Jan 19, 2009 Before you can introduce Windows Server 2008 domain controllers into existing Windows 2000 or Windows Server 2003 domains, you must prepare the forest and domains with the ADPREP utility.
Before you can introduce Windows Server 2008 domain controllers intoexisting Windows 2000 or Windows Server 2003 domains, you must preparethe forest and domains with the ADPREP utility.
ADPREP.exeis a command-line tool that extends the Active Directory schema, andupdates permissions as necessary to prepare a forest and domain for adomain controller that runs the Windows Server 2008 operating system.
Note: ADPREP was also available in Windows Server2003 and Windows Server 2003 R2. In Windows Server 2008, ADPREP followsthe same logic and performs similar tasks to prepare for the upgrade toWindows Server 2003 or Windows Server 2003 R2. Please read my 'Windows 2003 ADPREP' article for more information on that.
ADPREP.exe is a command-line tool that is available on the Windows Server 2008 installation disc in the 'sources'adprep folder.
Server 2008 R2 Download
When you run it, it must be run ADPREP from an elevated command prompt. To open an elevated command prompt, click Start, right-click Command Prompt, and then click Run as administrator.
Where should I run ADPREP?
ADPREP /forestprep must be run on the SchemaMaster of a forest and under the credentials of someone in the SchemaAdmins and Enterprise Admins groups.
ADPREP /domainprep must be run on the Infrastructure Master of a domain and under the credentials of someone in the Domain Admins group.
Important: Since at the time of running ADPREP youstill do not have any Windows Server 2008 Domain Controllers, it shouldbe made clear that these commands MUST be run on EXISTING Windows 2000or Windows Server 2003 Domain Controllers. That is why you MUST makesure you keep a copy of the 32-bit version of the Windows Server 2008installation DVD. You cannot use the 64-bit version of the installationmedia to run ADPREP on 32-bit versions of Windows 2000/2003. BecauseWindows Server 2008 installation media is 64-bit by default, rememberto request the 32-bit version when you get your copy. In case you don'thave the 32-bit version available, you can also use the evaluationversion of Windows Server 2008 32-bit installation media to run ADPREP,so just download the file from Microsoft's website, and use it to run ADPREP on your 32-bit Windows 2000/2003 DCs.
What does ADPREP do?
Before running ADPREP, all Windows 2000 Active Directory DomainControllers in the forest should be upgraded to Windows 2000 ServicePack 4 (SP4) or later.
ADPREP /forestprep command extends the schema withquite a few new classes and attributes. These new schema objects arenecessary for the new features supported by Windows Server 2008. Youcan view the schema extensions by looking at the .ldf files in the 'sources'adprepdirectory on the Windows Server 2008 DVD. These files contain LDIFentries for adding and modifying new and existing classes andattributes.
ADPREP /domainprep creates new containers and objects, modifies ACLs on some objects, and changes the meaning of the Everyone security principal.
Before you can run ADPREP /domainprep, you must be sure that the updates from /forestprep have replicated to all domain controllers in the forest.
You can view detailed output of the ADPREP command by looking at the log files in the %Systemroot%'system32'debug'adprep'logsdirectory. Each time ADPREP is executed, a new log file is generatedthat contains the actions taken during that particular invocation. Thelog files are named based on the time and date ADPREP was run.
Once you’ve run both /forestprep and /domainprep and allowed timefor the changes to replicate to all domain controllers, you can thenstart upgrading your domain controllers to Windows Server 2008 orinstalling new Windows Server 2008 domain controllers.
Running ADPREP
![]()
In order to run ADPREP, insert the DVD media of Windows Server2008 into the DVD drive of the appropriate Windows 2000/2003 DC, which,as noted above, should be the Schema Master of a forest.
