StevensNet.com

...Because someone's gotta tell the story...

Blogs

To return to the main Blog List, click Full Blog Listing.

Tags

Domain Controller
Technical
Windows

Upgrade of a Domain Controller: Part 1

Wednesday, September 16, 2015 in Technical Articles (Views: 1848)

In this post, I am going to describe the steps to upgrade, rather than install a fresh copy of a domain controller. The OS we will be upgrading is 2008 R2, and we'll be going to 2012 R2. Why upgrade you say? Well, Domain Controllers are nothing more than servers, but generally will store mission critical things on it (such as DHCP, maybe a CA), in addition to of course, the Active Directory, DNS, and hopefully a global catalog. Another reason to upgrade is that it is fairly victimless, meaning that rarely do issues reside in an upgrade, if reasonable measures are taken to insure its success.

So, what do we need to do first? There are the 3 commands that need to be run on the 2008 R2 domain controller, and note these only need to be run once, except for domainprep, if you have multiple domains in your forest.

1.Adprep /forestprep
This is to prepare the forest for the actual 2012 R2 schema. Whoever does this must be an Enterprise Admin in the forest.

2.Adprep /domainprep
This is to prepare the domain for the 2012 R2 schema. This user must be a domain admin of the domain this is running on.

3.Adprep /rodcprep
Optional, but readies the domain for a read only domain controller, if you desire one.


To do this:
  • Mount your server install media or copy the contents somewhere somehow to the system
  • Log into the 2008 R2 DC
  • Open a command prompt as admin
  • Navigate to the \support\adprep folder
  • Run adprep /forestprep, and you will need to type a "c" and enter to continue (not case sensitive). Output should be like the following:


ADPREP WARNING:
Before running adprep, all Windows Active Directory Domain Controllers in the forest must run Windows Server 2003 or later.

You are about to upgrade the schema for the Active Directory forest named 'lab.test', using the Active Directory domain controller (schema master) 'dctest.lab.test'.

This operation cannot be reversed after it completes.

[User Action]

If all domain controllers in the forest run Windows Server 2003 or later and you want to upgrade the schema, confirm by typing 'C' and then press ENTER to continue. Otherwise, type any other key and press ENTER to quit.

c

Current Schema Version is 47
Upgrading schema to version 69
Verifying file signature
Connecting to "dctest.lab.test"
Logging in as current user using SSPI
Importing directory from file "D:\support\adprep\sch48.ldf"

Loading entries.......................................

38 entries modified successfully.
The command has completed successfully

Verifying file signature
Connecting to "dctest.lab.test"

Logging in as current user using SSPI
Importing directory from file "D:\support\adprep\sch49.ldf"

Loading entries.................................................
86 entries modified successfully.
The command has completed successfully
Verifying file signature

Connecting to "dctest.lab.test"
Logging in as current user using SSPI
Importing directory from file "D:\support\adprep\sch50.ldf"

Loading entries..................................
119 entries modified successfully.
The command has completed successfully
Verifying file signature

Connecting to "dctest.lab.test"
Logging in as current user using SSPI
Importing directory from file "D:\support\adprep\sch51.ldf"

Loading entries..........................
144 entries modified successfully.
The command has completed successfully
Verifying file signature

Connecting to "dctest.lab.test"
Logging in as current user using SSPI
Importing directory from file "D:\support\adprep\sch52.ldf"
Loading entries..................................
177 entries modified successfully.
The command has completed successfully
Verifying file signature

Connecting to "dctest.lab.test"
Logging in as current user using SSPI
Importing directory from file "D:\support\adprep\sch53.ldf"
Loading entries...
179 entries modified successfully.
The command has completed successfully
Verifying file signature

Connecting to "dctest.lab.test"
Logging in as current user using SSPI
Importing directory from file "D:\support\adprep\sch54.ldf"
Loading entries....
182 entries modified successfully.
The command has completed successfully
Verifying file signature

Connecting to "dctest.lab.test"
Logging in as current user using SSPI
Importing directory from file "D:\support\adprep\sch55.ldf"
Loading entries....
185 entries modified successfully.
The command has completed successfully
Verifying file signature

