We have Win2003 server domain with 2 DC's both are the Standard version (not R2).I have purchased some Win2003 Ent Ed licences and want to add a new DC to the domain as we are planning the retire the current DCs due to hardware age.When I tried to run DCPromo I got this error msg. The operation failed because: The Active Directory Installation Wizard cannot continue because the forest is not prepared for installing Windows Server 2003. Use the Adprep command-line tool to prepare both the forest and the domain. For more information about using the Adprep, see Active Directory Help. "The version of the Active Directory schema of the source forest is not compatible with the version of Active Directory on this computer."Is there an issue or any considerations when adding a Win2003 Ent Ed to a Win2003 Std domain?

After reading a bit more it sounds like adprep is used when you have a Win2000 domain and you want to move to a Win2003 domain?Any ideas why I might get this msg when I have a Win2003 domain? We did upgrade a few years back from NT4 to 2003 but we created brand new servers and migrated, we didn't do an inplace upgrade.

Hi,Adprep is used when you extend the AD schema and is still used when upgrading to Windows Server 2008.It sound like your new server is running WS 2003 R2 and if that's the issue you'll have to do both a forestprep and a domainprep.adprep /forestprepadprep /domainprepWait for Active Directory replication and then run dcpromo.Remember to transfer FSMO Roles and Global Catalog.Jens Ole Kragh MCITP, MCTS, MCT http://jensolekragh.spaces.live.com/

I have notused these tools before so any helpis appreciated. (I only pasted what appeared to be issues below)I randcdiag /c /v /d /s:ServerA and found a few errors and figured they should be corrected before moving forward with your instructions? Doing initial required tests Testing server: Site\ServerA Starting test: Connectivity * Active Directory LDAP Services Check The host 89700dc0-7d5b-47c9-aa01-5d6f0ddae28c._msdcs.MyDomain.com could not be resolved to an IP address. Check the DNS server, DHCP, server name, etc Although the Guid DNS name (89700dc0-7d5b-47c9-aa01-5d6f0ddae28c._msdcs.MyDomain.com) couldn't be resolved, the server name (ServerA.MyDomain.com) resolved to the IP address (192.168.10.4) and was pingable. Check that the IP address is registered correctly with the DNS server. ......................... ServerA failed test Connectivity Doing primary tests Testing server: Site\ServerA Skipping all tests, because server ServerA is not responding to directory service requests TEST: Records registration (RReg) Network Adapter [00000001] Broadcom NetXtreme Gigabit Ethernet: Matching A record found at DNS server 192.168.10.4: ServerA.MyDomain.com Error: Missing CNAME record at DNS server 192.168.10.4 : 89700dc0-7d5b-47c9-aa01-5d6f0ddae28c._msdcs.MyDomain.com [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)] Warning: Missing DC SRV record at DNS server 192.168.10.4 : _ldap._tcp.dc._msdcs.MyDomain.com Warning: Missing GC SRV record at DNS server 192.168.10.4 : _ldap._tcp.gc._msdcs.MyDomain.com Error: Missing PDC SRV record at DNS server 192.168.10.4 : _ldap._tcp.pdc._msdcs.MyDomain.com [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)] Error: Record registrations cannot be found for all the network adapters Summary of DNS test results: Auth Basc Forw Del Dyn RReg Ext ________________________________________________________________ Domain: MyDomain.com ServerAPASS FAIL PASS PASS WARN FAIL n/a

I was able to fix the errors usinghttp://support.microsoft.com/kb/241505and the netdiag /fix cmd.I will try your suggested steps next.

JensMy current DCs (2) are Win2003 SP2, and the new one is Win2003 Ent R2.Now that I have all the errors fixed do I run the ADPrep on an existing DC?Should/can I be using the newer Adprep.exe from the Win2003 Ent R2 CD?I am not clear how running this on theexisting DC will update the schema?

Hi there,Yes, use the adprep from the e W2k3 R2 CD number 2.It will prepare you schema for R2 server.You can run it in your new server and the schema for your domain will be prepared.Once done it, your domain will be ready.You don't need to run the adprep in more than one DC.Cheers,Marcelo.Marcelo Braga -- Um discipulo de Jesus -- MCT/ MCSA/ MCITP/ MCTS Exchange 2007.

Hi,Run adprep /forestprep at the server holding the FSMO role Schema Master.And just in case adprep /domainprep afterwards and you should be ready to go...Jens Ole Kragh MCITP, MCTS, MCT http://jensolekragh.spaces.live.com/

MarceloIf I try to run it on the new server, which is not a DC, I get this error msgY:\I386>adprep /forestprepAdprep cannot run on this platform because it is not a domain controller.[Status/Consequence]Adprep stopped without making any changes.[User Action]Run Adprep on a domain controller.JensThe Schema Master is an Exch 2003 server is there any issue on running it there?Also can you explain how running adprep on my existing Win2003 SP2 server will update the Schema to Win2003 Ent R2. Is it becuase I am running the ADPrep.exe from the R2 CD?

