- Run Windows Server 2008 R2 ADPREP. The Windows Server 2008 R2 ADPREP has been modified to prevent antivirus software from interfering with /FORESTPREP. Run the Windows Server 2008 R2 ADPREP if you have the Windows Server 2008 R2 installation media available. Retry running ADPREP with 3rd-party services disabled.
- Running Adprep.exe. Before you can replace your old computer with a new computer that is running a new version of Windows Server, you need to first prepare the Active Directory schema by running adprep. The adprep console utility will upgrade the Active Directory schema to add new object types required by the new operating system.
- Windows Server 2008 R2 Adprep Download
- Adprep Utility Server 2008 Download
- Windows Server 2008 R2 Enterprise Downlo…
- Server 2008 R2 Adprep Download
- Windows 2008 Adprep Download
Hi all, Rob Newhouse here and today I am talking about upgrading your domain to Windows Server 2008 and what you may see in the process, plus a couple of tips to make your transition a smooth one.
For a better understanding of what will occur running the ADPREP /Domainprep command, I have referenced the KB article Enhancements to ADPREP.exe in Windows Server 2003 Service Pack 1(Q324392). The More Information section describes the functionality post-Windows 2003 SP1, including the Windows 2008 ADPREP. Preparing to Run ADPREP /domainprep.
This post will show the proper use of ADPREP and what to expect when you are running it.
ADPREP is broken down into four stages with Windows Server 2008, instead of the two that most of you may be familiar with when you upgraded to Windows Server 2003. The four steps include Forest Preparation, Domain Preparation, Group Policy Preparation and Read-Only Domain Controller (RODC) Preparation (which you have to run if you want to add a RODC to your environment). You will use ADPREP.exe to perform all of these steps.
Preparing to Run ADPREP /forestprep
ADPREP /forestprep makes modifications to the schema. In order to successfully run it you should:
- Have a good system state backup for every domain controller in your forest, or at the very least a good system state backup for one domain controller for each domain in the forest.
- Be logged on as a user that belongs to the Domain Admin, Schema Admin and Enterprise Admin groups in the forest root domain.
- Ensure that you are running Windows 2000 SP4 or later on all domain controllers in the forest.
- You must run ADPREP /forestprep on your schema master.
- If you are running Exchange 2000 in your environment refer to KB article 325379 How to upgrade Windows 2000 domain controllers to Windows Server 2003.
- Ensure replication is working throughout the entire forest, including that all domain controllers are up and running and that the schema master has been up long enough for a complete replication cycle to happen for the Schema partition.
So let’s go through all these preparatory steps in detail
- First you should perform a system state backup on all of your domain controllers using either Windows Backup (NTBackup) or a third-party backup tool. This step is necessary if you find that your schema is incompatible and you need to roll back to a previous state.
- Next, check to see if your account has the appropriate group memberships. Open Active Directory Users and Computers, right-click the account you are using to do the upgrade and choose Properties. Select the Member Of tab. If you do not see Domain Admins, Enterprise Admins and Schema Admins, add the ones you are missing. Log off and back on, then run whoami /groups in a command prompt to verify the groups are in your security token.
- ADPREP /forestprep will check to see if you are running at least Windows 2000 SP4. If you have Windows 2000 domain controllers in your environment you should upgrade them all to SP4. You can download SP4 from here – Windows 2000 Service Pack 4 for IT professionals.
- Next, check to see if you are logged on to your schema master. There are two ways to accomplish this. One is to run regsvr32 schmmgmt.dll so you can load the Active Directory Schema snap-in. Open a new MMC and add Active Directory Schema. Right-click on the words Active Directory Schema and choose Operations Master.Another alternative is to run netdom query fsmo from a command prompt. Netdom is part of the Windows Server 2003 Support Tools.
- There are known issues with upgrading a Windows 2000 domain with Exchange 2000 running in the environment. There are different scenarios with different steps in KB article 325379 to address problems that have been encountered in the upgrade process. You will be performing one of the scenarios regardless. It is just a matter of which scenario you will have to perform.
- The final verification is to check and make sure replication is working. To do this install the Windows Server 2003 Support Tools if you do not have them already installed. Run repadmin /showreps from a command prompt.You are looking for Last attempt @ datetime was successful. Any errors should be addressed before attempting to run ADPREP /forestprep.
NOTE: ADPREP /forestprep will only check to see if replication is working on your schema master. It will not check the replication status of all DCs in your environment. Repadmin /showreps will only check the DC that you focus it on. In order to check the entire environment you will want to run repadmin /replsum. This command will give you the status of your entire environment. You will want to fix any errors you have with replication prior to running ADPREP /forestprep.
Running ADPREP /forestprep
- Now you are ready to prepare your forest. This procedure takes a while depending on the speed of your computer so do not interrupt it. Insert your Windows Server 2008 DVD into the DVD drive on the schema master.
