Hi,

in short, run adprep/ forestprep onthe schema master domain controller.

HTH,
Tarek

_____________________________

Tarek Majdalani

MVP -- ISA Firewalls
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8/

W2K or W2K3 AD forest already exists:

--> ADPREP /Forestprep on the w2k/w2k3 schema master (both w2k/w2k3 forests)

--> ADPREP /rodcprep on the w2k3domain master (only w2k3 forests)

--> ADPREP /domainprep on the w2k3infrastructure master (only w2k3 domains)

--> ADPREP /domainprep /gpprepon the w2kinfrastructure master (only w2k domains)

--> on the stand alone server execute: DCPROMO

--> and provide the information needed

also have a look at:

http://blogs.dirteam.com/blogs/jorge/archive/2007/03/18/windows-server-longhorn-functional-levels.aspx

http://blogs.dirteam.com/blogs/jorge/archive/2007/03/18/windows-server-longhorn-installing-removing-and-upgrading-to-ad.aspx

Hi Everyone!

I got nearly the same problem as Filoupe. I tried adprep /forestprep, adprep /rodcprep, adprep /domainprep.

I don't really know if Forestprep succeeded because it seems to run and run and run (after 1,5 hours i pressed return) until I press return to get a new prompt.

well after the forest I ran the others but when I try to make my win08 a dc it always says "To install a domain controller into this active directory domain, you must first prepare the forest using "adprep /forestprep". The adprep utility is available on the windows server 2008 installation media in the \sources\adprep folder."

Soooooo i really don't know what else to do.

I would appreciate it if you can help me or better us :)

Edit: the adprep.log says:

Adprep created the log file ADPrep.log under C:\WINDOWS\system32\debug\adprep\logs\20070409144532 directory.
Adprep copied file D:\CMPNENTS\R2\ADPREP\schema.ini from installation point to local machine under directory C:\WINDOWS.
Adprep copied file D:\CMPNENTS\R2\ADPREP\sch31.ldf from installation point to local machine under directory C:\WINDOWS\system32.
Adprep copied file D:\CMPNENTS\R2\ADPREP\dcpromo.csv from installation point to local machine under directory C:\WINDOWS\system32\debug\adprep\data.
Adprep copied file D:\CMPNENTS\R2\ADPREP\409.csv from installation point to local machine under directory C:\WINDOWS\system32\debug\adprep\data.
Adprep successfully made the LDAP connection to the local domain controller DC.
Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is (null).
LDAP API ldap_search_s() finished, return code is 0x0
Adprep successfully retrieved information from the local directory service.
Adprep successfully initialized global variables.
[Status/Consequence]

Adprep is continuing.

ADPREP WARNING:
Before running adprep, all Windows 2000 domain controllers in the forest should be upgraded to Windows 2000 Service Pack 1 (SP1) with QFE 265089, or to Windows 2000 SP2 (or later).

QFE 265089 (included in Windows 2000 SP2 and later) is required to prevent potential domain controller corruption.
For more information about preparing your forest and domain see KB article Q331161 at http://support.microsoft.com.

[User Action]

If ALL your existing Windows 2000 domain controllers meet this requirement, type C and then press ENTER to continue. Otherwise, type any other key and press ENTER to quit.
Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is CN=UID,CN=Schema,CN=Configuration,DC=bla,DC=bla.
LDAP API ldap_search_s() finished, return code is 0x0
Adprep successfully determined whether Microsoft Windows Services for UNIX (SFU) is installed or not. If adprep detected SFU, adprep also verified that Microsoft hotfix Q293783 for SFU has been applied.
Adprep successfully upgraded the schema using schupgr.exe.

[Status/Consequence]

The schema information on schema master has been successfully prepared.
Adprep set the value of registry key System\CurrentControlSet\Services\NTDS\Parameters\Schema Update Allowed to 1
Adprep successfully updated the forest-wide information.

