Forum Discussion
John Cogan
May 17, 2018Copper Contributor
Problem with adprep before in place upgrade of domain controller
I am trying to test an in place upgrade of a Server 2016 domain controller in my lab but I first need to update the AD schema, When I try to run adprep /forestprep from any on the last 3 builds I am...
- May 23, 2018
I was able to solve this by adding the root certificate to trusted root authorities. Right click schupgrade.cat (in the support\adprep folder) and click properties then go to the Digital Signatures tab. Click on the only signature listed and hit Details. Then hit View Certificate. Go to the Certification Path tab and hit the top certificate, it should have a red x on it and the status should say something about it not being trusted. Then View Certificate on this top cert, and click Install Certificate. Install to Local Machine, and specify to install into the Trusted Root Certificate Authorities store.
After that the cert should be trusted and adprep should work. If you close all the properties windows and reopen the red x should be gone and the signature valid.
Dillon Newell
May 23, 2018Copper Contributor
I was able to solve this by adding the root certificate to trusted root authorities. Right click schupgrade.cat (in the support\adprep folder) and click properties then go to the Digital Signatures tab. Click on the only signature listed and hit Details. Then hit View Certificate. Go to the Certification Path tab and hit the top certificate, it should have a red x on it and the status should say something about it not being trusted. Then View Certificate on this top cert, and click Install Certificate. Install to Local Machine, and specify to install into the Trusted Root Certificate Authorities store.
After that the cert should be trusted and adprep should work. If you close all the properties windows and reopen the red x should be gone and the signature valid.
- Greg KamerMay 31, 2018Copper Contributor
Awesome! Thanks Dillon! Well done!
- John CoganMay 23, 2018Copper Contributor
Thanks Dillon, that worked exactly as you described.