RE: 2000 to 2003 domain controller upgrade

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Joe Wu [MSFT] (joewu_at_online.microsoft.com)
Date: 02/10/04 

Date: Tue, 10 Feb 2004 19:44:51 GMT

Hello Matt,

Thank you for your reply.

I am afraid that you may not see my last post. I reviewed it again and
found a typo. I corrected the steps and attached it below:

=========================

Please let me know the following inforamtion for further analysis:

1. What FSMO roles does the current DC host?

2. Please post the latest adprep.log file in the
%windir%\system32\debug\adprep directory.

Thank you for your time and cooperation. If you have any questions or
concerns, don't hesitate to let me know. I am standing by to help you.

=========================

Also, if there is anything else I can do to help, please do not hesitate to
let me know.

Thanks and have a nice day!

Regards,
Joe Wu
Product Support Services
Microsoft Corporation

Get Secure! - www.microsoft.com/security

====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
|Content-Class: urn:content-classes:message
|From: "Matt" <anonymous@discussions.microsoft.com>
|Sender: "Matt" <anonymous@discussions.microsoft.com>
|References: <6d7d01c3e753$0a175930$a301280a@phx.gbl>
<ClWKYOW6DHA.3568@cpmsftngxa07.phx.gbl>
<8d6b01c3e9ca$15b98050$a501280a@phx.gbl>
|Subject: RE: 2000 to 2003 domain controller upgrade
|Date: Tue, 10 Feb 2004 08:36:44 -0800
|Lines: 106
|Message-ID: <e1c401c3eff4$11d38780$a601280a@phx.gbl>
|MIME-Version: 1.0
|Content-Type: text/plain;
| charset="iso-8859-1"
|Content-Transfer-Encoding: 7bit
|X-Newsreader: Microsoft CDO for Windows 2000
|X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
|Thread-Index: AcPv9BHTdqaA1VSqQMyNoxK1gPAxVQ==
|Newsgroups: microsoft.public.windows.server.migration
|Path: cpmsftngxa07.phx.gbl
|Xref: cpmsftngxa07.phx.gbl microsoft.public.windows.server.migration:7687
|NNTP-Posting-Host: tk2msftngxa14.phx.gbl 10.40.1.166
|X-Tomcat-NG: microsoft.public.windows.server.migration
|
|Joe, you there?!
|
|>-----Original Message-----
|>
|>>-----Original Message-----
|>>Hello Matt,
|>>
|>>Thank you for your post.
|>>
|>>The problem could occur if the current user account does
|>not have "Manage
|>>auditing and security logs"
|>>user right on the domain controllers.
|>>
|>>Please use the following method to resolve it:
|>>
|>>1. On the domain controller, open the "Domain Controller
|>Security Policy"
|>>snap-in in the Adminstrative Tools folder.
|>>
|>>2. Browse to "Windows Settings\Security Settings\Local
|>Policies\User Rights
|>>Assignment".
|>>
|>>3. On the right pane, please double-click "Manage
|>auditing and security
|>>logs" and add the Administrators group or the current
|>account directly.
|>>
|>>Please let me know if this helps.
|>>
|>>Thanks!
|>>
|>>Regards,
|>>Joe Wu
|>>Product Support Services
|>>Microsoft Corporation
|>>
|>>Get Secure! - www.microsoft.com/security
|>>
|>>====================================================
|>>When responding to posts, please "Reply to Group" via
|>your newsreader so
|>>that others may learn and benefit from your issue.
|>>====================================================
|>>This posting is provided "AS IS" with no warranties, and
|>confers no rights.
|>>
|>>--------------------
|>>|Content-Class: urn:content-classes:message
|>>|From: "Matt" <anonymous@discussions.microsoft.com>
|>>|Sender: "Matt" <anonymous@discussions.microsoft.com>
|>>|Subject: 2000 to 2003 domain controller upgrade
|>>|Date: Fri, 30 Jan 2004 09:03:53 -0800
|>>|Lines: 14
|>>|Message-ID: <6d7d01c3e753$0a175930$a301280a@phx.gbl>
|>>|MIME-Version: 1.0
|>>|Content-Type: text/plain;
|>>| charset="iso-8859-1"
|>>|Content-Transfer-Encoding: 7bit
|>>|X-Newsreader: Microsoft CDO for Windows 2000
|>>|X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
|>>|Thread-Index: AcPnUwoX/+G616R2Q5aMIdL+hoSN2Q==
|>>|Newsgroups: microsoft.public.windows.server.migration
|>>|Path: cpmsftngxa07.phx.gbl
|>>|Xref: cpmsftngxa07.phx.gbl
|>microsoft.public.windows.server.migration:7422
|>>|NNTP-Posting-Host: tk2msftngxa11.phx.gbl 10.40.1.163
|>>|X-Tomcat-NG: microsoft.public.windows.server.migration
|>>|
|>>|I cannot get adprep /forestprep or /domainprep to run
|>when
|>>|upgrading my domain controller. I get an error that
|>>|starts with:
|>>|Adprep was unable to check the forest update
|>status...and
|>>|at the end it states:
|>>|Adprep encountered a Win32 error
|>>|Error code: 0x57 Error message: The parameter is
|>>|incorrect...
|>>|Setup of course, will not let you proceed with the
|>upgrade
|>>|until Adprep has been run successfully.
|>>|I've followed steps in several KB articles to no avail.
|>>|If anyone has a suggestion or two, I would greatly
|>>|appreciate it. Have a nice day,
|>>|Matt
|>>|
|>>
|>>.
|>>Hi Joe -
|>
|>Thank you so much for your reply. Unfortunately, the
|>Administrators group is already listed for "Manage
|>auditing and security logs"...just for kicks, I added
|>domain\Administrator account as well, also to no avail
|>(same error message). Any other suggestions would be
|>greatly appreciated. Thank you and have a nice day.
|>
|>Matt
|>
|>P.S. sorry if this was posted more than once, I wrote my
|>original reply over an hour ago and it hasn't shown up
|>yet...thanks!
|>.
|>
|

Relevant Pages

  • Re: Microsoft security baseline analyzer
    ... i went and got the downloads, and i still get the same error message from ... > Microsoft Security Bulletin MS05-009 ...
    (microsoft.public.windowsxp.newusers)
  • Re: Site or Domain
    ... Domain aren't security Boundaries, ... forest, and they are not themselves the ultimate security boundary. ... Each Active Directory domain is authoritative for the ... Domain controller hardware and security facilities Each Windows Server ...
    (microsoft.public.windows.server.active_directory)
  • RE: Event ID: 5719 Netlogon Error - Another case
    ... Netlogon Logs Event ID 5719 on a Domain Controller ... This article contains information about modifying the registry. ... 256986 Description of the Microsoft Windows Registry ... The following error occurred: Error message. ...
    (microsoft.public.win2000.networking)
  • Re: SBS 2003 and TS-App Mode
    ... It's not secure... ... functionality over security and now you want functionality back. ... open and easy to use...they want TS on a domain controller back. ... Do not enable application server mode on a domain controllers. ...
    (microsoft.public.windows.server.sbs)
  • RE: Share Point?
    ... make it on a domain controller. ... I'm not sure about sharepoint server, ... Has anyone here tested Share Point's security? ... INCLUSIVE curriculum utilizes lectures, ...
    (Focus-Microsoft)