Ok I'll try this one now..... here

couldn't think of that solution if it works :)

Ok forestprep worked now but it still says do it again :)

damnit

I am also having this same problem. I have been advised that running adprep/forestprep on the W2k DC can affect the schema adversley. I have a single DC and no DC's in the forest. I want to promote the 2008 Server to a DC withing the current forest. I don't have another DC to take over if something happens to take the W2k server down and no team to help me rebuild if I do. I am in a facility that absolutely cannot afford to have the DC go down. Any responses would be appreciated.

We have TechNet topic named Running Adprep.exe at http://technet.microsoft.com/en-us/library/dd464018(WS.10).aspx. Please let us know if it does not cover an issue you encounter with running Adprep.

Thanks,
Justin [MSFT]

Did you find a solution for this problem?
The same thing append to me: The AD schemaon my Win2002 DC have been update successfully, butwhen I want to make my Win2008 server a new DC in the 2003 domain I get this message when running DCPROMO:
To install a domain controller into this active directory domain, you must first prepare the domain using "adprep /domainprep". The adprep utility is available on the windows server 2008 installation media in the \sources\adprep folder.

/C

Quick question (and it will sound dumb)

Will process #2 require a reboot of the 2003 DC the operation is performed on?

I started a new job and the previous admin(s) installed the DC roles on app and file servers which cannot be restarted with ease. I am in the process of removing the roles from the existing two DCs to new (one virtual, one physical) 2008 servers. The problem is we are a bit of a 24/7 shop and someone is almost accessing the primary application for the company which happens to reside on one of the DCs. Again, this is in the process of being fixed but I am hoping I can get some work done during the day versus another late night/early morning change.

Thanks!

Quick question (and it will sound dumb)

Will process #2 require a reboot of the 2003 DC the operation is performed on?

I started a new job and the previous admin(s) installed the DC roles on app and file servers which cannot be restarted with ease. I am in the process of removing the roles from the existing two DCs to new (one virtual, one physical) 2008 servers. The problem is we are a bit of a 24/7 shop and someone is almost accessing the primary application for the company which happens to reside on one of the DCs. Again, this is in the process of being fixed but I am hoping I can get some work done during the day versus another late night/early morning change.

Thanks!

I have the same issue but i already have a 2008 domain, i have completed the adprep /forestprep which was successful but still no joy? any ideas?

I've tried to dcpromo a new Windows 2008 server installation to be a Domain Controller, running in an existing domain. I am informed that, first, I must run adprep/forestprep ("To install a domain controller into this Active Directory forest, you must first perpare the forest using "adprep/forestprep". The Adprep utility is available on the Windows Server 2008 installation media in the Windows\sources\adprep folder".

 

Trouble is that adprep/forestprep says that:

 

Adprep cannot run on this platform because it is not an Active Directory Domain Controller.
[Status/Consequence]
Adprep stopped without making any changes.
[User Action]
Run Adprep on a Active Directory Domain Controller.

 

So, which needs to be installed first (they cannot really be dependent upon each other), and how do I go about completing this?!

 

Thanks

 

Stephen Simpson

Note: If you are adding a second DC running Windows 2008 r2  to a Windows 2008 (RTM not r2) Domain.

You will have the same issue.

As the original Windows 2008 build needs the AD meta data brought up from build 44 to build 47before you can add the second Windows 2008 r2 Domain Controller.

By running

--> ADPREP /Forestprep on the w2k8 schema master (first DC)

--> ADPREP /domainprep

You will be able to then add the second domain controller into the existing forest.

Hi,

I have used this thread to create a new topic on the TechNet Wiki, Troubleshooting Adprep.exe errors, at http://social.technet.microsoft.com/wiki/contents/articles/troubleshooting-adprep-exe-errors.aspx.

The Wiki is a great place to roll up answers for the community to improve an article (versus threads).  Take a look and share your feedback.

Justin [MSFT]

I found the solution to the problem I was having.  I had ran the adprep commands using windows 2008 (rtm) media, because I tried to run adprep on my 2003 32bit domain controller from the 2008 R2 media and figured out that I needed a 32 bit version.  I never looked in the root directory of the /support/adprep folder to see that there was a adprep32 binary.  So I used media from a 32 bit standard 2008 server that wasn't R2.  Moral of the story is, if you're trying to add a 2008 R2 server to a domain as a domain controller then you need the R2 binary and files and run it on all your domain controllers in your setup.

