adprep /forestprep fejler på 2003 R1 server

Er det på R1 at den lukker eller på R2 maskinerne? - hvis det er på R1, er det vigtigt du kan se hvad fejlen er (kig i event viewer)? - hvis det er R2 er det nok fordi du allerede har kørt adprep på dem?

Du skal løre adeprep /foresprep på R1 men bruge adprep fra R2 cd'en

Dit spørgsmål forvirrede lidt

Fejlen kommer på min 2003 R1 når jeg bruger adprep fra R2 cdén.Der kommer ikke nogle fejl i min Eventlog ???

Adprep was unable to check the forest update status.

[Status/Consequence]

Adprep queries the directory to see if the forest has already been prepared. If the information is unavailable or unknown, Adprep proceeds without attempting this operation.

[User Action]

Restart Adprep and check the Adprep.log file. Verify in the log file that this forest has already been successfully prepared.

Adprep encountered an LDAP error.
Jeg fandt nu en logfil med følgende tekst .

Adprep created the log file ADPrep.log under C:\WINDOWS\system32\debug\adprep\logs\20060821145408 directory.



Adprep copied file S:\CMPNENTS\R2\ADPREP\schema.ini from installation point to local machine under directory C:\WINDOWS.



Adprep copied file S:\CMPNENTS\R2\ADPREP\sch31.ldf from installation point to local machine under directory C:\WINDOWS\system32.



Adprep copied file S:\CMPNENTS\R2\ADPREP\dcpromo.csv from installation point to local machine under directory C:\WINDOWS\system32\debug\adprep\data.



Adprep copied file S:\CMPNENTS\R2\ADPREP\409.csv from installation point to local machine under directory C:\WINDOWS\system32\debug\adprep\data.



Adprep successfully made the LDAP connection to the local domain controller NTSSJL01.



Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is (null).



LDAP API ldap_search_s() finished, return code is 0x0



Adprep successfully retrieved information from the local directory service.



Adprep successfully initialized global variables.

[Status/Consequence]

Adprep is continuing.





ADPREP WARNING:



Before running adprep, all Windows 2000 domain controllers in the forest should be upgraded to Windows 2000 Service Pack 1 (SP1) with QFE 265089, or to Windows 2000 SP2 (or later).



QFE 265089 (included in Windows 2000 SP2 and later) is required to prevent potential domain controller corruption.



For more information about preparing your forest and domain see KB article Q331161 at http://support.microsoft.com.



[User Action]

If ALL your existing Windows 2000 domain controllers meet this requirement, type C and then press ENTER to continue. Otherwise, type any other key and press ENTER to quit.



Adprep was unable to check the forest update status.

[Status/Consequence]

Adprep queries the directory to see if the forest has already been prepared. If the information is unavailable or unknown, Adprep proceeds without attempting this operation.

[User Action]

Restart Adprep and check the Adprep.log file. Verify in the log file that this forest has already been successfully prepared.

Adprep encountered an LDAP error.

Error code: 0x20. Server extended error code: 0x208d, Server error message: 0000208D: NameErr: DSID-031001CD, problem 2001 (NO_OBJECT), data 0, best match of:
    'CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=XXXXXXXXXXX,DC=local'
.

Ok, du blir nok nød til at køre dcdiag - kunne lyde lidt som om en af dine FSMO roller har et problem.

http://technet2.microsoft.com/WindowsServer/en/library/5237db58-a1e8-40cd-ae8a-7f52848a90f21033.mspx?mfr=true

Har du slettet en domain controller fra din AD uden at flytte dens roller først eller lignende?

Det er korrekt jeg har hafe en server der gik ned HW fejl hvor efter jeg satte en ny server op under andet navn, men har dog slette alle spor efter den gamle ( Troede jeg da. )

Jeg får denne fejl når jeg kører dcdiag.exe
Hændelsestype:    Advarsel
Hændelseskilde:    NTDS Replication
Hændelseskategori:    Replication
Hændelses-id:    2091
Dato:        22-08-2006
Klokkeslæt:        06:12:48
Bruger:        NT AUTHORITY\ANONYMOUS LOGON
Computer:    XXXXXXXX
Beskrivelse:

Ownership of the following FSMO role is set to a server which is deleted or does not exist.

Operations which require contacting a FSMO operation master will fail until this condition is corrected.

FSMO Role: CN=Partitions,CN=Configuration,DC=XXXXXXXXXXX,DC=local
FSMO Server DN: CN=NTDS Settings\0ADEL:cd7b9a5d-0362-4e5f-bfd8-4e2bf50b9bdd,CN=TEST02\0ADEL:23c56e03-5c2b-4b70-91fa-9fdf3a7d351b,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=XXXXXXXXXXXX,DC=local

User Action:

1. Determine which server should hold the role in question.
2. Configuration view may be out of date. If the server in question has been promoted recently, verify that the Configuration partition has replicated from the new server recently.  If the server in question has been demoted recently and the role transferred, verify that this server has replicated the partition (containing the latest role ownership) lately.
3. Determine whether the role is set properly on the FSMO role holder server. If the role is not set, utilize NTDSUTIL.EXE to transfer or seize the role. This may be done using the steps provided in KB articles 255504 and 324801 on http://support.microsoft.com.
4. Verify that replication of the FSMO partition between the FSMO role holder server and this server is occurring successfully.

The following operations may be impacted:
Schema: You will no longer be able to modify the schema for this forest.
Domain Naming: You will no longer be able to add or remove domains from this forest.
PDC: You will no longer be able to perform primary domain controller operations, such as Group Policy updates and password resets for non-Active Directory accounts.
RID: You will not be able to allocation new security identifiers for new user accounts, computer accounts or security groups.
Infrastructure: Cross-domain name references, such as universal group memberships, will not be updated properly if their target object is moved or renamed.

Yderligere oplysninger finder du under Hjælp og support på http://go.microsoft.com/fwlink/events.asp.

Jeg har nu løst problemet med den server som var fjernet fra domænet men har denne fejl endnu.

Hændelsestype:    Advarsel
Hændelseskilde:    LSASRV
Hændelseskategori:    SPNEGO (Negotiator)
Hændelses-id:    40960
Dato:        22-08-2006
Klokkeslæt:        10:26:42
Bruger:        Ikke tilgængelig
Computer:    xxxxxxxx
Beskrivelse:
The Security System detected an authentication error for the server LDAP/xxxxxxxx.  The failure code from authentication protocol NTLM was "The handle specified is invalid
(0x80090301)".

Yderligere oplysninger finder du under Hjælp og support på http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 01 03 09 80              ...€

Hej peterlund lav et svar så får du point, det er min Schema FSMO som ikke findes.

Jeg opretter et nut spørgsmål ang Seize FSMO Roles

Hej Osj,

Ja, det begyndte at ligne.. ser ud til at det er din schema FSMO der mangler.

Held og lykke med det, glad for  at jeg kunne hjælpe dig på vej.