First Windows 2003 Domain Controller

I read that you have to disconnect the infrastructure master from the network
and run adprep/forestprep, adprep/domainprep offline before connecting to the
network in order to run DCpromo on the 1st Windows 2003 server to promote to
domain controller. Can this be done online?

I've never read this before. Where did you read it?


Ive heard of people taking the schema master offline for the purpose of the
schema upgrade incase it went wrong.

The reason was because they didnt want any changes replicated out unless it
had completed successfully.


"JKM" <JKM@discussions.microsoft.com> wrote in message
news:064FF3BB-D65E-4DDC-A71D-A7AB1E7F0B5B@microsoft.com...
>I read that you have to disconnect the infrastructure master from the
>network
> and run adprep/forestprep, adprep/domainprep offline before connecting to
> the
> network in order to run DCpromo on the 1st Windows 2003 server to promote
> to
> domain controller. Can this be done online?

Hi,

Yesterday i ran adprep /forestprep and adprep /domainprep on a Windows 2000
Domain Controller which held all the 5 FSMO roles. I too have never heard of
taking the Infrastructure Master offline to run adprep /forestprep and adprep
/domainprep.

However, you might get an error that's something similar to: "You do not
have the permission to update the schema". In that case, look for a REG_DWORD
value under HKLM\SYSTEM\CCS\SERVICES\NTDS\PARAMETERS. If you do not find a
REG_DWORD "Schema Update Allowed" (without the quotes), please add it
manually and set it to 1.
http://support.microsoft.com/default...b;en-us;325379
-------
Manish Raval
Microsoft Support Engineer
Microsoft Windows 2000/2003 Active Directory Services Specialist

"Dave Hedgehog" wrote:

> I've never read this before. Where did you read it?
>
>
> Ive heard of people taking the schema master offline for the purpose of the
> schema upgrade incase it went wrong.
>
> The reason was because they didnt want any changes replicated out unless it
> had completed successfully.
>
>
> "JKM" <JKM@discussions.microsoft.com> wrote in message
> news:064FF3BB-D65E-4DDC-A71D-A7AB1E7F0B5B@microsoft.com...
> >I read that you have to disconnect the infrastructure master from the
> >network
> > and run adprep/forestprep, adprep/domainprep offline before connecting to
> > the
> > network in order to run DCpromo on the 1st Windows 2003 server to promote
> > to
> > domain controller. Can this be done online?
>
>
>

Also, run Adprep from the Windows Server 2003 SP1 CD as it has better error
handling.


"Manish" <Manish@discussions.microsoft.com> wrote in message
news:7BDB95AF-2CD6-4CB2-9E8E-0849E4F4B5D3@microsoft.com...
> Hi,
>
> Yesterday i ran adprep /forestprep and adprep /domainprep on a Windows
> 2000
> Domain Controller which held all the 5 FSMO roles. I too have never heard
> of
> taking the Infrastructure Master offline to run adprep /forestprep and
> adprep
> /domainprep.
>
> However, you might get an error that's something similar to: "You do not
> have the permission to update the schema". In that case, look for a
> REG_DWORD
> value under HKLM\SYSTEM\CCS\SERVICES\NTDS\PARAMETERS. If you do not find a
> REG_DWORD "Schema Update Allowed" (without the quotes), please add it
> manually and set it to 1.
> http://support.microsoft.com/default...b;en-us;325379
> -------
> Manish Raval
> Microsoft Support Engineer
> Microsoft Windows 2000/2003 Active Directory Services Specialist
>
> "Dave Hedgehog" wrote:
>
>> I've never read this before. Where did you read it?
>>
>>
>> Ive heard of people taking the schema master offline for the purpose of
>> the
>> schema upgrade incase it went wrong.
>>
>> The reason was because they didnt want any changes replicated out unless
>> it
>> had completed successfully.
>>
>>
>> "JKM" <JKM@discussions.microsoft.com> wrote in message
>> news:064FF3BB-D65E-4DDC-A71D-A7AB1E7F0B5B@microsoft.com...
>> >I read that you have to disconnect the infrastructure master from the
>> >network
>> > and run adprep/forestprep, adprep/domainprep offline before connecting
>> > to
>> > the
>> > network in order to run DCpromo on the 1st Windows 2003 server to
>> > promote
>> > to
>> > domain controller. Can this be done online?
>>
>>
>>