Lamer note: You can use a network path or even copy the files locally to the server if you don't have a DVD drive on your DC…
With only one day to fulfill the ransom, it's a race against time for Hercules and his loyal friends. It isn't long before their journey takes a decidedly spooky turn; after spending a night in a temple dedicated to The Furies, it soon becomes clear that one among their number has something to hide. In exchange for her life Kyros demands that Hercules retrieve a precious and powerful artefact from the Underworld – a task which can only mean certain death. As danger closes in and a dark secret is exposed, our heroes are forced to confront some uncomfortable truths as they fight for their lives under the desert sun.99'Pandora's Box'Declan O'DwyerHoward Overman30 November 2013 ( 2013-11-30)5.26Romance is at last in the air for Hercules and Medusa until she is kidnapped by a cruel moneylender, Kyros. Atlantis season 1 full episodes. Will they find another way to descend to Hades and return with the artefact, or be forced to walk among the dead forever?
If you're prompted to install Windows Server 2008, do NOT install it. Close the window instead.
Browse to the 'sources'adprep directory.
Open a Command Prompt window (Click Start > Run > CMD > Enter), and drag the ADPREP.exe file to the Command Prompt window.
Lamer note: If you can't drag 'n drop, you can simply type the path… duh…
In the Command Prompt window, type the following command:
![]()
In order to prevent accidental running of the command, you must press the 'C' key on your keyboard, then press Enter. Download window xp sp2 iso image. Command will begin to load a bunch of LDIF files containing all thenecessary changes to the existing AD and Schema. Process will take afew moments.
When done, you'll be prompted. Make sure you let the existingDomain Controllers replicate all the changes throughout the entireforest BEFORE proceeding to the next step.
Next, go to the Infrastructure Master of eachdomain that you wish to upgrade and insert the DVD media of WindowsServer 2008 into the DVD drive. Repeat the instructions to open the Command Prompt window, and type: Burn xbox games to dvd.
Unlike the /forestprep action which takes some time, the /domainprep action is almost instantaneous.
Note: The existing Windows 2000/2003 domain MUST bein Native mode, as not Windows NT 4.0 BDCs are supported by WindowsServer 2008 DCs. Therefore, if that is not the case, you'll get thiserror:
Switch your domain to Native mode or above, then repeat the operation.
Again, make sure you let the existing Domain Controllersreplicate all the changes throughout the domain BEFORE proceeding tothe next step.
Repeat the /domainprep action for each domain in the forest that requires new Windows Server 2008 Domain Controllers.
Windows 2000 Domain Notes
When upgrading Windows 2000 domains, an additional command must be run before installing the first Windows Server 2008 DC.
Go to the Infrastructure Master of each domain thatyou wish to upgrade and insert the DVD media of Windows Server 2008into the DVD drive. Repeat the instructions to open the Command Promptwindow, and type:
This command performs similar updates as domainprep. However, thiscommand also provides updates that are necessary to enable ResultantSet of Policy (RSOP) Planning Mode functionality. In Active Directoryenvironments that run Microsoft Windows® 2000, this command performsupdates during off-peak hours. This minimizes replication traffic thatis created in those environments by updates to file system permissionsand Active Directory permissions on existing Group Policy objects(GPOs). This command is also available on Microsoft Windows Server 2003with Service Pack 1 (SP1) or later.
Windows 2003 Domain and first RODC Notes
In Windows Server 2008, a new Domain Controller installation optionis available, called Read Only domain Controller. I will not go intodetail about RODCs in this article (search my site for more informationabout RODCs), however, in order to enable the installation of the firstRODC in an existing Windows Server 2003 Active Directory forest, whereyou have already added at least one Windows Server 2008 regular DC, youmust run the following command:
This command updates permissions on application directory partitionsto enable replication of the partitions to RODCs. This operation runsremotely; it contacts the infrastructure master in each domain toupdate the permissions. You need to run this command only once in theforest. You can run this command on any computer in the forest. Youmust be a member of the Enterprise Admins group to run this command.
You are now ready to introduce your first Windows Server 2008 Domain Controller. Read my 'Installing Active Directory on Windows Server 2008' article for more information on that.
Comments are closed.
|
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |