RE: [ActiveDir] Windows 2003 setings

2005-04-22 Thread Grillenmeier, Guido
to check prep

ADPREP /FORESTPREP
cn=forest name 
cn=Configuration
cn=ForestUpdates
cn=windows2003update

ADPREP /DOMAINPREP
cn=domain name
cn=SYSTEM
cn=DomainUpdates
cn=Windows2003Update 


to check functional level, it's easiest to read rootDSE of a specific DC

/Guido

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom
Sent: Freitag, 22. April 2005 22:18
To: ActiveDir (E-mail)
Subject: [ActiveDir] Windows 2003 setings

I forgot, but where are the settings kept in AD  where  you can see if
forest/domain prep has been run and which domain/forest functional level
a domain/forest is on?
thanks
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] Windows 2003 setings

2005-04-22 Thread Kern, Tom
I have the windows2003update folder in both the config and domain NC, but its 
empty.
What does that mean?
Thanks



Grillenmeier, Guido wrote:
 to check prep
 
 ADPREP /FORESTPREP
 cn=forest name
   cn=Configuration
   cn=ForestUpdates
   cn=windows2003update
 
 ADPREP /DOMAINPREP
 cn=domain name
   cn=SYSTEM
   cn=DomainUpdates
   cn=Windows2003Update
 
 
 to check functional level, it's easiest to read rootDSE of a specific
 DC 
 
 /Guido
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom
 Sent: Freitag, 22. April 2005 22:18
 To: ActiveDir (E-mail)
 Subject: [ActiveDir] Windows 2003 setings
 
 I forgot, but where are the settings kept in AD  where  you can see if
 forest/domain prep has been run and which domain/forest functional
 level a domain/forest is on?
 thanks
 List info   : http://www.activedir.org/List.aspx
 List FAQ: http://www.activedir.org/ListFAQ.aspx
 List archive:
 http://www.mail-archive.com/activedir%40mail.activedir.org/
 List info   : http://www.activedir.org/List.aspx
 List FAQ: http://www.activedir.org/ListFAQ.aspx
 List archive:
 http://www.mail-archive.com/activedir%40mail.activedir.org/ 

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] Windows 2003 setings

2005-04-22 Thread Kern, Tom
Reading the rootDSE, I get -
1 domainFunctionality: 0; 
1 forestFunctionality: 0; 
1 domainControllerFunctionality: 2; 





Grillenmeier, Guido wrote:
 to check prep
 
 ADPREP /FORESTPREP
 cn=forest name
   cn=Configuration
   cn=ForestUpdates
   cn=windows2003update
 
 ADPREP /DOMAINPREP
 cn=domain name
   cn=SYSTEM
   cn=DomainUpdates
   cn=Windows2003Update
 
 
 to check functional level, it's easiest to read rootDSE of a specific
 DC 
 
 /Guido
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom
 Sent: Freitag, 22. April 2005 22:18
 To: ActiveDir (E-mail)
 Subject: [ActiveDir] Windows 2003 setings
 
 I forgot, but where are the settings kept in AD  where  you can see if
 forest/domain prep has been run and which domain/forest functional
 level a domain/forest is on?
 thanks
 List info   : http://www.activedir.org/List.aspx
 List FAQ: http://www.activedir.org/ListFAQ.aspx
 List archive:
 http://www.mail-archive.com/activedir%40mail.activedir.org/
 List info   : http://www.activedir.org/List.aspx
 List FAQ: http://www.activedir.org/ListFAQ.aspx
 List archive:
 http://www.mail-archive.com/activedir%40mail.activedir.org/ 

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] Windows 2003 setings

2005-04-22 Thread Grillenmeier, Guido
that's a perfectly valid state: this is a Windows 2003 DC (DC
functionality = 2) in a domain that's still running at Win2000 mixed or
native functional level (0) and a forest that's running at Win2000
functional level (0).  Naturally, the DC won't turn on certain features
(e.g. LVR) prior to the other settings being switched to a higher level

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom
Sent: Freitag, 22. April 2005 22:54
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Windows 2003 setings

Reading the rootDSE, I get -
1 domainFunctionality: 0; 
1 forestFunctionality: 0; 
1 domainControllerFunctionality: 2; 