- Open a command prompt.
- Change your drive letter to the DVD drive. If you do not have a DVD drive on your schema master you can copy the SourcesAdprep folder to your local drive and run it from the copy.
- Change into the SourcesAdprep directory.
- Run ADPREP /forestprep.
- You will get a warning that you need to be running Windows 2000 SP4 or later.
- Type C and press Enter.
- You will see a series of updates from LDF files.
- If all goes well, you will see ADPREP successfully updated the forest-wide information.
Preparing to Run ADPREP /domainprep
After a successful completion of ADPREP /forestprep, you will be ready to run ADPREP /domainprep. ADPREP /domainprep must be run against each domain that you wish to upgrade.
Prerequisites
In order to run ADPREP /domainprep you should:
- Have successfully completed ADPREP /forestprep.
- Be a domain admin for the domain you are running it on.
- Be at Windows 2000 Native Mode Domain Functional level.
- Have access to the Infrastructure Master.
- Wait for the schema changes to replicate throughout the environment, or at least the Infrastructure Master must have the schema updates replicated to it.
Note: Upgrading from Windows 2000 is not supported. For more information see Guide for Upgrading to Windows 2008.
Windows Server 2008 R2 Adprep Download
Running ADPREP /Domainprep
- Insert the Windows Server 2008 DVD.
Open a command prompt. - Change your drive letter to the DVD drive.
- Change your directory to SourcesAdprep.
- Run ADPREP /domainprep.
Adprep Utility Server 2008 Download
For a better understanding of what will occur running the ADPREP /Domainprep command, I have referenced the KB article Enhancements to ADPREP.exe in Windows Server 2003 Service Pack 1(Q324392). The More Information section describes the functionality post-Windows 2003 SP1, including the Windows 2008 ADPREP.
Preparing to Run ADPREP /domainprep /gpprep
ADPREP /domainPrep /gpprep only adds the inheritable access control entries on Group Policy objects in the Sysvol share. If you run it prior to running adprep /domainprep it will run both functions, first the domain prep and then the GP prep.
Prerequisites
In order to run ADPREP /domainprep /gpprep you should:
- Have completed the prerequisites for ADPREP /domainprep.
- Have SysvolSysvolPolicies{Default Domain and Default Domain Controller GPO guids} in place.a. In Windows Explorer Navigate to your SysvolSysvolDomainPolicies folderb. Verify the following GUIDs are inplace{31B2F340-016D-11D2-945F-00C04FB984F9}
{6AC1786C-016F-11D2-945F-00C04FB984F9}
Note Upgrading from Windows 2000 is not supported. For more information see Guide for Upgrading to Windows 2008.
Running ADPREP /domainprep /gpprep
- Insert the Windows Server 2008 DVD.
- Open a command prompt.
- Change your drive letter to the DVD drive.
- Change your directory to SourcesAdprep.
- Run ADPREP /domainprep /gpprep.
ADPREP /domainprep /gpprep without running adprep /domainprep first.
ADPREP /domainprep /gpprep after running adprep /domainprep
Preparing to Run ADPREP /rodcprep
RODC’s (Read-Only Domain Controllers) are a cool new feature added in Windows Server 2008. The benefits of a RODC in certain domain configurations are well worth the effort of learning and implementing them. For more information on the benefits, see RODC Features on TechNet. If you intend to introduce them into your environment you will have to run ADPREP /rodcprep. This command prepares partitions in Active Directory so RODC’s can be used by adding security to the ForestDNS, DomainDNS, and Domain partitions.
Prerequisites
Windows Server 2008 R2 Enterprise Downlo…
In order to run ADPREP /domainprep /rodcprep you should:
- Be a Domain Admin and Enterprise Admin.
- Be able to contact all Infrastructure Master role holders in the forest.
Note ADPREP /rodcprep will let you run without first running ADPREP /forestprep and ADPREP /domainprep, however it is not recommended.
Running ADPREP /rodcprep
- Insert the Windows Server 2008 DVD.
- Open a command prompt.
- Change your drive letter to the DVD drive.
- Change your directory to SourcesAdprep.
- Run ADPREP /domainprep /rodcprep.
Server 2008 R2 Adprep Download
That concludes this post on running ADPREP. Running through the steps in order should eliminate many of the problems you might otherwise encounter.
– Rob Newhouse
-->Applies To: Windows Server 2003, Windows Server 2008, Windows Server 2003 R2, Windows Server 2012, Windows Server 2003 with SP1, Windows 8
Extends the Active Directory® schema and updates permissions as necessary to prepare a forest and domain for a domain controller that runs the Windows Server® 2008 operating system.
Adprep.exe is a command-line tool that is available on the Windows Server 2008 installation disc in the sourcesadprep folder, and it is available on the Windows Server 2008 R2 installation disk in the supportadprep folder. You must run adprep from an elevated command prompt. To open an elevated command prompt, click Start, right-click Command Prompt, and then click Run as administrator.
