Sunday, July 16, 2017

active directory - Error promoting secondary Windows server 2016 DNS with a Primary Windows Server 2003

I have an OLD Intel server socket 478 DDR running Windows Server 2003 EE SP2 as Primary DC and DNS. In order to migrate to server 2016 and discard this old hardware and server version I did:
1- installed a new Windows server 2016 to create a Secondary DC.
2- I added it to the Domain with no issues.
3- The old server 2003 it is already operating at the highest possible functional level: Windows server 2003.
4- Added an Active Directory Domain Services at the new Server 2016
5- When trying to promote the new server 2016 as a Domain Controller I get this error message:




"Verification of replica failed. The forest functional level is Windows 2000. To install a Windows Server 2016 Domain or Domain Controller, the forest functional level must be Windows Server 2003 or higher."



When running the adprep32 /forestprep I get this message:



"Adprep was unable to check the forest update status.
[Status/Consequence]
Adprep queries the directory to see if the forest has already been prepared. If the information is unavailable or unknown, Adprep proceeds without attempting this operation.
[User Action]
Restart Adprep and check the ADPrep.log file. Verify in the log file that this forest has already been successfully prepared.
Adprep encountered an LDAP error.

Error code: 0x20. Server extended error code: 0x208d, Server error message: 0000208D: NameErr: DSID-031001CD, problem 2001 (NO_OBJECT), data 0, best match of:
'CN=Servers,CN=Site-PHAV,CN=Sites,CN=Configuration,DC=phav,DC=cubacatering,DC=avianet,DC=cu'.
"



The user I logged is part of the Domain Admins, Enterprise Admins and Schema Admins group.



Please HELP!!

No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...