none
How to troubleshoot ADPREP? RRS feed

  • Question

  •  

    My DC is Windows Server 2003 R2, I've copied the ADPREP folder from the W2K8 DVD and run the ADPREP /FORESTPREP command from that folder. I've checked it is the schema master. DCDIAG says its running OK.

     

    Nothing happens.

    The cursor sits on the next line until I press RETURN and then the command prompt returns. A new empty ADPREP.LOG file has been created. Event logs contain nothing.

     

    How do I trouble shoot this? It seems ADPREP is waiting for something that never happens. I've left it for several hours with no result. The demo I've seen more than once prints dots as it progresses. I don't get even one dot after 3 hours.

    Monday, March 31, 2008 1:36 AM

Answers

  • Hi Mark,

     

    I have received your screen-shot and MPS reports. MPS reports indicates everything on the Windows Server 2003 domain controller that holds the Schema Master role works well.

     

    1.    First of all, please check whether the Novell Client for Windows is installed on Windows Server 2003 domain controller. If yes, try to TCP/IP to the top of the binding order in "Network Connections--->Advanced--->Advanced Settings…--->Local Area Connection--->Client for Microsoft Networks".

     

    2.    Typically when running 'adprep.exe /forestprep', a ADPREP WARNING will be displayed immediately. The 'adprep.exe.mui'  contains the language-specific messages that APPREP uses and is located in the ADPREP language folder (e.g. EN-US, de-DE, fr-FR). While running, ADPREP reads the locale of the server it is running on and tries to find the locale path in ADPREP folder. If the server OS is EN-US, the "adprep.exe.mui" will be searched in the Sub-Folder "EN-US" of installation directory of ADPREP.

     

    I'd like to know whether the proper 'adprep.exe.mui'  file exists in the 'EN-US' folder. If you are not sure whether it is corrupted or not, check how it works if replace with a new one.

     

    3.    Try to remove all unnecessary network protocols and boot to safe mode with network to test how it works.

     

    The error logged you found in DCPROMOUI.log is interesting. I will keep focus on this issue.

     

    Hope it will helps.

     

    Tuesday, April 8, 2008 10:37 AM
    Moderator
  • I can confirm Novell client isn't installed.

     

    The en-us subfolder weas missing. Rerunning now gives messages telling me it all worked OK.

     

    Can confirm schema version is correct from DCPROMO dfsr log:

     

    20080409 09:57:51.059  812 SYSM   370 Migration:Tongue TiedysvolMigrationTask:Tongue Tiedtep [MIG] Entering SYSVOL Migration task
    20080409 09:57:51.059  812 SYSM  3868 Migration:Tongue TiedysVolMigration::Connect [MIG] Trying to connect to Local or any writable Dc AD
    20080409 09:57:51.059  812 CFAD   317 Config::AdConnection::Connect Binding to dcAddr:\\10.0.20.11 dcDnsName:\\TURSAICT01.TURSA.local
    20080409 09:57:51.059  812 CFAD   149 Config::AdConnection::BindToAd Trying to connect. hostName:TURSAICT01.TURSA.local
    20080409 09:57:51.074  812 CFAD   168 Config::AdConnection::BindToAd Bound. hostName:TURSAICT01.TURSA.local
    20080409 09:57:51.074  812 CFAD   205 Config::AdConnection::BindToDc Try to bind. hostName:\\TURSAICT01.TURSA.local domainName:<null>
    20080409 09:57:51.074  812 CFAD   215 Config::AdConnection::BindToDc Bound. hostName:\\TURSAICT01.TURSA.local domainName:<null>
    20080409 09:57:51.074  812 CFAD  7697 Config::AdConfig::CheckSchemaVersion DMD object:CN=Schema,CN=Configuration,DC=TURSA,DC=local, objectVersion:44

    Reran DCPROMO and it worked!

     

    I was fiddling with firewall rules last night, I might have opened something up to ebable this. I was getting packets filtered out from LAN devices that I thought shoudl not be blocked. Also enabled remote management.

     

    Thanks for you help.

     

     

    Wednesday, April 9, 2008 12:39 AM

All replies

  • Happy news!

     

    Typing C on the blank line prompt from the adprep command continues the utility and updates the schema. Can't find any reference anywhere to this, just a lucky guess.

     

    But sadly, the DCPROMO in W2K8 still tells me the forest isn't preped. I've redone the ADPREP and just got a bunch of dots, so it thinks it's already done now.

     

    So how to troubleshoot ADPREP question remains....

     

    W2K8 machine is using the DC that ADPREP ran on as its DNS. Why does it not hink the forest is updated?

     

    Tuesday, April 1, 2008 2:57 AM
  • Hello,

     

    First, please ensure the ADPREP folder form Windows Server 2008 media is integrated and can be executed normally. You can try to run ADPREP /FORESTPREP on a non-DC server or workstation. Check how it works.

     

    To give a more clear understand of the issue that you have encountered, could you please send me the Directory Service MPS report and a screen shot when the 'ADPREP /FORESTPREP' hangs to me?

     

     

    About MPS report:

    -----------------------

    Microsoft Product Support's Reporting to get more information about our computer situation. This tool facilitates the gathering of critical system and logging information used in troubleshooting support issues. After this tool stops automatically, navigate to the folder " %SYSTEMROOT%\MPSReports\DirSvc\Logs " and please send all these files back to me.

     

    You can get this tool from the link:

     

    Microsoft Product Support's Reporting Tools (MPSRPT_DirSvc.EXE)

    http://www.microsoft.com/downloads/details.aspx?FamilyID=CEBF3C7C-7CA5-408F-88B7-F9C79B7306C0&displaylang=en

     

    You can also get more information about how to use it in the same page (the readme.txt)

    -----------------------

     

     

    Please send the MPS report CAB file and screen shot file to tfwst@microsoft.com

     

    Note:

     

    a. Please include the following three lines for this issue in the email body:

     

    How to troubleshoot ADPREP?

    http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=3088032&SiteID=17

    Miles Li - MSFT

     

    b. We will continue to discuss the issue here in the forum and will NOT reply via emails.

     

    c. Pease post a quick note in the current thread to inform me after sending the email.

     

    Thanks.

     

    Tuesday, April 1, 2008 7:49 AM
    Moderator
  • I have sent the screen shot & DirSvc reports.

     

    Thanks for your help.

    Thursday, April 3, 2008 3:18 AM
  •  

    I have found an error in the W2K8 dcpromoui log:

     

    dcpromoui C44.F4C 0633 15:00:46.206             Enter CLdapOperationConnect::Execute target=$(forestDnsName), options=0x40021
    dcpromoui C44.F4C 0634 15:01:01.222               Enter GetErrorMessage 8007054B
    dcpromoui C44.F4C 0635 15:01:01.222               _lastLdapError_ <- "1355"
    dcpromoui C44.F4C 0636 15:01:01.222               DsGetDcNameW(TURSA.local, 0x400c1040) failed, err=1355
    dcpromoui C44.F4C 0637 15:01:01.222               LDAP connect failed, continuing script execution
    dcpromoui C44.F4C 0638 15:01:01.222             Enter CLdapOperationIf::Execute
    dcpromoui C44.F4C 0639 15:01:01.222               Enter CLdapExpressionEqual::Compute v1=$(_lastLdapError_), v2=0
    dcpromoui C44.F4C 063A 15:01:01.222                 v1 -> "1355", v2 -> "0"
    dcpromoui C44.F4C 063B 15:01:01.222                 ==> false
    dcpromoui C44.F4C 063C 15:01:01.222               Condition == false
    dcpromoui C44.F4C 063D 15:01:01.222   ForestPrep was not done

    Is this LDAP error 1355 I'm looking at? What do I do about that?

    Tuesday, April 8, 2008 5:42 AM
  • Hi Mark,

     

    I have received your screen-shot and MPS reports. MPS reports indicates everything on the Windows Server 2003 domain controller that holds the Schema Master role works well.

     

    1.    First of all, please check whether the Novell Client for Windows is installed on Windows Server 2003 domain controller. If yes, try to TCP/IP to the top of the binding order in "Network Connections--->Advanced--->Advanced Settings…--->Local Area Connection--->Client for Microsoft Networks".

     

    2.    Typically when running 'adprep.exe /forestprep', a ADPREP WARNING will be displayed immediately. The 'adprep.exe.mui'  contains the language-specific messages that APPREP uses and is located in the ADPREP language folder (e.g. EN-US, de-DE, fr-FR). While running, ADPREP reads the locale of the server it is running on and tries to find the locale path in ADPREP folder. If the server OS is EN-US, the "adprep.exe.mui" will be searched in the Sub-Folder "EN-US" of installation directory of ADPREP.

     

    I'd like to know whether the proper 'adprep.exe.mui'  file exists in the 'EN-US' folder. If you are not sure whether it is corrupted or not, check how it works if replace with a new one.

     

    3.    Try to remove all unnecessary network protocols and boot to safe mode with network to test how it works.

     

    The error logged you found in DCPROMOUI.log is interesting. I will keep focus on this issue.

     

    Hope it will helps.

     

    Tuesday, April 8, 2008 10:37 AM
    Moderator
  • I can confirm Novell client isn't installed.

     

    The en-us subfolder weas missing. Rerunning now gives messages telling me it all worked OK.

