ADPREP /domainprep problems...

Discussion in 'Active Directory' started by Marc Speed, Nov 26, 2004.

  1. Marc Speed

    Marc Speed Guest

    I cannot seem to be able to run adprep /domainprep on my domain
    controller... it is the GC and forest root and I want to upgrade to server
    2003. We must have already ran both of these in the past to get exchange
    2003 installed so I am not sure what has changed...

    Here is the error I am getting in the adprep log:

    <snip>

    Adprep verified the state of operation
    cn=446f24ea-cfd5-4c52-8346-96e170bcb912,cn=Operations,cn=DomainUpdates,cn=System,DC=Sidney,DC=nii.

    [Status/Consequence]

    The operation has not run or is not currently running. It will be run next.

    Adprep was unable to complete because the call back function (null) failed.

    [Status/Consequence]
    Error message: Windows cannot determine the local sysvol location. Upgrade
    of Domain Group Policy Objects failed. (The system cannot find the file
    specified. )

    [User Action]
    Check the log file Adprep.log, in the
    C:\WINNT\system32\debug\adprep\logs\20041126150910 directory for more
    information.

    Adprep was unable to update domain-wide information.

    [Status/Consequence]
    Adprep requires access to existing domain-wide information from the
    infrastructure master in order to complete this operation.

    [User Action]
    Check the log file, Adprep.log, in the
    C:\WINNT\system32\debug\adprep\logs\20041126150910 directory for more
    information.

    <end snip>

    The sysvol share exists and is being share and everything else looks like it
    is right... this machine *is* the infrastructure master...

    Any ideas?
     
    Marc Speed, Nov 26, 2004
    #1
    1. Advertisements

  2. Hello
    Are you sure SYSVOL share exist on all DCs? are there any NT4.0 BDCs. Has
    any DC been upgraded from NT4.0 to Windows Server 2003

    --
    Regards
    Christoffer Andersson
    Microsoft MVP - Directory Services

    No email replies please - reply in the newsgroup
     
    Chriss3 [MVP], Nov 27, 2004
    #2
    1. Advertisements

  3. Marc Speed

    Glenn L Guest

    Mark,
    I suggest you run netdiag and dcdiag on all your DCs.
    Then cleanup the errors you find.
    After this, domainprep should work.

    --
    Glenn L

    CCNA, MCSE (2000,2003) + Security
     
    Glenn L, Nov 27, 2004
    #3
  4. Marc Speed

    marc speed Guest

    I checked and all DC's have the SYSVOL share. There are no NT4 BDCs and no
    DC has been upgraded from NT4 to Server 2003. Our two DCs in this domain
    were upgraded from NT to 2000 server though, if that makes a difference.

    The server in question *is* listed as having the infrastructure master role,
    I only have one other server in my domain to transfer it too but it is a
    backup GC and it says that this is not recommended. Although the machine in
    question is a GC and forest root so I am not sure what is better/worse.

    There is one other domain in this forest, and they have already upgraded
    their servers from 2000 to 2003. The sysvol share exists on their DCs as
    well and there are no replication errors. I forced replication everywhere
    and there were no errors to be seen, just successfull reps.

    Both my DCs pass a netdiag fine, and the only errors in a dcdiag are
    systemlog even errors that are related to printers in Terminal Services and
    othersuch nonrelated nonsense. There are no DNS errors that I can see. The
    server in question is also the DNS server. There is one other error in
    dcdiag on the server in question: "Could not open SMTPSVC on SIDNEY2: failed
    with 1060. The service is not installed." or something to that effect. I
    dunno if that has anything to do with it.

    Any help would be greatly appreciated. If you need any more info just ask.

    Marc


     
    marc speed, Nov 27, 2004
    #4
  5. Marc Speed

    Glenn L Guest

    curious, why are you running domainprep again if it has already been run?

    Anyway the operation
    "cn=446f24ea-cfd5-4c52-8346-96e170bcb912,cn=Operations,cn=DomainUpdates,cn=Sy
    Sets ACEs in SYSVOL on the server domainprep is running on.
    It first looks in the registry under
    HKLM\system\ccs\services\netlogon\parameters
    for the SYSVOL REG_SV value, which must be the actual path to your
    sysvol mount point. e.g. c:\winnt\sysvol\sysvol.

    Based on the error you are getting, this registry value may be missing or
    may not point to the correct location.

    It then binds to policies folder and proceeds to set the following ACE on it
    and the sub folders. (A;;LCRPLORC;;;ED)

    If the registry is not the problem, then consider transferring the
    infrastructure master role to the other server and re-run adprep /domainprep
    from there.
    The risk of having the infrastructure master on the GC is low provided the
    FSMO role is only there for the duration of the task (transfer it back when
    done).



    --
    Glenn L

    CCNA, MCSE (2000,2003) + Security
     
    Glenn L, Nov 30, 2004
    #5
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.