Windows 2000 Domain - run DCPromo on Windows 2003 Server 1

[ceil32]

I have a Windows 2000 Domain with two Windows 2000 Servers as DC's

I now have a Windows 2003 Server that I want to make a DC and I get the following error:

The Active Directory Installation Wizard cannot continue because the forest is not prepared for installing Windows Server 2003. Use the Adprep.exe command-line tool to prepare both the forest and the domain. Fore more information about using Adprep.exe see Active Directory Help.

"The version of the Active Directory Schema of the source forest is not compatible with the version of the Active Directory on this computer."

If I run adprep /forestprep or adprep /domainprep will it affect any operations aside from allowing me run DCPromo on the new machine??

Is there anything else I should be aware of?

Thanks

 

[ceil32]

Yes - I'm logged in as Domain Admin

 

[Roadki11]

I dont think Domain Admin is a member of Schema Admin by default. You must be a member of Schema Admin to make this changes.

RoadKi11

"This apparent fear reaction is typical, rather than try to solve technical problems technically, policy solutions are often chosen." - Fred Cohen

 

[ceil32]

Just double checked - Domain admin is a member

 

[Roadki11]

Read this thread, scroll all the way to near the bottom, look for the Accepted Solution. Is that solution in line with what you did?

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_21541187.html

RoadKi11

"This apparent fear reaction is typical, rather than try to solve technical problems technically, policy solutions are often chosen." - Fred Cohen

 

[ceil32]

I tried that exactly as documented and got the following error:

Connecting to "DC.Domain.com"
Logging in as current user using SSPI
Importing directory from file "inetorgpersonprevent.ldf"
Loading entries
1: CN=ms-Exch-Assistant-Name,CN=Schema,CN=Configuration,DC=X
Entry DN: CN=ms-Exch-Assistant-Name,CN=Schema,CN=Configuration,DC=X
change: modify
Attribute 0) lDAPDisplayName:msExchAssistantName

Add error on line 1: Referral
The server side error is "A referral was returned from the server."
0 entries modified successfully.
An error has occurred in the program

 

[Roadki11]

Try working through this one, you probably need to open the schema in mmc:

http://analogduck.com/main/node/28

RoadKi11

"This apparent fear reaction is typical, rather than try to solve technical problems technically, policy solutions are often chosen." - Fred Cohen

 

[ceil32]

Ok opened the Schema in MMC, followed instructions exactly - I ticked the checkbox for 'allow changes' and then manually assigned Full Control to the Administrator

I re-ran the script and the got the same error:

Connecting to "DC.Domain.com"
Logging in as current user using SSPI
Importing directory from file "inetorgpersonprevent.ldf"
Loading entries
1: CN=ms-Exch-Assistant-Name,CN=Schema,CN=Configuration,DC=X
Entry DN: CN=ms-Exch-Assistant-Name,CN=Schema,CN=Configuration,DC=X
change: modify
Attribute 0) lDAPDisplayName:msExchAssistantName

Add error on line 1: Referral
The server side error is "A referral was returned from the server."
0 entries modified successfully.
An error has occurred in the program

----------

I haven't restarted the DC yet as it's a Production DC - will try after hours - if there is anything else you can think of, fire away!

Thanks for all the help so far

 

[ceil32]

Thanks for all the assistance.

I've got some more problems with the Exchange 2003 Server running DCPromo, but I've started a seperate question for that.

I tried to run DCPRomo mid-morning and then all my clients (who logged onto the Domain about three hours previously), were getting 'Access Denied' messages when trying to access any Network shares - when they logged off and back on again, there was no issue

Any idea why this would happen?

 

[ceil32]

I meant to say that there were no Event Viewer errors in either the DC, Fileserver or Client when we got the 'Access Denied' error