 (UTC)
Hello COB,
Thanks for the feedback. Nice to hear that you found it.
Best regards
Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
Whew! i found a forum that indicated it was McAfee. I disabled reran
and all forest domain gp and rodc completed successfully. thank you
"Meinolf Weber [MVP-DS]" wrote:
Hello COB,
Did you run the command on the schema master with an account of the
schema admin groups? Check with "netdom query fsmo" on your DC and
post the output here.
Best regards
Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
Meinolf,
ran the adprep /forestprep. below is the last few statements from
the
adprep log followed by the last statements made in the dos window.
Not sure what to do from here. your thoughts?
Updating change from:" International ISDN Number (Others)" to
"International ISDN Number (Others)" for locale 409, object
inetOrgPerson-Display and property attributeDisplayNames.
Adprep was unable to complete because the call back function failed.
[Status/Consequence]
Error message: Error(110) while running
""C:\WINDOWS\system32\LDIFde.exe" -o ObjectGuid -d
"CN=nTFRSReplicaSet-Display,CN=401,CN=DisplaySpecifiers,CN=Configura
ti on,DC=ballwin,DC=mo,DC=us" -u -f
"C:\DOCUME~1\ADMINI~1.BAL\LOCALS~1\Temp\TMPDCF.tmp" -j
"C:\WINDOWS\debug\adprep\logs\20090127144717" -s
BALL06.ballwin.mo.us". Could not move file
C:\WINDOWS\debug\adprep\logs\20090127144717\LDIF.err to
C:\WINDOWS\debug\adprep\logs\20090127144717\DisplaySpecifierUpgradeL
di fError.001.txt. The system cannot find the file specified.
(0x80070002).
[User Action]
Check the log file ADPrep.log, in the
C:\WINDOWS\debug\adprep\logs\20090127144717 directory for more
information.
Adprep was unable to update forest information.
[Status/Consequence]
Adprep requires access to existing forest-wide information from the
schema master in order to complete this operation.
[User Action]
Check the log file, ADPrep.log, in the
C:\WINDOWS\debug\adprep\logs\20090127144717 directory for more
information.
*****change to DOS window here *************
Adprep was unable to complete because the call back function failed.
[Status/Consequence]
Error message: Error(110) while running
""C:\WINDOWS\system32\LDIFde.exe" -o
Obj
ectGuid -d
"CN=nTFRSReplicaSet-Display,CN=401,CN=DisplaySpecifiers,CN=Configura
t
ion,DC=ballwin,DC=mo,DC=us" -u -f
"C:\DOCUME~1\ADMINI~1.BAL\LOCALS~1\Temp\TMPDCF
.tmp" -j "C:\WINDOWS\debug\adprep\logs\20090127144717" -s
BALL06.city.mo.us".
Could not move file
C:\WINDOWS\debug\adprep\logs\20090127144717\LDIF.err to
C:\
WINDOWS\debug\adprep\logs\20090127144717\DisplaySpecifierUpgradeLdif
Er
ror.001.tx
t. The system cannot find the file specified.
(0x80070002).
[User Action]
Check the log file ADPrep.log, in the
C:\WINDOWS\debug\adprep\logs\2009012714471
7 directory for more information.
Adprep was unable to update forest information.
[Status/Consequence]
Adprep requires access to existing forest-wide information from the
schema
maste
r in order to complete this operation.
[User Action]
Check the log file, ADPrep.log, in the
C:\WINDOWS\debug\adprep\logs\200901271447
17 directory for more information.
"Meinolf Weber [MVP-DS]" wrote:
Hello COB,
You can leave the FSMO roles also on the 2003 DC, i prefer always
to have the FSMO roles on newest OS version. But if you do the main
work at the 2003 DC's site leave them there. Why not moving the
2003 as a failover to the other site and use the 2008?
I would make the new DC at least DNS server, so you have redundancy
if the main site server is down and the clients are configured to
use it. Also make it Global catalog server.
Since Windows 2000 there is no longer a PDC/BDC concept, all DC's
are the same. The differences are the 5 FSMO roles, which can be
hold from any DC according to some rules.
Best regards
Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties,
and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
do I have to have the new w2008 server have the fsmo roles, dns,
and dhcp? This server will be located at another location and
just wanted it to at least be a defined BDC.