     

    Can confirm schema version is correct from DCPROMO dfsr log:

     

    20080409 09:57:51.059  812 SYSM   370 Migration:Tongue TiedysvolMigrationTask:Tongue Tiedtep [MIG] Entering SYSVOL Migration task
    20080409 09:57:51.059  812 SYSM  3868 Migration:Tongue TiedysVolMigration::Connect [MIG] Trying to connect to Local or any writable Dc AD
    20080409 09:57:51.059  812 CFAD   317 Config::AdConnection::Connect Binding to dcAddr:\\10.0.20.11 dcDnsName:\\TURSAICT01.TURSA.local
    20080409 09:57:51.059  812 CFAD   149 Config::AdConnection::BindToAd Trying to connect. hostName:TURSAICT01.TURSA.local
    20080409 09:57:51.074  812 CFAD   168 Config::AdConnection::BindToAd Bound. hostName:TURSAICT01.TURSA.local
    20080409 09:57:51.074  812 CFAD   205 Config::AdConnection::BindToDc Try to bind. hostName:\\TURSAICT01.TURSA.local domainName:<null>
    20080409 09:57:51.074  812 CFAD   215 Config::AdConnection::BindToDc Bound. hostName:\\TURSAICT01.TURSA.local domainName:<null>
    20080409 09:57:51.074  812 CFAD  7697 Config::AdConfig::CheckSchemaVersion DMD object:CN=Schema,CN=Configuration,DC=TURSA,DC=local, objectVersion:44

    Reran DCPROMO and it worked!

     

    I was fiddling with firewall rules last night, I might have opened something up to ebable this. I was getting packets filtered out from LAN devices that I thought shoudl not be blocked. Also enabled remote management.

     

    Thanks for you help.

     

     

    Wednesday, April 9, 2008 12:39 AM
  • I have this problem. The adprep command completed sucessfully on the win 2003 domain. When running dcpromo on the win 2008 machine, it connects to the forest, and then pops up an error that says: (taken from the log file)

    dcpromoui F70.C8C 0314 12:23:30.622           Condition == true
    dcpromoui F70.C8C 0315 12:23:30.622           Enter CLdapOperationBlock::Execute
    dcpromoui F70.C8C 0316 12:23:30.622             Enter CLdapOperationConnect::Execute target=$(forestDnsName), options=0x40021
    dcpromoui F70.C8C 0317 12:23:31.231               Enter GetErrorMessage 8007054B
    dcpromoui F70.C8C 0318 12:23:31.231               _lastLdapError_ <- "1355"
    dcpromoui F70.C8C 0319 12:23:31.231               DsGetDcNameW(Synoia.local, 0x400c1040) failed, err=1355
    dcpromoui F70.C8C 031A 12:23:31.231               LDAP connect failed, continuing script execution
    dcpromoui F70.C8C 031B 12:23:31.231             Enter CLdapOperationIf::Execute
    dcpromoui F70.C8C 031C 12:23:31.231               Enter CLdapExpressionEqual::Compute v1=$(_lastLdapError_), v2=0
    dcpromoui F70.C8C 031D 12:23:31.231                 v1 -> "1355", v2 -> "0"
    dcpromoui F70.C8C 031E 12:23:31.231                 ==> false
    dcpromoui F70.C8C 031F 12:23:31.231               Condition == false
    dcpromoui F70.C8C 0320 12:23:31.231   Enter State::GetOperation REPLICA
    dcpromoui F70.C8C 0321 12:23:31.231   DomainPrep was not done
    dcpromoui F70.3E8 0322 12:23:31.247             Enter Popup::Error
    dcpromoui F70.3E8 0323 12:23:31.247               MessageBox: Active Directory Domain Services Installation Wizard : To install a domain controller into this Active Directory domain, you must first prepare the domain using "adprep /domainprep". The Adprep utility is available on the Windows Server 2008 installation media in the \sources\adprep folder.

    What to do?
    DH
    Monday, March 2, 2009 8:26 PM
  • Okay, after reviewing the same problem in our environment, I discovered that if you complete the default configuration/setup steps for Windows Server 2008, it enables the firewall. It appears that DCPROMO does not properly open the ports in the Windows firewall. A quick disable of the Windows Firewall enabled DCPromo to complete without any problems.
    Thursday, July 2, 2009 11:39 PM
  • Before disabling the firewall on your network. Please, whoever reads this, make sure you are behind a strong and secure firewall. Make sure you have all your data on a secure and removed backup. Make sure your Anti-Virus is installed, configured and up to date.

    I am surprised that anyone would suggest just disabling the firewall on the FSMO domain controller. There would be nothing more painful to lose from an AD point of view. I would suggest checking the logs for the firewall and opening the required ports only. IF you are unsure of which ports hav a look at: http://support.microsoft.com/default.aspx/kb/179442 which lists the minimal port requirements for Active Directory since its inception.
    Wednesday, August 12, 2009 5:37 AM
  • Happy news!