Connecting to "dctest.lab.test"
Logging in as current user using SSPI
Importing directory from file "D:\support\adprep\sch56.ldf"
Loading entries....
188 entries modified successfully.
The command has completed successfully
Verifying file signature

Connecting to "dctest.lab.test"
Logging in as current user using SSPI
Importing directory from file "D:\support\adprep\sch57.ldf"
Loading entries.................
204 entries modified successfully.
The command has completed successfully
Verifying file signature

Connecting to "dctest.lab.test"
Logging in as current user using SSPI
Importing directory from file "D:\support\adprep\sch58.ldf"
Loading entries....
207 entries modified successfully.
The command has completed successfully
Verifying file signature

Connecting to "dctest.lab.test"
Logging in as current user using SSPI
Importing directory from file "D:\support\adprep\sch59.ldf"
Loading entries............................
234 entries modified successfully.
The command has completed successfully
Verifying file signature

Connecting to "dctest.lab.test"
Logging in as current user using SSPI
Importing directory from file "D:\support\adprep\sch60.ldf"
Loading entries............
245 entries modified successfully.
The command has completed successfully
Verifying file signature

Connecting to "dctest.lab.test"
Logging in as current user using SSPI
Importing directory from file "D:\support\adprep\sch61.ldf"
Loading entries......
250 entries modified successfully.
The command has completed successfully
Verifying file signature

Connecting to "dctest.lab.test"
Logging in as current user using SSPI
Importing directory from file "D:\support\adprep\sch62.ldf"
Loading entries......
255 entries modified successfully.
The command has completed successfully
Verifying file signature

Connecting to "dctest.lab.test"
Logging in as current user using SSPI
Importing directory from file "D:\support\adprep\sch63.ldf"
Loading entries......
260 entries modified successfully.
The command has completed successfully
Verifying file signature

Connecting to "dctest.lab.test"
Logging in as current user using SSPI
Importing directory from file "D:\support\adprep\sch64.ldf"
Loading entries.......
266 entries modified successfully.
The command has completed successfully
Verifying file signature

Connecting to "dctest.lab.test"
Logging in as current user using SSPI
Importing directory from file "D:\support\adprep\sch65.ldf"
Loading entries.......................
288 entries modified successfully.
The command has completed successfully
Verifying file signature

Connecting to "dctest.lab.test"
Logging in as current user using SSPI
Importing directory from file "D:\support\adprep\sch66.ldf"
Loading entries......
293 entries modified successfully.
The command has completed successfully
Verifying file signature

Connecting to "dctest.lab.test"
Logging in as current user using SSPI
Importing directory from file "D:\support\adprep\sch67.ldf"
Loading entries......
298 entries modified successfully.
The command has completed successfully
Verifying file signature

Connecting to "dctest.lab.test"
Logging in as current user using SSPI
Importing directory from file "D:\support\adprep\sch68.ldf"
Loading entries...............................
328 entries modified successfully.
The command has completed successfully
Verifying file signature

Connecting to "dctest.lab.test"
Logging in as current user using SSPI
Importing directory from file "D:\support\adprep\sch69.ldf"
Loading entries.....
332 entries modified successfully.
The command has completed successfully

Connecting to "dctest.lab.test"
Logging in as current user using SSPI
Importing directory from file "D:\support\adprep\PAS.ldf"
Loading entries....................
351 entries modified successfully.
The command has completed successfully

................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
..............

Adprep successfully updated the forest-wide information.

So, that was /forestprep, now for /domainprep. Since the Enterprise Admin is likely also a Domain Admin, usually both commands are run by the same person, and likely one after the other.

Output should look like the following:
Adprep successfully updated the domain-wide information.

Optionally, you can add rodcprep, in case you will install read only domain controllers.

This is how you prepare the forest, the next steps will be the actual OS upgrade. Part 2, coming soon.

 

Related Blogs You May Be Interested In:


To leave a comment, please log in and/or register.