hello, i had to migrate a windows 2000 server to 2003 and did not get a chance to run the prepdomain and forestprep. however, i did move all the FSMO rols to new server before removing the old server from domain. the issue we are having is that group policy is not working and its complaining it cant find the old server. does anyone have a fix for this/

Hello, what have you done exactly? You have to run adprep /forestprep and adprep /domainprep to upgrade to AD 2003. Once done, you can add 2003 DCs. When you add your 2003 DC, make it a GC and DNS server and make sure that AD replication was made correctly. For client computers, make them point to your new server as primary DNS server. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified IT Professional: Enterprise Administrator Microsoft Certified IT Professional: Server Administrator

Hello, if you are able to add a newer OS DC to the domain without be offered to run adprep command the domain was already prepared. If you now have errors in the domain please make sure the new DC is also DNS/GC and that clients are configured to use it on the NIC as DNS server also. Additional make sure to NOT use any external DNS server on the NIC like your ISPs one. If this all doesn't help please upload the following files: ipconfig /all >c:\ipconfig.txt [from each DC/DNS Server] dcdiag /v /c /d /e /s:dcname >c:\dcdiag.txt repadmin /showrepl dc* /verbose /all /intersite >c:\repl.txt ["dc* is a place holder for the starting name of the DCs if they all begin the same (if more then one DC exists)] dnslint /ad /s "DCipaddress" (http://support.microsoft.com/kb/321045) As the output will become large, DON'T post them into the thread, please use Windows Sky Drive (skydrive.livecom) [with open access!] and add the link from it here. Also the /e in dcdiag scans the complete forest, so better run it on COB.Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

hello. thanks for the replies. yes, looks like we were missing the GC entry in DNS and also a corrupt GPO it seems. we had to use dcrepair