RE: 2000 to 2003 domain controller upgrade

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Matt (anonymous_at_discussions.microsoft.com)
Date: 02/10/04 

Date: Tue, 10 Feb 2004 08:36:44 -0800

Joe, you there?!

>-----Original Message-----
>
>>-----Original Message-----
>>Hello Matt,
>>
>>Thank you for your post.
>>
>>The problem could occur if the current user account does
>not have "Manage
>>auditing and security logs"
>>user right on the domain controllers.
>>
>>Please use the following method to resolve it:
>>
>>1. On the domain controller, open the "Domain Controller
>Security Policy"
>>snap-in in the Adminstrative Tools folder.
>>
>>2. Browse to "Windows Settings\Security Settings\Local
>Policies\User Rights
>>Assignment".
>>
>>3. On the right pane, please double-click "Manage
>auditing and security
>>logs" and add the Administrators group or the current
>account directly.
>>
>>Please let me know if this helps.
>>
>>Thanks!
>>
>>Regards,
>>Joe Wu
>>Product Support Services
>>Microsoft Corporation
>>
>>Get Secure! - www.microsoft.com/security
>>
>>====================================================
>>When responding to posts, please "Reply to Group" via
>your newsreader so
>>that others may learn and benefit from your issue.
>>====================================================
>>This posting is provided "AS IS" with no warranties, and
>confers no rights.
>>
>>--------------------
>>|Content-Class: urn:content-classes:message
>>|From: "Matt" <anonymous@discussions.microsoft.com>
>>|Sender: "Matt" <anonymous@discussions.microsoft.com>
>>|Subject: 2000 to 2003 domain controller upgrade
>>|Date: Fri, 30 Jan 2004 09:03:53 -0800
>>|Lines: 14
>>|Message-ID: <6d7d01c3e753$0a175930$a301280a@phx.gbl>
>>|MIME-Version: 1.0
>>|Content-Type: text/plain;
>>| charset="iso-8859-1"
>>|Content-Transfer-Encoding: 7bit
>>|X-Newsreader: Microsoft CDO for Windows 2000
>>|X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
>>|Thread-Index: AcPnUwoX/+G616R2Q5aMIdL+hoSN2Q==
>>|Newsgroups: microsoft.public.windows.server.migration
>>|Path: cpmsftngxa07.phx.gbl
>>|Xref: cpmsftngxa07.phx.gbl
>microsoft.public.windows.server.migration:7422
>>|NNTP-Posting-Host: tk2msftngxa11.phx.gbl 10.40.1.163
>>|X-Tomcat-NG: microsoft.public.windows.server.migration
>>|
>>|I cannot get adprep /forestprep or /domainprep to run
>when
>>|upgrading my domain controller. I get an error that
>>|starts with:
>>|Adprep was unable to check the forest update
>status...and
>>|at the end it states:
>>|Adprep encountered a Win32 error
>>|Error code: 0x57 Error message: The parameter is
>>|incorrect...
>>|Setup of course, will not let you proceed with the
>upgrade
>>|until Adprep has been run successfully.
>>|I've followed steps in several KB articles to no avail.
>>|If anyone has a suggestion or two, I would greatly
>>|appreciate it. Have a nice day,
>>|Matt
>>|
>>
>>.
>>Hi Joe -
>
>Thank you so much for your reply. Unfortunately, the
>Administrators group is already listed for "Manage
>auditing and security logs"...just for kicks, I added
>domain\Administrator account as well, also to no avail
>(same error message). Any other suggestions would be
>greatly appreciated. Thank you and have a nice day.
>
>Matt
>
>P.S. sorry if this was posted more than once, I wrote my
>original reply over an hour ago and it hasn't shown up
>yet...thanks!
>.
>

Relevant Pages

  • Re: Unlock acct permissions
    ... Joe is one of the best in the world. ... How do I get DSACLS to run on a specific account? ... The permissions in the security do not seem>>> to ... The correct permissions are on the security group, ...
    (microsoft.public.win2000.active_directory)
  • Re: Unlock acct permissions
    ... It may actually be the best of the bunch but it is very old now so it is mostly about those GOOD FUNDAMENTALS that one needs and which Joe referenced. ... >>>Overall you appear to be a very "green" admin and you should buy one or more>>>books and learn this stuff before you do too much more. ... >>>Joe Richards Microsoft MVP Windows Server Directory Services ... How do I get DSACLS to run on a specific account? ...
    (microsoft.public.win2000.active_directory)
  • Re: Windows Passwords
    ... "Windows Vista for Dummies" manual. ... I started by creating a test user account. ... The reason I say this is that, when I turned the Guest ...
    (microsoft.public.windows.vista.general)
  • Re: Help Me Understand User Accounts
    ... When you log off and log back in as the limited user you'll be able to ... you'll need to set up a new email account (under the new ... limited user account) the same as you had before, ... Administrator accounts are the default type of account ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Windows Service Account
    ... you can use the find IIDentity to the user to give folder permissions ... The OP does not need to find which user account is running the Windows ... Local System account has mighty ...
    (microsoft.public.dotnet.general)