     

    Typing C on the blank line prompt from the adprep command continues the utility and updates the schema. Can't find any reference anywhere to this, just a lucky guess.

     

    But sadly, the DCPROMO in W2K8 still tells me the forest isn't preped. I've redone the ADPREP and just got a bunch of dots, so it thinks it's already done now.

     

    So how to troubleshoot ADPREP question remains....

     

    W2K8 machine is using the DC that ADPREP ran on as its DNS. Why does it not hink the forest is updated?

     


    Thanks, this trick worked with me.

    But then I need to run adprep.exe /domainprep and that command is failing but I can not see the error in the
    screen because it print nothing in the screen and the log file is empty

    Oliver

    http://tinymailto.com/oliversl <-- my email after a captcha
    Wednesday, August 12, 2009 7:53 PM
  • If adprep /? does not print anything, rename the folder adprep\en-US to the locale you are in.

    For example:
    Win2k3 Spanish, rename to: es-es
    Win2k3 English, rename to: en-US

    If you run adprep /forestprep without the folder rename, adprep runs but it does not upgrade your
    domain/forest schema

    HTH
    Oliver
    http://tinymailto.com/oliversl <-- my email after a captcha
    Wednesday, August 12, 2009 10:56 PM
  • I have done all of this.  Firewall is disabled on all domain controllers including the future Server 2008 R2 machine.  I am still having this issue.

    Can anyone help?
    Sunday, December 13, 2009 4:17 AM
  • I'm experiencing the same issues as mentioned above, having ran forest&domainprep still getting told to do so by dcpromo at the 2008 server. When running forest, domain and rodc-prep, they all reported having executed successfully. I've also tried disabling the firewall and running dcpromo to no avail.

    If additional info is needed please let me know and I'll provide it asap.

    The assumed interesting part from DcPromoUi.log follows:
    dcpromoui ADC.BF4 0322 15:59:29.122           Enter CLdapOperationBlock::Execute
    dcpromoui ADC.BF4 0323 15:59:29.122             Enter CLdapOperationConnect::Execute target=$(forestDnsName), options=0x40021
    dcpromoui ADC.BF4 0324 15:59:32.779               Enter GetErrorMessage 8007054B
    dcpromoui ADC.BF4 0325 15:59:32.779               _lastLdapError_ <- "1355"
    dcpromoui ADC.BF4 0326 15:59:32.779               DsGetDcNameW(zenitelcss.com, 0x400c1040) failed, err=1355
    dcpromoui ADC.BF4 0327 15:59:32.779               LDAP connect failed, continuing script execution
    dcpromoui ADC.BF4 0328 15:59:32.779             Enter CLdapOperationIf::Execute
    dcpromoui ADC.BF4 0329 15:59:32.779               Enter CLdapExpressionEqual::Compute v1=$(_lastLdapError_), v2=0
    dcpromoui ADC.BF4 032A 15:59:32.779                 v1 -> "1355", v2 -> "0"
    dcpromoui ADC.BF4 032B 15:59:32.779                 ==> false
    dcpromoui ADC.BF4 032C 15:59:32.779               Condition == false
    dcpromoui ADC.BF4 032D 15:59:32.779   ForestPrep was not done
    

    Wednesday, March 3, 2010 3:22 PM
  • To get the schema up to level 47, run the adprep32 from the Windows 2008 R2 media.

    After that you should be able run DCPROMO on your 2008 R2 server

    Hope this helps....

    • Proposed as answer by kurt.axline Thursday, February 9, 2012 11:03 PM
    Thursday, April 29, 2010 8:23 AM
  • I hade the same problem. I realized ( after some searching, including here ) that the adprep.exe.mui was not in the same folder ad adprep.exe since my media was a multilanguage DVD. I copied it up to the same folder and it worked.

    Hope this helps someone.

     

    //sRc

    • Proposed as answer by CS dot org Monday, July 23, 2012 12:56 PM
    Wednesday, October 19, 2011 7:05 AM
  • make sure you are using the right language ; had this issue when running adprep on an english version, while the new 2008 was running another language. From that language I used the adprep folder, which was causing adprep to just sit silent. Would have been nice if it told me i had to run adprep with the same language as the system running it. 
    Monday, July 23, 2012 12:59 PM
  • This fixed the issue for me as well. Thank you!
    Tuesday, November 13, 2012 5:22 PM
  • This is by far not the most recent forum item for adprep.   Using Business Server Essentials 2016, and after attempting an upgrade, there was a problem with adprep not launching.   The first clue was that the adprep.exe required a .\adprep.exe rather than just a simple call...

    It turned out that the firewall must be turned off for this application to run.

    This may come in handy to someone in the future.  Once the firewall was off, the adprep /forestprep ran immediately and without issue.


    R, J

    Sunday, May 5, 2019 12:57 AM