Grillenmeier, Guido wrote:
 to check prep
 
 ADPREP /FORESTPREP
 cn=forest name
   cn=Configuration
   cn=ForestUpdates
   cn=windows2003update
 
 ADPREP /DOMAINPREP
 cn=domain name
   cn=SYSTEM
   cn=DomainUpdates
   cn=Windows2003Update
 
 
 to check functional level, it's easiest to read rootDSE of a specific
 DC 
 
 /Guido
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom
 Sent: Freitag, 22. April 2005 22:18
 To: ActiveDir (E-mail)
 Subject: [ActiveDir] Windows 2003 setings
 
 I forgot, but where are the settings kept in AD  where  you can see if
 forest/domain prep has been run and which domain/forest functional
 level a domain/forest is on?
 thanks
 List info   : http://www.activedir.org/List.aspx
 List FAQ: http://www.activedir.org/ListFAQ.aspx
 List archive:
 http://www.mail-archive.com/activedir%40mail.activedir.org/
 List info   : http://www.activedir.org/List.aspx
 List FAQ: http://www.activedir.org/ListFAQ.aspx
 List archive:
 http://www.mail-archive.com/activedir%40mail.activedir.org/ 

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] Windows 2003 setings

2005-04-22 Thread Eric Fleischman
I would point out.the presence of the objects Guido cited does not
say that forest/domain prep has been run, it says it completed
successfully. If you ran forest/domain prep and it failed, that object
would not be present, but instead you'd only have the operational GUIDs
for each of the operations that succeeded (in the correct location for
the prep run of course).

It's important to note the subtle difference, as you might not see that
there but still be trying to run forest/domain prep. If so, that means
it is failing, and we'd want to pick up the adprep logs to see what the
nature of the failure is.

Finally, I'd point out that running adprep from SP1 is better than from
RTM. We added a lot of verbiage to error conditions to clearly spell out
common error conditions which PSS saw in the field. So if you are
prepping, SP1 is the best bet, as failure will be better spelled out
should you hit any.

~Eric



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier,
Guido
Sent: Friday, April 22, 2005 2:06 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Windows 2003 setings

yes, it doesn't have child objects, but it's not empty - it has some
attributes determining it's status = the revision attribute is stamped
when all tasks have been completed successfully.  What's this set to in
your environment

you'll get more details as to what was performed by checking the
Operations container at the same level as the Windows2003update
container = this should contain an entry for every operations which was
performed during the upgrade (which are 37 for the forestprep and 50 for
the domain prep)

and the fact that the objects exist confirms that ADPREP /forestprep and
/domainprep was executed in the respective forest/domain (and that the
update replicated to other DCs).


also check out this KB for more details:
http://support.microsoft.com/Default.aspx?kbid=309628 

/Guido

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom
Sent: Freitag, 22. April 2005 22:49
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Windows 2003 setings

I have the windows2003update folder in both the config and domain NC,
but its empty.
What does that mean?
Thanks



Grillenmeier, Guido wrote:
 to check prep
 
 ADPREP /FORESTPREP
 cn=forest name
   cn=Configuration
   cn=ForestUpdates
   cn=windows2003update
 
 ADPREP /DOMAINPREP
 cn=domain name
   cn=SYSTEM
   cn=DomainUpdates
   cn=Windows2003Update
 
 
 to check functional level, it's easiest to read rootDSE of a specific
 DC 
 
 /Guido
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom
 Sent: Freitag, 22. April 2005 22:18
 To: ActiveDir (E-mail)
 Subject: [ActiveDir] Windows 2003 setings
 
 I forgot, but where are the settings kept in AD  where  you can see if
 forest/domain prep has been run and which domain/forest functional
 level a domain/forest is on?
 thanks
 List info   : http://www.activedir.org/List.aspx
 List FAQ: http://www.activedir.org/ListFAQ.aspx
 List archive:
 http://www.mail-archive.com/activedir%40mail.activedir.org/
 List info   : http://www.activedir.org/List.aspx
 List FAQ: http://www.activedir.org/ListFAQ.aspx
 List archive:
 http://www.mail-archive.com/activedir%40mail.activedir.org/ 

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/