Hi again,Adprep extends the AD schema with R2 extentions and adprep can only run on the schema master.Yes, you should use the R2 CD2 to extend the schema at the DC running Exchange (if that's the schema master)No, it's not a problem running adprep on a DC running Exchange.Let's hear if you succed.Jens Ole Kragh MCITP, MCTS, MCT http://jensolekragh.spaces.live.com/

My R2 CD is an ISO which is not available to the Exch server so can I just copy the ADRPREP.exe to that server or are other files needed. I could copy the entire I386 folder if required.

I think I just answered my own question, after trying just the ADPREP.exe file I rec'd an errorAdprep was unable to copy file C:\Temp\schema.in_ from installation point to local machine under dir ectory C:\WINDOWS.

Here are the results which I am not sure what to think. If nothing has changed then why did the originalDCPromo fail.C:\Temp\I386>adprep /forestprepForest-wide information has already been updated.[Status/Consequence]Adprep did not attempt to rerun this operation. C:\Temp\I386>adprep /domainprepRunning domainprep ...Domain-wide information has already been updated.[Status/Consequence]Adprep did not attempt to rerun this operation.

Could it be, that Active Directory just hadn't replicated yet?Are you able to run dcpromo now?Jens Ole Kragh MCITP, MCTS, MCT http://jensolekragh.spaces.live.com/

Just for the heck of it I tried the DCPromo again and rec'dThe operation failed because:The AD Installation Wizard cannot continue because the forest is not prepared for installing Win2003 Server. Use the Adprep cmd tool to prepare the forest and the domain....The version of the AD schema of the source forest is not compatible wiht the version of the AD on this computer.Same msg as before the Adprep which brought me to here. :(

Hi,You must have replication errors in your File Replication Log?Check AD replicationCheck system event logrun netdiag (Support tools)run dcdiag (Support tools)Jens Ole Kragh MCITP, MCTS, MCT http://jensolekragh.spaces.live.com/

My mistake I was using the Adprep.exe from CD 1 when I should have been using "Drive:\CMPNENTS\R2\ADPREP\adprep.exe /forestprep".http://support.microsoft.com/kb/917385adprep /forestprep139 entries modified successfully.The command has completed successfullyAdprep successfully updated the forest-wide information.adprep /domainprepRunning domainprep ...Domain-wide information has already been updated.[Status/Consequence]Adprep did not attempt to rerun this operation.I am assuming since I am a single domain in the forest this was not neccessary?I also ranadprep /domainprep /gpprep as per the text following the running of/domainprep.Now I will need totransfer the roles but I may wait a few days first?

Hi,Install the new DC FirstInstall DNSMake it Global Catalog (Sites and Services)Replicate AD (Sites and Services)Transfer all 5 FSMO roles to the new server using NTDSUTILDemote old DC using dcpromo (a day later)Jens Ole Kragh MCITP, MCTS, MCT http://jensolekragh.spaces.live.com/

I have read in several forums that it is not recommended demoting a DC that has Exch Server running on it?One of my next steps is to setup a new member server with Exch then migrate the existing mailboxes to that server then remove the old Exch server from the domain. Still a bit of research on the proper procedure but that DC will eventually be gone.

Hi,That's correct!Having Exchange Server installed at a member server is best practise, so...good choise.Jens Ole Kragh MCITP, MCTS, MCT http://jensolekragh.spaces.live.com/

Can I transfer the FSMO during business hrs or should this be done after hrs?And I bellieve we have to global catalog servers, If I make the new DC a GC do I need to remove that from one of the other servers?

HiYes, you can transfer FSMO during business hours and you do not have to remove the GC from other DC's.Jens Ole Kragh MCITP, MCTS, MCT http://jensolekragh.spaces.live.com/

I have transfered the RID, PDC but when I am trying to do the Infrastructure I get the msg.ServerName is a GC server. The infrastructure operations master role should not be transferred to a GC server. Are you certain you want to transfer....Can I ignore this msg?I am using instructions onhttp://www.petri.co.il/transferring_fsmo_roles.htm

Found the answer athttp://support.microsoft.com/?kbid=223346, because I have a single domain the Infrastruture master can be on a GC.I also read"On a per-domain basis, select local primary and standby FSMO domain controllers in case a failure occurs on the primary FSMO owner."Does this apply to my single domain, "select a standby FSMO"?

Hi,I've never seen that term used before ;-). They must refer to an additional domain contoller, and you already have one.If the DC holding the FSMO roles breaks down, the roles can be seized at the other dc.But it's a good kb article!Jens Ole Kragh MCITP, MCTS, MCT http://jensolekragh.spaces.live.com/

My situation is a little different but I need some assistance. I have 5 Windows 2003 R1 SP2 Domain Controllers. I want to add 2 more Domain controllers. They are Windows Server 2003 R2 SP2. So I am going to run the adprep /forestprep command from R2 Disk 2 on the Schema Master. I have two questions. 1. Should I also run the adprep /domainprep after adprep /forestprep also on the schema master? 2. Do I just run dcpromo on the new Windows Server 2003 R2 SP2 servers that I am going to promote? And don't need to do anything additional? 3. Do I need to install the identity Management for Unix on the existing Schema Master or the other existing DC's? And do I need to install that service on the new R2 SP2 DC's that I am promoting? Thank you in Advance. Kevin