[2000] Tijdens AD-migratie 2000>2003 'onvoldoende rechten'*

[Verwijderd]

Ik ben hier momenteel in een testomgeving bezig met het migreren van enkele servers om zo ervaring op te doen welke later in bedrijfsomgevingen ook gebruikt moet gaan worden. Er zijn leuke howtos hier op tweakers te vinden hoe je een migratie doet, maar nog geen enkele howto met problemen, vandaar dit topic. Wat ik heb gedaan:

- Installatie NT4-Server
- AD geinstalleerd en gevuld, userscripts, mapindelingen
- Ghost gemaakt
- Upgrade naar Windows 2000 Server
- AD (succesvol) gemigreerd, alles werkt nog gewoon
- Ghost gemaakt
- Installatie Windows 2003 Server gestart en proberen te installeren

Ik heb dus wel punten waar ik op terug kan vallen, maar hier het probleem tijdens de installatie:





Als ik op Details klik bij de bovenste krijg ik deze tekst:

code:

Setup has detected that the Active Directory forest and domain need to be prepared for Windows Server 2003.

Description

The forest and domains are prepared by using the adprep command on the schema operations master and infrastructure operations master, respectively. 
This domain controller is the schema operations master. 
To prepare the Active Directory forest and domains, perform the following procedures in the order provided. 
To prepare an Active Directory forest for Windows Server 2003

To exit Setup, click Next, click Finish, and then click Exit. 
At a command prompt, change to the \I386 directory, and then type: 
adprep /forestprep
When prompted, type C, and then press ENTER to begin forest preparation, or type any other key, and then press ENTER to cancel. 

After the forest preparation data has replicated throughout the forest, prepare the domains for Windows Server 2003 as described in the following procedure. The domain preparation operation must be performed on the infrastructure operations master of each domain in the forest. 
To prepare an Active Directory domain for Windows Server 2003

On the domain controller holding the infrastructure operations master role, insert or connect to the installation media. 
If the splash screen opens, click Exit. 
At a command prompt, change to the \I386 directory on the installation media, and then type: 
adprep /domainprep 
If the command is run on a domain controller other than the current operations master, the name of the current operations master is displayed. In this case, repeat steps 1 through 3 on the current operations master.

After the domain preparation data has replicated throughout the domain, upgrade the domain controller by running Windows Server 2003 Setup (I386\winnt32.exe on the installation media). 
Notes

You cannot upgrade domain controllers in a forest without first preparing the forest and domains by using adprep on the schema and infrastructure operations masters, respectively. 
Depending on the replication schedule for your organization, the time it takes to propagate preparation data will vary.

Dus ik ga MS-DOS in, browse naar die map, voer uit wat me gezegd wordt... en krijg:

code:

ERROR: Failed to transfer the schema FSMO role: 52 (Unavailable).

If the error code is "Insufficient Rights", make sure you are logged in as a member of the schema admin group.
Adprep was unable to upgrade the schema on the schema master.
[Status/Consequence]
The schema will not be restored to its original state.
[User Action]
Check the Ldif.err log file in the C:\WINNT\system32\debug\adprep\logs\200501131
03540 directory for detailed information.

Adprep was unable to update forest-wide information.
[Status/Consequence]
Adprep requires access to existing forest-wide information from the schema master in order to complete this operation.
[User Action]
Check the log file, Adprep.log, in the C:\WINNT\system32\debug\adprep\logs\20050
113103540 directory for more information.

De errorlog:

code:

Adprep created the log file ADPrep.log under C:\WINNT\system32\debug\adprep\logs\20050113103540 directory.
Adprep copied file E:\I386\schema.ini from installation point to local machine under directory C:\WINNT. 
Adprep copied file E:\I386\sch14.ldf from installation point to local machine under directory C:\WINNT\system32. 
Adprep copied file E:\I386\sch15.ldf from installation point to local machine under directory C:\WINNT\system32. 
Adprep copied file E:\I386\sch16.ldf from installation point to local machine under directory C:\WINNT\system32. 
Adprep copied file E:\I386\sch17.ldf from installation point to local machine under directory C:\WINNT\system32. 
Adprep copied file E:\I386\sch18.ldf from installation point to local machine under directory C:\WINNT\system32. 
Adprep copied file E:\I386\sch19.ldf from installation point to local machine under directory C:\WINNT\system32. 
Adprep copied file E:\I386\sch20.ldf from installation point to local machine under directory C:\WINNT\system32. 
Adprep copied file E:\I386\sch21.ldf from installation point to local machine under directory C:\WINNT\system32. 
Adprep copied file E:\I386\sch22.ldf from installation point to local machine under directory C:\WINNT\system32. 
Adprep copied file E:\I386\sch23.ldf from installation point to local machine under directory C:\WINNT\system32. 
Adprep copied file E:\I386\sch24.ldf from installation point to local machine under directory C:\WINNT\system32. 
Adprep copied file E:\I386\sch25.ldf from installation point to local machine under directory C:\WINNT\system32. 
Adprep copied file E:\I386\sch26.ldf from installation point to local machine under directory C:\WINNT\system32. 
Adprep copied file E:\I386\sch27.ldf from installation point to local machine under directory C:\WINNT\system32. 
Adprep copied file E:\I386\sch28.ldf from installation point to local machine under directory C:\WINNT\system32. 
Adprep copied file E:\I386\sch29.ldf from installation point to local machine under directory C:\WINNT\system32. 
Adprep copied file E:\I386\sch30.ldf from installation point to local machine under directory C:\WINNT\system32. 
Adprep copied file E:\I386\dcpromo.cs_ from installation point to local machine under directory C:\WINNT\system32\debug\adprep\data. 
Adprep copied file E:\I386\409.cs_ from installation point to local machine under directory C:\WINNT\system32\debug\adprep\data. 
Adprep successfully made the LDAP connection to the local domain controller DC.
Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is (null).
LDAP API ldap_search_s() finished, return code is 0x0 
Adprep successfully retrieved information from the local directory service.
Adprep successfully initialized global variables.[Status/Consequence]Adprep is continuing.
ADPREP WARNING: Before running adprep, all Windows 2000 domain controllers in the forest should be upgraded to Windows 2000 Service Pack 1 (SP1) with QFE 265089, or to Windows 2000 SP2 (or later). QFE 265089 (included in Windows 2000 SP2 and later) is required to prevent potential domain controller corruption. For more information about preparing your forest and domain see KB article Q331161 at http://support.microsoft.com.[User Action] If ALL your existing Windows 2000 domain controllers meet this requirement, type C and then press ENTER to continue. Otherwise, type any other key and press ENTER to quit.
Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is CN=UID,CN=Schema,CN=Configuration,DC=win2ksdomain,DC=com.
LDAP API ldap_search_s() finished, return code is 0x20 
Adprep successfully determined whether Microsoft Windows Services for UNIX (SFU) is installed or not. If adprep detected SFU, adprep also verified that Microsoft hotfix Q293783 for SFU has been applied.
Adprep was unable to upgrade the schema on the schema master.[Status/Consequence]The schema will not be restored to its original state. [User Action] Check the Ldif.err log file in the C:\WINNT\system32\debug\adprep\logs\20050113103540 directory for detailed information.
Adprep was unable to update forest-wide information. [Status/Consequence]Adprep requires access to existing forest-wide information from the schema master in order to complete this operation.[User Action]Check the log file, Adprep.log, in the C:\WINNT\system32\debug\adprep\logs\20050113103540 directory for more information.

Een hele berg tekst met problemen Indien iemand ook maar enig idee heeft zou het fijn zijn om te replyen.. wordt zelf half gestoord hier

[Verwijderd]

Ik neem aan dat je het met een account doet die lid is van de groep "Schema Admins"?

[mutsje]

Standaard is een Enterprise administrator of Domain administrator geen lid van Schema Administrator groep welke jij nodig hebt dus je moet jezelf toevoegen aan de Schema Admins. Verder moet je /forrestprep uitvoeren zodat de AD op de hoogte is van de nieuwe items die in Windows Server 2003 zit.

[Verwijderd]

Verwijderd schreef op donderdag 13 januari 2005 @ 11:21:
Ik neem aan dat je het met een account doet die lid is van de groep "Schema Admins"?

Hier ben ik wel lid van. Ik ben ingelogd met Administrator op de servermachine en ben standaard al lid van de groep "Schema Admins".

[Verwijderd]

Misschien is dit nog een handige link?

Upgrading from Windows 2000 Server to Windows Server 2003