Discussion:
ADPREP /forestprep And R2
(too old to reply)
HPPatel74
2006-11-20 17:26:03 UTC
Permalink
Hello,

Please bear with me on this as I am new to this community and fairly new to
Windows.

The story goes as follows:

I have been asked to look into the best way of migrating data from our
London office to our DR site in Oxford. I have been looking at Windows
Server 2003 R2 and the DFS component that comes with it.

I have two servers in the Live AD that have been setup to start testing DFS.
But before I can do anything, I need to extent he schema on AD. According
to the documentation, I need to logon to the operations master server and run
the above. But I get the following error message:

Adprep detected that the logon user is not a member of the following groups:
Enterprise Admins Group and Schema Admins Group
[Status/Consequence]
Adprep has stopped without making changes
[User Action]
Verify the current logged on user is a member of Enterprise Admins group,
Schema Admins group and ROOT.LOCAL\Domain Admins group.

I am logged in as ROOT\Administrator and this user is a member of all the
groups mentioned above.

Could someone please help as I and the Windows Adminstrator Guru here at the
company are stumped.

Thank you

Hitesh
Jorge Silva
2006-11-20 17:59:32 UTC
Permalink
Hi
That error generally means that in fact you're not member of the Shema
Admins, logon directly into the Schema Master and run the CD2 of the Windows
R2 with /forestprep switch.
--
*************************************************
I hope that the information above helps you
Good Luck

Jorge Silva

MCSA + Exchange + MSCE
*************************************************
Post by HPPatel74
Hello,
Please bear with me on this as I am new to this community and fairly new to
Windows.
I have been asked to look into the best way of migrating data from our
London office to our DR site in Oxford. I have been looking at Windows
Server 2003 R2 and the DFS component that comes with it.
I have two servers in the Live AD that have been setup to start testing DFS.
But before I can do anything, I need to extent he schema on AD. According
to the documentation, I need to logon to the operations master server and run
Enterprise Admins Group and Schema Admins Group
[Status/Consequence]
Adprep has stopped without making changes
[User Action]
Verify the current logged on user is a member of Enterprise Admins group,
Schema Admins group and ROOT.LOCAL\Domain Admins group.
I am logged in as ROOT\Administrator and this user is a member of all the
groups mentioned above.
Could someone please help as I and the Windows Adminstrator Guru here at the
company are stumped.
Thank you
Hitesh
HPPatel74
2006-11-20 18:18:02 UTC
Permalink
Hi Jorge

Thanks for getting back to me so quick. One more question I do have. How
do I find out which server is the Schema Master?
Post by Jorge Silva
Hi
That error generally means that in fact you're not member of the Shema
Admins, logon directly into the Schema Master and run the CD2 of the Windows
R2 with /forestprep switch.
--
*************************************************
I hope that the information above helps you
Good Luck
Jorge Silva
MCSA + Exchange + MSCE
*************************************************
Post by HPPatel74
Hello,
Please bear with me on this as I am new to this community and fairly new to
Windows.
I have been asked to look into the best way of migrating data from our
London office to our DR site in Oxford. I have been looking at Windows
Server 2003 R2 and the DFS component that comes with it.
I have two servers in the Live AD that have been setup to start testing DFS.
But before I can do anything, I need to extent he schema on AD. According
to the documentation, I need to logon to the operations master server and run
Enterprise Admins Group and Schema Admins Group
[Status/Consequence]
Adprep has stopped without making changes
[User Action]
Verify the current logged on user is a member of Enterprise Admins group,
Schema Admins group and ROOT.LOCAL\Domain Admins group.
I am logged in as ROOT\Administrator and this user is a member of all the
groups mentioned above.
Could someone please help as I and the Windows Adminstrator Guru here at the
company are stumped.
Thank you
Hitesh
Jorge Silva
2006-11-20 18:51:35 UTC
Permalink
several ways, for example running from cmd
netdom query fsmo
will bring all FSMO
--
*************************************************
I hope that the information above helps you
Good Luck

Jorge Silva

MCSA + Exchange + MSCE
*************************************************
Post by HPPatel74
Hi Jorge
Thanks for getting back to me so quick. One more question I do have. How
do I find out which server is the Schema Master?
Post by Jorge Silva
Hi
That error generally means that in fact you're not member of the Shema
Admins, logon directly into the Schema Master and run the CD2 of the Windows
R2 with /forestprep switch.
--
*************************************************
I hope that the information above helps you
Good Luck
Jorge Silva
MCSA + Exchange + MSCE
*************************************************
Post by HPPatel74
Hello,
Please bear with me on this as I am new to this community and fairly
new
to
Windows.
I have been asked to look into the best way of migrating data from our
London office to our DR site in Oxford. I have been looking at Windows
Server 2003 R2 and the DFS component that comes with it.
I have two servers in the Live AD that have been setup to start testing DFS.
But before I can do anything, I need to extent he schema on AD.
According
to the documentation, I need to logon to the operations master server
and
run
Enterprise Admins Group and Schema Admins Group
[Status/Consequence]
Adprep has stopped without making changes
[User Action]
Verify the current logged on user is a member of Enterprise Admins group,
Schema Admins group and ROOT.LOCAL\Domain Admins group.
I am logged in as ROOT\Administrator and this user is a member of all the
groups mentioned above.
Could someone please help as I and the Windows Adminstrator Guru here
at
the
company are stumped.
Thank you
Hitesh
howellrj
2006-11-20 18:56:02 UTC
Permalink
Open a command prompt and type "net dom query fsmo"

This will list all your fsmo role holders
Post by HPPatel74
Hi Jorge
Thanks for getting back to me so quick. One more question I do have. How
do I find out which server is the Schema Master?
Post by Jorge Silva
Hi
That error generally means that in fact you're not member of the Shema
Admins, logon directly into the Schema Master and run the CD2 of the Windows
R2 with /forestprep switch.
--
*************************************************
I hope that the information above helps you
Good Luck
Jorge Silva
MCSA + Exchange + MSCE
*************************************************
Post by HPPatel74
Hello,
Please bear with me on this as I am new to this community and fairly new to
Windows.
I have been asked to look into the best way of migrating data from our
London office to our DR site in Oxford. I have been looking at Windows
Server 2003 R2 and the DFS component that comes with it.
I have two servers in the Live AD that have been setup to start testing DFS.
But before I can do anything, I need to extent he schema on AD. According
to the documentation, I need to logon to the operations master server and run
Enterprise Admins Group and Schema Admins Group
[Status/Consequence]
Adprep has stopped without making changes
[User Action]
Verify the current logged on user is a member of Enterprise Admins group,
Schema Admins group and ROOT.LOCAL\Domain Admins group.
I am logged in as ROOT\Administrator and this user is a member of all the
groups mentioned above.
Could someone please help as I and the Windows Adminstrator Guru here at the
company are stumped.
Thank you
Hitesh
Paul Williams [MVP]
2006-11-20 21:47:35 UTC
Permalink
NETDOM is one word. So make sure you type:

NETDOM QUERY FSMO.


For more info. on locating OM roles, see:
-- http://www.msresource.net/content/view/47/47/
--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net
howellrj
2006-11-20 19:25:01 UTC
Permalink
You need to register the schema console, at a command prompt type regsvr32
schmmgmt.dll. Then open a MMC and add the schema console. Once this is open
add your Enterprise Admin account. Log off, Log on and then try the Adprep.

Also make sure your account is a member of the Root.local domain admins as
well, I missed this one as I though enterprise admins was enough
Post by HPPatel74
Hello,
Please bear with me on this as I am new to this community and fairly new to
Windows.
I have been asked to look into the best way of migrating data from our
London office to our DR site in Oxford. I have been looking at Windows
Server 2003 R2 and the DFS component that comes with it.
I have two servers in the Live AD that have been setup to start testing DFS.
But before I can do anything, I need to extent he schema on AD. According
to the documentation, I need to logon to the operations master server and run
Enterprise Admins Group and Schema Admins Group
[Status/Consequence]
Adprep has stopped without making changes
[User Action]
Verify the current logged on user is a member of Enterprise Admins group,
Schema Admins group and ROOT.LOCAL\Domain Admins group.
I am logged in as ROOT\Administrator and this user is a member of all the
groups mentioned above.
Could someone please help as I and the Windows Adminstrator Guru here at the
company are stumped.
Thank you
Hitesh
HPPatel74
2006-11-21 13:32:02 UTC
Permalink
When you say add your enterprise admin acount. Do you mean the permissions?
Post by howellrj
You need to register the schema console, at a command prompt type regsvr32
schmmgmt.dll. Then open a MMC and add the schema console. Once this is open
add your Enterprise Admin account. Log off, Log on and then try the Adprep.
Also make sure your account is a member of the Root.local domain admins as
well, I missed this one as I though enterprise admins was enough
Post by HPPatel74
Hello,
Please bear with me on this as I am new to this community and fairly new to
Windows.
I have been asked to look into the best way of migrating data from our
London office to our DR site in Oxford. I have been looking at Windows
Server 2003 R2 and the DFS component that comes with it.
I have two servers in the Live AD that have been setup to start testing DFS.
But before I can do anything, I need to extent he schema on AD. According
to the documentation, I need to logon to the operations master server and run
Enterprise Admins Group and Schema Admins Group
[Status/Consequence]
Adprep has stopped without making changes
[User Action]
Verify the current logged on user is a member of Enterprise Admins group,
Schema Admins group and ROOT.LOCAL\Domain Admins group.
I am logged in as ROOT\Administrator and this user is a member of all the
groups mentioned above.
Could someone please help as I and the Windows Adminstrator Guru here at the
company are stumped.
Thank you
Hitesh
HPPatel74
2006-11-22 12:51:02 UTC
Permalink
Sorted this out. For some reason, I had to log off and back on again and the
ADPREP worked.

Thanks for all your information and help.

Regards

H
Post by HPPatel74
When you say add your enterprise admin acount. Do you mean the permissions?
Post by howellrj
You need to register the schema console, at a command prompt type regsvr32
schmmgmt.dll. Then open a MMC and add the schema console. Once this is open
add your Enterprise Admin account. Log off, Log on and then try the Adprep.
Also make sure your account is a member of the Root.local domain admins as
well, I missed this one as I though enterprise admins was enough
Post by HPPatel74
Hello,
Please bear with me on this as I am new to this community and fairly new to
Windows.
I have been asked to look into the best way of migrating data from our
London office to our DR site in Oxford. I have been looking at Windows
Server 2003 R2 and the DFS component that comes with it.
I have two servers in the Live AD that have been setup to start testing DFS.
But before I can do anything, I need to extent he schema on AD. According
to the documentation, I need to logon to the operations master server and run
Enterprise Admins Group and Schema Admins Group
[Status/Consequence]
Adprep has stopped without making changes
[User Action]
Verify the current logged on user is a member of Enterprise Admins group,
Schema Admins group and ROOT.LOCAL\Domain Admins group.
I am logged in as ROOT\Administrator and this user is a member of all the
groups mentioned above.
Could someone please help as I and the Windows Adminstrator Guru here at the
company are stumped.
Thank you
Hitesh
Paul Williams [MVP]
2006-11-22 20:20:49 UTC
Permalink
Yes, if you change your group membership you must logoff and on again to
build your new token.
--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net
Paul Williams [MVP]
2006-11-22 20:23:03 UTC
Permalink
You need to add yourself to both the Enterprise Admins and Schema Admins to
modify the schema. These are groups, not permissions. The necessary
permissions are granted to those groups, hence the reason you need to be a
member of those groups.
--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net
Loading...