4

On running ADPrep passes all prerequisite, but fails in the last stage with the below error:

ADPrep execution failed --> System.ComponentModel.Win32Exception (0x80004005): A device attached to the system is not functioning.

ADPrep log says:

Adprep requires access to existing forest-wide information from the schema master in order to complete this operation.

I'm using the credentials of Enterprise Admin (schema admin too) couldn't find why it still throws access denied error.

EEAA
  • 109,363
  • 18
  • 175
  • 245
Nandan
  • 41
  • 1
  • 4
  • 1
    Well, where is your schema master? – HopelessN00b Apr 01 '14 at 04:32
  • Its Server 2008R2 which is GC in 2008R2 forest level. – Nandan Apr 01 '14 at 04:44
  • Check domain integrity - can be you lost the schema master at some point in the past and never bothered to reassign it? Was there another DC once, time ago? – TomTom Apr 01 '14 at 04:51
  • Yes there seems to be no problem there..For urgency after 2012R2 failed i have successfully installed another additional 2008R2 which is working fine that shows no problem in Schema or domain integrity. Problem is only with making 2012R2 an additional domain controller. Currently I have below DC's 1 2008R2 -GC,Schema Master the Default. 2.2008R2 -Additional DC (to be removed after 2012R2 come up) 3.2008 -RODC – Nandan Apr 01 '14 at 05:09
  • Can you try to run ADPrep on the schema master manually? (pleaes back it up first!) – MichelZ Apr 01 '14 at 06:42
  • I did tought of doing it but wasnt sure of changes it makes, taking backup is feasible now as its physical server and have some issues backing up, i have another additional DC in VM which already backed up, so should i stop replication run ADprep and see what happens ? – Nandan Apr 01 '14 at 06:53
  • Yes, I would do that. – MichelZ Apr 16 '14 at 14:33
  • I would try this weekend and share my experience. Need to understand as documented why ADPrep didnt automatically execute by 2012R2. Whats preventing it? – Nandan Apr 17 '14 at 07:42
  • What are you trying to do? /forestprep or /domainprep? /domainprep targets the infrastructure master, not the schema master. – MDMarra Apr 20 '14 at 16:34
  • i did adprep /forestprep because this where i got the error. – Nandan Apr 21 '14 at 10:05

4 Answers4

1

I'd comment on the original question so I can gather more info before posting my answer, but I don't have enough reputation yet as I'm new; go figure right :)

Anyway, I've ran into this twice for two different clients, one that was running SBS 2003 and another running 2008 R2 like you are. Both times had a few different tweaks but ultimately the solution turned out to be this:

  1. Remove the Active Directory Domain Services role from the 2012R2 server if you have already installed it.

  2. Reboot.

  3. I know you already said you had Enterprise and Schema rights, but make sure you're using an account with Enterprise, Schema, and Domain admin creds.

  4. Reboot the 2008 R2 DCs; yes all of them.

  5. Go to the 2012 R2 server and add the Active Directory Domain Services role and reboot after it successfully adds.

  6. Once logged back into the 2012 R2 server open Server Manager and on your post installation tasks you should see something similar to this screenshot: enter image description here

picture source: http://blogs.interfacett.com/wp-content/uploads/2013/02/015-promote-domain-controller-server-2012-add-a-child-domain-ad-ds.png

click on the link "Promote this server to a domain controller" (ADPrep (both forest and domain) will run automatically without manually needing to have you run it from a command prompt)

  1. Reboot the server once the dcpromo finishes.

If you are still having trouble please look for the value in ADSI Edit for your server entitled "ClaimIsValueSpaceRestricted"; it will either be true or false. Let me know if it's true or false and if it's greyed out or not. We can troubleshoot further should we need to, but steps 1-7 should resolve your issue.

Brad Bouchard
  • 2,527
  • 2
  • 13
  • 22
  • Brad, i have already done all your 6 steps. I get the exception in ADPrep and never completes. – Nandan Apr 21 '14 at 10:01
  • I don't know if you can, but can you add a 2012 (non-R2) server and add it as a DC without any issue? – Brad Bouchard Apr 21 '14 at 17:08
  • Also, what about the ADSI Edit value I referenced, did you look at it? – Brad Bouchard Apr 21 '14 at 17:09
  • 1
    I didn't yet chenked a non R2 server yet as it was not my intention to build 2012(non R2), though its not a bad idea. It did failed in step 6 with the same old error "DPrep execution failed --> System.ComponentModel.Win32Exception (0x80004005)" – Nandan Apr 22 '14 at 11:50
  • I coudnt find this attribute in ADSI edit! Sorry can u pls help where to look at? – Nandan Apr 22 '14 at 11:51
  • Nandan, give me a little bit today to finish up a project and I'll get back to you. Don't worry, we will get you a solution. – Brad Bouchard Apr 22 '14 at 16:07
  • In ADSI edit you will want to look for the server object (the 2012 R2 one) and then you will find an attribute entitled ClaimIsValueSpaceRestricted – Brad Bouchard Apr 23 '14 at 03:39
  • Its now solved. Actual there was problem with DC running 2k8R2 was not allowing DCOM connection from 2012R2 server. No fix did solved the issue, atlast installed another 2k8R2 AD server then installed 2012R2 which worked atlast! – Nandan May 13 '14 at 06:53
1

Here is what I did to get it to work

  • Setup a Windows server 2008
  • Promoted it to a domain controller.
  • I still got the ADPrep execution failed --> System.ComponentModel.Win32Exception (0x80004005): A device attached to the system is not functioning.
  • Some discussion I saw suggested access to the schema master was the issue and recommended moving the schema master to the 2008 server.
  • This wouldn’t work from the Schema Master MMC so I used ntdsutil.
  • Went back to my 2012 server and attempted to promote it again. When given a choice out what DC to replicate from, I pointed to the 2008 server. I got a lot further that time, but still failed. Ran it again and pointed it to the old SBS 2003 server and it worked.
masegaloeh
  • 18,236
  • 10
  • 57
  • 106
Porter Jervis
  • 11
  • 1
  • Due to licensing SBS 2003 servers must hold all 5 FSMO roles, which means it must be the "Schema Master". There is however a grace period to allow for migration. After that the SBS server shuts down every couple of hours or some other thing to make it useless in the environment. – BeowulfNode42 Jul 24 '15 at 04:53
1

I had the exact same error and the solution from https://community.spiceworks.com/topic/304023-adding-server-2012-as-dc-to-server-2003-domain-getting-adprep-error?page=2 solved it for me:

Check the Remote Registry service on the 2003 domain controller is configured as follows:

Startup type: Automatic

Service Status: Started

Security context: NT Authority\LocalService (In Log On tab of remote registry service)

Then promote the 2012 server again.

Community
  • 1
Silvan Wehrli
  • 11
  • 1
0

Starting the Remote Registry service on the 2003 server allowed me to promote my 2016 server to a domain controller. This solved the problem for me and I am forever grateful.

Dan Henthorn
  • 1