I was planning to make it a dns server.
"Meinolf Weber [MVP-DS]" wrote:
Hello COB,
Even if you use a single domain, this is also your forest. So,
you have to run adprep /forestprep, adprep /domainprep and if you
think about the future also run adprep /rodcprep.
You can either run dcpromo /adv or choose the server manager,
roles and add the AD Domain services.
See here about some detailed steps:
!!!NEVER START BEFORE HAVING CREATED AND TESTED A BACKUP OF YOUR
DATA/MACHINE!!!
- On the old server open DNS management console and check that
you are running Active directory integrated zone (easier for
replication, if you have more then one DNS server)
- run replmon from the run line or repadmin /showrepl (only if
more then one existing DC), dcdiag /v and netdiag /v from the
command prompt on the old machine to check for errors, if you
have some post the complete output from the command here or solve
them first. For this tools you have to install the
support\tools\suptools.msi from the 2003 installation disk.
- run adprep /forestprep and adprep /domainprep and adprep
/rodcprep from the 2008 installation disk against the 2003 schema
master, with an account that is member of the Schema admins, to
upgrade the schema to the new version (44), you can check the
version with "schupgr" in a command prompt.
- Install the new machine as a member server in your existing
domain
- configure a fixed ip and set the preferred DNS server to the
old DNS server only
- run dcpromo and follow the wizard to add the 2008 server to an
existing domain, make it also Global catalog.
- if you are prompted for DNS configuration choose Yes. If not,
install DNS role after promotion.
- for DNS give the server time for replication, at least 15
minutes. Because you use Active directory integrated zones it
will automatically replicate the zones to the new server. Open
DNS management console to check that they appear
- if the new machine is domain controller and DNS server run
again replmon, dcdiag and netdiag (copy the netdiag from the 2003
to 2008, will work) on both domain controllers
- Transfer, NOT seize the 5 FSMO roles to the new Domain
controller (http://support.microsoft.com/kb/324801 applies also
for 2008)
- you can see in the event viewer (Directory service) that the
roles are transferred, also give it some time
- reconfigure the DNS configuration on your NIC of the 2008
server, preferred DNS itself, secondary the old one
- if you use DHCP do not forget to reconfigure the scope settings
to point to the new installed DNS server
- export and import of DHCP database for 2008 choose "netshell
dhcp backup" and "netshell dhcp restore" command
(http://technet.microsoft.com/en-us/library/cc772372.aspx)
Demoting the old DC (if needed)
- reconfigure your clients/servers that they not longer point to
the old DC/DNS server on the NIC
- to be sure that everything runs fine, disconnect the old DC
from the network and check with clients and servers the
connectivity, logon and also with one client a restart to see
that everything is ok
- then run dcpromo to demote the old DC, if it works fine the
machine will move from the DC's OU to the computers container,
where you can delete it by hand. Can be that you got an error
during demoting at the beginning, then uncheck the Global catalog
on that DC and try again
- check the DNS management console, that all entries from the
machine are disappeared or delete them by hand if the machine is
off the network for ever
- also you have to start AD sites and services and delete the old
servername under the site, this will not be done during demotion
Best regards
Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties,
and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!!
http://www.blakjak.demon.co.uk/mul_crss.htm
I have a Win2K8 Standard server setup on my W2k3 domain as a
member server. I want to promote it to a DC. I understand that
I need to put the W2k8 dvd into the W2k3 server and then run the
adprep /forestprep.
If i am a single domain, do I have to run the forestprep? Can I
skip that step and go to the adprep /domainprep? I guess i
don't feel like i have a forest with a single domain of 80 pcs.
What other steps after the domainprep so I need to do? I see on
the w2k8 server that the menu containing "Roles" shows active
directory specifics. Do I just select the active directory
related items or do I still need to run the dcpromo from the
command prompt on the W2k8 server?
.
- References:
- Prev by Date: Re: Add W2K8 Standard member Server to W2k3 Standard Domain
- Next by Date: Re: "This file has additional info that will be lost..." during copy operation
- Previous by thread: Re: Add W2K8 Standard member Server to W2k3 Standard Domain
- Next by thread: NT folder compression on Windows Server 2003
- Index(es):
Relevant Pages
|