Thanks,

Austin Cherry

Jorge, We need enough information and detail to resolve our issues..., OBVIOUSLY!!!  The information and the links provided are not enough!!!

No where does MS support say to use ADPREP32 for on a 2003 domain for a 2008R2 server.  So we used ADPREP.  Now I have gone back and used ADPREP32 and it STILL doesn't work.  Same issue - it tells me I need to run 'adprep /forestprep', but I have already run it (and I have run 'adprep32 /forestprep' as well, still I have the SAME ISSUE!!!

P.S.  It is not the job of the moderator to make the people who need help feel stupid.  You should be trying to help, not making us feel like we have missed something.  It's Microsoft that has missed something.  The procedure to add a 2008 R2 server as an AD controller of a 2003 domain is OBVIOUSLY different than it was for a regular 2008 server, but MS has NOT told us what to do.

I copied both the 2008R2 CD and the 2008 CD to a local drive because I don't have a DVD-ROM in my old 2003 server.  First I tried running the 2008R2 version of 'adprep /forestprep' but it told me I didn't have the right verion.  Then I ran 'adprep /forestprep' from the 2008 32bit CD and it completed successfully but when I tried dcpromo on my 2008R2 server, it told me I needed to run 'adprep /forestprep' (which I had already done successfully).  Then I tried running adprep32 from the copy of the 64-bit server Win2008R2 CD and it also said it completed successfully, but still my 2008R2 server tells me I need to run 'adprep /forestprep' (which I had already done successfully).  So what should I do now, Austin?     

I ran into the same issue but in the test environment. I have 2 domain controllers DC1 (Win2008 Ent) and DC2 (Win2008 Data). When I tried to add a third domain controller DC3 (Win2008 R2), I ran into the error. All I did was, got the adprep files from Win2008 R2 and ran "adprep /forestprep" on DC1 and then ran "adprep /domainprep" on the same DC1 and that fixed the issue.

If your existing DC is 32 bit, then run "adprep32 /forestprep" and "adprep32 /domainprep&

Thanks Brian for the simple answer.  This worked perfect for adding a secondary DC on a 2008 R2 machine to a standalone 2008 DC.

Here are the steps I used (had to use the 32 bit version).

1. Copied the Support\ADPREP folder from the 2008 R2 install cd to the old 2008 server / DC controller
2. ADPREP32.EXE /Forestprep on the w2k8 schema master (first/only DC)  {C, then 'enter' to confirm.}
3. ADPREP32.EXE /domainprep on the w2k8 schema master (first/only DC)

-Brandon

Thanks

This solved my problem!

I have a SBS2003 server and i want to promo a new 2008 R2 x64 and move exchange and all the rest to the new server. After completeing all the steps above i still receive the error -

" To install a domain controller into this Active Directory forest, you must first prepare the forest using "adprep /forestprep" The Adprep utility is available on the Windows Server 2008 R2 installation media in the \support\adprep folder"

I ran all the above adprep commands with success yet the new DC i want to add still fails on DCPROMO.

I have a SBS2003 server and i want to promo a new 2008 R2 x64 and move exchange and all the rest to the new server. After completeing all the steps above i still receive the error -

" To install a domain controller into this Active Directory forest, you must first prepare the forest using "adprep /forestprep" The Adprep utility is available on the Windows Server 2008 R2 installation media in the \support\adprep folder"

 

I ran all the above adprep commands with success yet the new DC i want to add still fails on DCPROMO.

 

Hello,

please post the output from:

"dsquery * cn=schema,cn=configuration,dc=domainname,dc=local -scope base -attr objectVersion" without the quotes in a command prompt.

I have a SBS2003 server and i want to promo a new 2008 R2 x64 and move exchange and all the rest to the new server. After completeing all the steps above i still receive the error -

" To install a domain controller into this Active Directory forest, you must first prepare the forest using "adprep /forestprep" The Adprep utility is available on the Windows Server 2008 R2 installation media in the \support\adprep folder"

 

I ran all the above adprep commands with success yet the new DC i want to add still fails on DCPROMO.