In Windows Server 2008 R2, Adprep is available in a 32-bit version and a 64-bit version. The 64-bit version runs by default. If you need to run Adprep on a 32-bit computer, run the 32-bit version (Adprep32.exe).
For more information about running Adprep.exe and how to resolve errors that can occur when you run it, see Running Adprep.exe ( HYPERLINK 'http://go.microsoft.com/fwlink/?LinkID=142597' http://go.microsoft.com/fwlink/?LinkID=142597).
For examples of how this command can be used, see Examples.
Windows 2008 Adprep Download
For more information about running adprep /forestprep, see Prepare a Windows 2000 or Windows Server 2003 Forest Schema for a Domain Controller That Runs Windows Server 2008 or Windows Server 2008 R2 (http://go.microsoft.com/fwlink/?LinkID=93242).
For more information about running adprep /domainprep /gpprep, see Prepare a Windows 2000 or Windows Server 2003 Domain for a Domain Controller That Runs Windows Server 2008 or Windows Server 2008 R2 (http://go.microsoft.com/fwlink/?LinkID=93243).
For more information about running adprep /rodcprep, see Prepare a Forest for a Read-Only Domain Controller (http://go.microsoft.com/fwlink/?LinkID=93244).
Syntax
Parameters
Parameter | Description |
---|---|
/forestprep | Prepares a forest for the introduction of a domain controller that runs Windows Server 2008. You run this command only once in the forest. You must run this command on the domain controller that holds the schema operations master role (also known as flexible single master operations or FSMO) for the forest. You must be a member of all the following groups to run this command:
|
/domainprep | Prepares a domain for the introduction of a domain controller that runs Windows Server 2008. You run this command after the forestprep command finishes and after the changes replicate to all the domain controllers in the forest. Run this command in each domain where you plan to add a domain controller that runs Windows Server 2008. You must run this command on the domain controller that holds the infrastructure operations master role for the domain. You must be a member of the Domain Admins group to run this command. |
/domainprep /gpprep | Performs similar updates as domainprep. However, this command also provides updates that are necessary to enable Resultant Set of Policy (RSOP) Planning Mode functionality. In Active Directory environments that run Microsoft Windows® 2000, this command performs updates during off-peak hours. This minimizes replication traffic that is created in those environments by updates to file system permissions and Active Directory permissions on existing Group Policy objects (GPOs). This command is also available on Microsoft Windows Server 2003 with Service Pack 1 (SP1) or later. Run this command after the forestprep command finishes and after the changes replicate to all domain controllers in the forest. You must run this command on the infrastructure master for the domain. For more information about running this command in Windows 2000 Active Directory environments, see Prepare Your Infrastructure for Upgrade (http://go.microsoft.com/fwlink/?LinkId=94798). |
/rodcprep | Updates permissions on application directory partitions to enable replication of the partitions to read-only domain controllers (RODCs). This operation runs remotely; it contacts the infrastructure master in each domain to update the permissions. You need to run this command only once in the forest. However, you can rerun this command any time if it fails to complete successfully because an infrastructure master is not available. You can run this command on any computer in the forest. You must be a member of the Enterprise Admins group to run this command. |
/wssg | Returns an expanded set of exit codes, instead of just 0 (Success) and 1 (Failure). |
/silent | Specifies that no standard output is returned from an operation. This parameter can be used only if /wssg is also used. |
quit | Returns to the prior menu. |
Help | Displays Help for this command. |
? | Displays Help for this command. |
Remarks
- To prepare an existing Windows 2000 or Windows Server 2003 Active Directory environment for a Windows Server 2008 domain controller, be sure to run the version of Adprep that is included in the Windows Server 2008 installation media.
- If you run Adprep on a domain controller running Windows 2000 Server, the domain controller must be running Windows 2000 Server Service Pack 4 (SP4) or later.
- You can also perform verification steps before and after you run the adprep command to help ensure that the operations complete successfully. For more information, see Steps for Extending the Schema (http://go.microsoft.com/fwlink/?LinkId=94799).
Exit Codes
The following table lists exit codes that Adprep can return after an operation completes.
Return Code | Description |
---|---|
0 | Success |
1 | Failure |
2 | Schema conflict error |
3 | FSMO role error |
4 | Connection error |
5 | Schema upgrade error |
6 | Unable to modify error |
7 | Server busy error |
8 | Permission error |
9 | Unable to initialize log file error |
10 | Not a domain controller |
11 | In nonnative mode |
12 | Need to run forest update first |
13 | Forest update already done |
14 | Domain update already done |
15 | GPO update already done |
16 | Forest update wait replication |
Examples
The following example prepares a forest for a domain controller that runs Windows Server 2008:
The following example prepares a domain for a domain controller that runs Windows Server 2008:
The following example prepares a domain for an RODC: