ActiveDirectory domain service wizard: Prerequisites check for domain controller upgrade fails

Question

I want to test my software's SSO, so I am trying to configure ActiveDirectory on Windows Server 2012, following this tutorial.

At "prerequisites step", the window is supposed to look like:

enter image description here

but unfortunately I get an error:

enter image description here

Sorry for the Japanese, it says:

x The prerequisites check for the domain controller upgrade failed.
   The certificate server is installed.
i The prerequisites check is over.
x One of the above failed. Please correct and retry.

It seems that ActiveDirectory is already installed, but not configured.

Is there another way to enter the forest/domain name details, apart from this wizard?
Or should I uninstall ActiveDirectory, then restart the tutorial?

score 9 · Accepted Answer · edited Jul 18 '18 at 14:56

9

If you have already added the Active Directory Certificate Services before promoting it to a Domain Controller, remove the Certificate Services role, and then add the AD DS role again.

If the "Add Roles and Features" wizard does not allow you to remove Active Directory Certificate Services" (checkbox is greyed out), then you can remove it using the following PowerShell command:

Remove-WindowsFeature -Name AD-Certificate

See also: https://serverfault.com/a/717841/239616

edited Jul 18 '18 at 14:56

Florian Winter

214
1
2
10

answered Feb 26 '13 at 06:48

Mathias R. Jessen

25,161
4
63
95

Here is my understanding of your answer, is it correct? 1) Remove AD CS, 2) Promote to domain server, 3) Add AD CS – Nicolas Raoul Feb 26 '13 at 08:13
Exactly! Remove ADCS role, add ADDS role, add ADCS role again – Mathias R. Jessen Feb 26 '13 at 10:12

score 0 · Answer 2 · edited Jul 18 '16 at 08:49

0

The removal of certificates worked in my case too for clearing off the pre-requisite failure. I'm pasting a powershell command in case the GUI does not work

PS C:\WINDOWS\system32> Remove-WindowsFeature -Name AD-Certificate

edited Jul 18 '16 at 08:49

BE77Y

2,667
3
18
23

answered Jul 18 '16 at 07:04

Pompina Singh

1
1

score 0 · Answer 3 · answered Nov 16 '19 at 22:57

I really like the answer by Mathias R. Jessen.

Remove-WindowsFeature -Name AD-Certificate

as a PowerShell command; however, if the option Network Device Enrollment Service is already installed, so the above command will be not enough before uninstalling this feature:

PS C:\> Uninstall-AdcsNetworkDeviceEnrollmentService -Force

Now, retry Mathias's solution and would work now ;-)

ActiveDirectory domain service wizard: Prerequisites check for domain controller upgrade fails

3 Answers3