 

Hello,

please post the output from:

"dsquery * cn=schema,cn=configuration,dc=domainname,dc=local -scope base -attr objectVersion" without the quotes in a command p

Hello,

44 is the schema version fior Windows server 2008 and NOT for Windows server 2008 R2, that is 47.

So use the Windows server 2008 R2 installation disk and upgrade the schema with adprep32(32bit) or adprep(64bit) version.

Hello,

44 is the schema version fior Windows server 2008 and NOT for Windows server 2008 R2, that is 47.

So use the Windows server 2008 R2 installation disk and upgrade the schema with adprep32(32bit) or adprep(64bit) ve

Hello,

44 is the schema version fior Windows server 2008 and NOT for Windows server 2008 R2, that is 47.

So use the Windows server 2008 R2 installation disk and upgrade the schema with adprep32(32bit) or adprep(64bit) ve

The schema has already been upgraded. Rerun setup to upgrade this DC.

In AD it says the Forest and domain functional level is Window 2003.

which says to me this is ready.

But Running the ADSIEdit.msc from the W2K8 server i see something interesting.

under Configuration->ForestUpdates->ActiveDirectoryUpdate i see a revision of 2  ..... which is W2K8 not R2

But under CN=Schema,CN=Configuration,DC=forest_root_domain i see a revision <not set>

So something looks very wrong.

Is there anyway to get better diagnostics to what the real problem is ?

Sorry if i done something very dumb but i can't spot the wood for the forest .....

Thanks ... Andy 

Hi,

i've ended up here as i too seem to have the same problem but i can't see anything here that finally resolves the issue.

I have a 32bit 2003 Enterprise server SP2  running as the one and only DC. I've installed a W2K8 64bit server. I've joined it to the domain OK but now i need to run DCPROMO on the W2K8 server to make the new machine a DC, so that i can eventually retire the old 2003 server.

i've followed the various instructions on here to run the adprep on the old server and i think i have the forest ready to go but i still get the same error on the W2K8 machine.

on the DC i see:

C:\adprep>schupgr Opened Connection to HOMESERV SSPI Bind succeeded Current Schema Version is 47 Upgrading schema to version 47

The schema has already been upgraded. Rerun setup to upgrade this DC.

In AD it says the Forest and domain functional level is Window 2003.

which says to me this is ready.

But Running the ADSIEdit.msc from the W2K8 server i see something interesting.

under Configuration->ForestUpdates->ActiveDirectoryUpdate i see a revision of 2  ..... which is W2K8 not R2

But under CN=Schema,CN=Configuration,DC=forest_root_domain i see a revision <not set>

So something looks very wrong.

 

Is there anyway to get better diagnostics to what the real problem is ?

Sorry if i done something very dumb but i can't spot the wood for the forest .....

Thanks ... Andy 

Hello,

which exact error do you get when running dcpromo, you didn't mention it? Please upload the adprep logfile to Windows sky drive skydrive.live.com

W2K or W2K3 AD forest already exists:

--> ADPREP /Forestprep on the w2k/w2k3 schema master (both w2k/w2k3 forests)

--> ADPREP /rodcprep on the w2k3 domain master (only w2k3 forests)

--> ADPREP /domainprep on the w2k3 infrastructure master (only w2k3 domains)

--> ADPREP /domainprep /gpprep on the w2k infrastructure master (only w2k domains)

--> on the stand alone server execute: DCPROMO

--> and provide the information needed

 

also have a look at:

http://blogs.dirteam.com/blogs/jorge/archive/2007/03/18/windows-server-longhorn-functional-levels.aspx

http://blogs.dirteam.com/blogs/jorge/archive/2007/03/18/windows-server-longhorn-installing-removing-and-upgrading-to-ad.aspx

  

Basically if you follow the above with the right software you should be fine. This fixed all my issues.

What error are you getting?

