Microsoft's official enterprise support blog for AD DS and more
Hi all, Rob Newhouse here and today I am talking about upgrading your domain to Windows Server 2008 and what you may see in the process, plus a couple of tips to make your transition a smooth one.
This post will show the proper use of ADPREP and what to expect when you are running it.
ADPREP is broken down into four stages with Windows Server 2008, instead of the two that most of you may be familiar with when you upgraded to Windows Server 2003. The four steps include Forest Preparation, Domain Preparation, Group Policy Preparation and Read-Only Domain Controller (RODC) Preparation (which you have to run if you want to add a RODC to your environment). You will use ADPREP.exe to perform all of these steps.
Preparing to Run ADPREP /forestprep
ADPREP /forestprep makes modifications to the schema. In order to successfully run it you should:
So let’s go through all these preparatory steps in detail
Running ADPREP /forestprep
Preparing to Run ADPREP /domainprep
After a successful completion of ADPREP /forestprep, you will be ready to run ADPREP /domainprep. ADPREP /domainprep must be run against each domain that you wish to upgrade.
In order to run ADPREP /domainprep you should:
Note: Upgrading from Windows 2000 is not supported. For more information see Guide for Upgrading to Windows 2008.
Running ADPREP /Domainprep
For a better understanding of what will occur running the ADPREP /Domainprep command, I have referenced the KB article Enhancements to ADPREP.exe in Windows Server 2003 Service Pack 1(Q324392). The More Information section describes the functionality post-Windows 2003 SP1, including the Windows 2008 ADPREP.
Preparing to Run ADPREP /domainprep /gpprep
ADPREP /domainPrep /gpprep only adds the inheritable access control entries on Group Policy objects in the Sysvol share. If you run it prior to running adprep /domainprep it will run both functions, first the domain prep and then the GP prep.
In order to run ADPREP /domainprep /gpprep you should:
Note Upgrading from Windows 2000 is not supported. For more information see Guide for Upgrading to Windows 2008.
Running ADPREP /domainprep /gpprep
ADPREP /domainprep /gpprep without running adprep /domainprep first.
ADPREP /domainprep /gpprep after running adprep /domainprep
Preparing to Run ADPREP /rodcprep
RODC’s (Read-Only Domain Controllers) are a cool new feature added in Windows Server 2008. The benefits of a RODC in certain domain configurations are well worth the effort of learning and implementing them. For more information on the benefits, see RODC Features on TechNet. If you intend to introduce them into your environment you will have to run ADPREP /rodcprep. This command prepares partitions in Active Directory so RODC’s can be used by adding security to the ForestDNS, DomainDNS, and Domain partitions.
In order to run ADPREP /domainprep /rodcprep you should:
Note ADPREP /rodcprep will let you run without first running ADPREP /forestprep and ADPREP /domainprep, however it is not recommended.
Running ADPREP /rodcprep
That concludes this post on running ADPREP. Running through the steps in order should eliminate many of the problems you might otherwise encounter.
- Rob Newhouse
PingBack from http://www.safewordfordforcitrix.com/ask-the-directory-services-team-so-you-want-to-upgrade-to
The stated requirement for running adprep /domainprep is not correct:
"Be at Windows Server 2003 Native Mode Domain Functional level."
This should be:
Be at Windows Server 2000 Native Mode Domain Functional level.
Thanks Tony, correction has been made.
Hi all, Rob Newhouse again, and today I am talking about errors that you may see while running ADPREP.
Hello, can anyone help me please with the following. I'm really, really stuck.
On the DC with all 5 FSMO-roles, and being Administrator (Schema, Enterprise en Domain Admin) I run the adprep /forestprep of the W2008-CD (tried x86 and x64), which get stuck on Sch32.ldf (the first he has to run). The error is "Schema update failed: attribute in may-contain does not exist.""The created log file says this too: "Add error on line 217: Unwilling To Perform".
I hope someone has an idea about his...
Thank you in advance!
Hans van Dijk
That error will occur when you schema has been incorrectly extended by a 3rd party (and I include one MS add-on component here as 3rd party - the Service For Unix schema extensions). The action to be taken depends very much on which specific attribute it is complaining about in your logs - is that mentioned?
For an issue like this, I would *HIGHLY* recommend you open a support case with us unless the attribute in question is documented on support.microsoft.com (we document how to fix SFU and Cisco Call manager only). It is very easy to make things much worse or simply not be able to resolve this issue without some assistance from us.
When running Adprep /domainprep command I am getting message
Adprep detected that the domain is not in native mode(Status/Consequence)
Adprep has stoppped without making changes (user action)
Configure the domain to run in native mode and re run domain prep
So, I Raised Domain Functional level from Windows 2000 Mixed to Windows Server
Now after this too I have the same error above