Error during DC Promo

-

hi,

i receiving error when trying promote windows 2008 r2 or windows 2012 r2 server domain controller in existing windows 2003 (sp2) domain. have tried both 2008 r2 , 2012 r2 , receiving same error.

existing environment:

2 x windows 2003 sp2 domain controllers
several "external" trusts
windows server 2003 functional level
new windows 2008 r2 , windows server 2012 r2 servers (with dns pointing existing 2003 dc's dns servers)

the error:

the promotion errors following in adprep.log file.

adprep unable complete because call function failed.
[status/consequence]
error message: unable access computer "domaincontrollername.domain.com.au". access denied.
  (0x80070005).
[user action]
check log file adprep.log, in c:\windows\debug\adprep\logs\20140207153306 directory more information.

dsid info:
dsid: 0x1811132a
winerror = 0x1f
nt build: 9600
nt build: 16384

[2014/02/07:15:33:06.648]
adprep unable update forest information.

what have tried far?:

  • ensured account being used part of enterprise admins group, domain admins group , schema admins group. created new ad account belonged 3 groups.
  • disabled antivirus on source domain controller (the 1 referenced in error)
  • ensured windows firewall turned off on source , target dc's
  • ensured ad account being used part of administrators group in domain
  • ensured administrators had trusted delegation rights in domain controller policy
  • ran adprep /forestprep , /domainprep /gpprep using windows 2008 r2 media on existing 2003 dc (successful)
  • tried doing dcpromo (using server manager) on both windows 2008 r2 , windows 2012 r2 server. same error on both servers.
  • checked event logs obvious, nothing see.
  • searched net high , low go on can't find anything!!

hope can here! luckily cloned these servers , doing in test environment. (both 2003 dc's dns servers, 2008 r2 target dc, 2012 r2 target dc, exchange 2003 server , target exchange 2010 server happen after dcpromo).

i suggest download trial version of server 2008 or 2012 , extend schema that.  extension newer version won't hurt , out of issue in.  45 sounds updated schema somehow (a beta product?) , out of sync somehow.  not sure if resolve issue @ least schema version supported, if have call product support.

paul bergson
mvp - directory services
mcitp: enterprise administrator
mcts, mct, mcse, mcsa, security, bs csci
2012, 2008, vista, 2003, 2000 (early achiever), nt4
twitter @pbbergs http://blogs.dirteam.com/blogs/paulbergson
please no e-mails, questions should posted in newsgroup.
posting provided no warranties, , confers no rights.



Windows Server  >  Directory Services



Comments

Post a Comment

Popular posts from this blog

Group Policy Event ID 1058 Error Code 1326 (The user name or password is incorrect)

-
i seeing odd error on 1 of our domain controllers. have dealt event id 1058 errors whereby policy (or policies) not replicating, receiving error along error code 1326 on server, , apparently happening default domain policy: log name:      system source:        microsoft-windows-grouppolicy date:          8/10/2015 3:09:54 pm event id:      1058 task category: none level:         error keywords:      user:          s-1-5-21-1484152634-2550175353-3916092219-3287 computer:      <dc name>.<domainname> description: processing of group policy failed. windows attempted read file http://schemas.microsoft.com/win/2004/08/events/event ">   <system>     <provi...
Read more

Suspicious event log Event ID: 4905

-
hi thr, could please me understand causing such event logs generate ? as  i understand, vssvc.exe pertains volume shadow copy used backup purpose.  we have third party application used taking backup of servers. the event longs generated following messages: 1) attempt made unregister security event source. 2) attempt made register security event source. these events not regular generated on random days. standard fields: date:               2013/10/19 time:               02:32:19 importance:         critical rule name:          security event monitored machine:  <domain controller> log format:         windows log name:           security event id:           4905 in work hours:      yes dynamic fields: internal timestamp: 2013/10/19 ...
Read more

DCOM received error "2147746132" from...

-
hi everybody, i have dc (my windows essentials 2012 server) , windows 2012 server in network.  the windows server 2012 inside domain. on server, got "non stopping" error says in event logs : ===> dcom received error "2147746132" fromd computer xxxx(my dc computer) while server trying activation : {6df8cb71-153b-4c66-8fc4-e59301b8011b} it never stops, got 11000+ new events :s i found : http://support.microsoft.com/kb/971153/fr i'm not sure should ? does got idea ? matthieu. hi, please try solution mentioned in below link: http://www.eventid.net/display-eventid-10006-source-dcom-eventno-272-phase-1.htm regards, cicely Windows Server  >  Windows Server 2012 General ...
Read more