I have a similar issue. I'm running a DC on Windows Server 2k3. I want to add an ADC to the same domain, but when adding to the forest, I get the error stating I must run the adprep /forestprep command. When I switch over to my currently active DC and run that command, it tells me the command has not been ran because it was already done before. I go back to my ADC and try to add again, and receive the same message.

Forest-wide information has already been updated.
[Status/Consequence]
Adprep did not attempt to rerun this operation.

So now I'm at a standstill. Any suggestions?

Thanks!

FIX:

Okay, so apparently I had to update the schema on my old (original) DC running Windows 2003. I simply copied the adprep folder from the latest Windows 2008 CD to my DC server and ran the adprep32.exe /forestprep command, and it worked.

adprep32.exe /forestprep

Opened Connection to USPS
SSPI Bind succeeded
Current Schema Version is 44
Upgrading schema to version 47
Connecting to "USPS"
Logging in as current user using SSPI
Importing directory from file "C:\WINDOWS\system32\sch45.ldf"
Loading entries.................

66 entries modified successfully.

The command has completed successfully
Connecting to "USPS"
Logging in as current user using SSPI
Importing directory from file "C:\WINDOWS\system32\sch46.ldf"
Loading entries....
3 entries modified successfully.

The command has completed successfully
Connecting to "USPS"
Logging in as current user using SSPI
Importing directory from file "C:\WINDOWS\system32\sch47.ldf"
Loading entries.....
4 entries modified successfully.

The command has completed successfully

Hi,

i've ended up here as i too seem to have the same problem but i can't see anything here that finally resolves the issue.

I have a 32bit 2003 Enterprise server SP2  running as the one and only DC. I've installed a W2K8 64bit server. I've joined it to the domain OK but now i need to run DCPROMO on the W2K8 server to make the new machine a DC, so that i can eventually retire the old 2003 server.

i've followed the various instructions on here to run the adprep on the old server and i think i have the forest ready to go but i still get the same error on the W2K8 machine.

on the DC i see:

C:\adprep>schupgr Opened Connection to HOMESERV SSPI Bind succeeded Current Schema Version is 47 Upgrading schema to version 47

The schema has already been upgraded. Rerun setup to upgrade this DC.

In AD it says the Forest and domain functional level is Window 2003.

which says to me this is ready.

But Running the ADSIEdit.msc from the W2K8 server i see something interesting.

under Configuration->ForestUpdates->ActiveDirectoryUpdate i see a revision of 2  ..... which is W2K8 not R2

But under CN=Schema,CN=Configuration,DC=forest_root_domain i see a revision <not set>

So something looks very wrong.

 

Is there anyway to get better diagnostics to what the real problem is ?

Sorry if i done something very dumb but i can't spot the wood for the forest .....

Thanks ... Andy 

Hello,

which exact error do you get when running dcpromo, you didn't mention it? Please upload the adprep logfile to Windows sky drive skydrive.li

My DVD has the adprep folder within the support folder, not the sources folder.  Those files worked fine.

Thank you Jorge de Almeida Pinto [MVP-DS]

That has been doing my head... 

Was caught in a catch22 situation.. Couln't do DC Promo on the win2003 DC, the 2008 R2 (not yet a DC) ahhhh!!! {hair pulling time}

copy the files onto the HDD and win2003 DC runs adprep32 /forestprep... woohoo!!!!

Boa tarde, fiz os procedimentos e deu certo, tinha que fazer Update Schema  com o CD 2008 no server 2003 !

Agora quando eu executo o DC promo no 2008 ele passa sem dar o erro !

Obrigado

This is very accurate.  But for those who do not know:  You must also be a memeber of Schema Admins, Domain admins and Enterprise admins group.  I like to leave Schema admins empty till I need it.

Don't RTFM....its confusing.

If you are running a 32 bit version of the  W2K3, then there is a "adprep32.exe" file that u need to run for the forest prep and the domain prep within the "support - adprep folder"in the installation media. If you are running the 64 bit version, please use adprep.exe and run the forestprep and domainprep . Also, please make sure that you log in using an administrator account to run the above commands in the command prompt.

NOTE: The installation media is the Windows 2008 media and not the Windows 2003 Media.