Hi all, Rob Newhouse here and today I am talking about upgrading your domain to Windows Server 2008 and what you may see in the process, plus a couple of tips to make your transition a smooth one.
This post will show the proper use of ADPREP and what to expect when you are running it.
ADPREP is broken down into four stages with Windows Server 2008, instead of the two that most of you may be familiar with when you upgraded to Windows Server 2003. The four steps include Forest Preparation, Domain Preparation, Group Policy Preparation and Read-Only Domain Controller (RODC) Preparation (which you have to run if you want to add a RODC to your environment). You will use ADPREP.exe to perform all of these steps.
Preparing to Run ADPREP /forestprep
ADPREP /forestprep makes modifications to the schema. In order to successfully run it you should:
So let’s go through all these preparatory steps in detail
Running ADPREP /forestprep
Preparing to Run ADPREP /domainprep
After a successful completion of ADPREP /forestprep , you will be ready to run ADPREP /domainprep . ADPREP /domainprep must be run against each domain that you wish to upgrade.
In order to run ADPREP /domainprep you should:
Note: Upgrading from Windows 2000 is not supported. For more information see Guide for Upgrading to Windows 2008 .
Running ADPREP /Domainprep
For a better understanding of what will occur running the ADPREP /Domainprep command, I have referenced the KB article Enhancements to ADPREP.exe in Windows Server 2003 Service Pack 1(Q324392) . The More Information section describes the functionality post-Windows 2003 SP1, including the Windows 2008 ADPREP.
Preparing to Run ADPREP /domainprep /gpprep
ADPREP /domainPrep /gpprep only adds the inheritable access control entries on Group Policy objects in the Sysvol share. If you run it prior to running adprep /domainprep it will run both functions, first the domain prep and then the GP prep.
In order to run ADPREP /domainprep /gpprep you should:
Note Upgrading from Windows 2000 is not supported. For more information see Guide for Upgrading to Windows 2008 .
Running ADPREP /domainprep /gpprep
ADPREP /domainprep /gpprep without running adprep /domainprep first.
ADPREP /domainprep /gpprep after running adprep /domainprep
Preparing to Run ADPREP /rodcprep
RODC’s (Read-Only Domain Controllers) are a cool new feature added in Windows Server 2008. The benefits of a RODC in certain domain configurations are well worth the effort of learning and implementing them. For more information on the benefits, see RODC Features on TechNet. If you intend to introduce them into your environment you will have to run ADPREP /rodcprep . This command prepares partitions in Active Directory so RODC’s can be used by adding security to the ForestDNS , DomainDNS , and Domain partitions.
In order to run ADPREP /domainprep /rodcprep you should:
Note ADPREP /rodcprep will let you run without first running ADPREP /forestprep and ADPREP /domainprep , however it is not recommended.
Running ADPREP /rodcprep
That concludes this post on running ADPREP . Running through the steps in order should eliminate many of the problems you might otherwise encounter.
- Rob Newhouse
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.