There is not need to take the Infrastructure master DC offline. Please look
at my earlier reply of the same concern.
--
Microsoft Support Engineer
Microsoft Windows 2000/2003 Active Directory Services Specialist


"JKM" wrote:

> I read that you have to disconnect the infrastructure master from the network
> and run adprep/forestprep, adprep/domainprep offline before connecting to the
> network in order to run DCpromo on the 1st Windows 2003 server to promote to
> domain controller. Can this be done online?

just a W2K3 was released MS had published how to update the schema on a W2K
DC with the W2K3 schema updates. The method described by MS was to
disconnect the schema master. That method presented sometimes issues and MS
changed the method and also described it in MS-KBQ325379

What you need to do is to disable OUTBOUND replication on the schema
master...
* Disable outbound replication on the schema master
to disable outboumd repl.
REPADMIN /OPTIONS <DCNAME> +DISABLE_OUTBOUND_REPL

* Run ADPREP /forestprep on the schema master
* Check logs on the schema master to see if everything is OK
* Everything OK? enable outbound replication on the schema master
to enable outboumd repl.
REPADMIN /OPTIONS <DCNAME> -DISABLE_OUTBOUND_REPL

* Everything NOT OK? restore the schema master from backup

if all DCs in the forest have received the schema updates there is no other
way to undo the schema change then restoring all DCs in the forest!

So having SYSTEMDISK and SYSTEMSTATE backups is OK!

The following articles will helps you in your migration from W2K/E2K to
W2K3/E2K3 and especially when doing an in-place upgrade of the domain:
* MS-KBQ314649_W2K3 ADPREP Command Causes Mangled Attributes in W2K Forests
That Contain E2K Servers (http://support.microsoft.com/?id=314649)

* MS-KBQ293783_Cannot Upgrade Windows 2000 Server to Windows Server 2003
with Windows Services for UNIX 2.0 Installed
(http://support.microsoft.com/?id=293783)

* MS-KBQ887426_Incorrect Schema extension for OS X prevents ForestPrep from
completing in Windows 2000 (http://support.microsoft.com/?id=887426)
* MS-KBQ325379_How to Upgrade Windows 2000 Domain Controllers to Windows
Server 2003 (http://support.microsoft.com/?id=325379)
* MS-KBQ555040_Common Mistakes When Upgrade Windows 2000 Domain To Windows
2003 (http://support.microsoft.com/?id=555040)
* MS-KBQ324392_Enhancements to Adprep.exe in Windows Server 2003 Service
Pack 1 and in hotfix 324392 (http://support.microsoft.com/?id=324392)
* Also see:
http://www.microsoft.com/technet/pro...7baa73419.mspx)
* What do I need to do to prepare my Windows 2000 forest for the
installation of the first Windows Server 2003 DC?
(http://www.petri.co.il/windows_2003_adprep.htm)
* MS-KBQ555038_How to enable Windows 98-ME-NT clients to logon to Windows
2003 based Domains (http://support.microsoft.com/?id=555038)
* MS-KBQ555262_Common Mistakes When Upgrading Exchange 5.5-2000 To a
Exchange 2003 (http://support.microsoft.com/?id=555262)
* MS-KBQ822942_Considerations When You Upgrade to Exchange Server 2003
(http://support.microsoft.com/?id=822942)


--
Cheers,
# Jorge de Almeida Pinto #
BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------
"JKM" <JKM@discussions.microsoft.com> wrote in message
news:064FF3BB-D65E-4DDC-A71D-A7AB1E7F0B5B@microsoft.com...
>I read that you have to disconnect the infrastructure master from the
>network
> and run adprep/forestprep, adprep/domainprep offline before connecting to
> the
> network in order to run DCpromo on the 1st Windows 2003 server to promote
> to
> domain controller. Can this be done online?