RE: [ActiveDir] Windows 2003 setings
to check prep ADPREP /FORESTPREP cn=forest name cn=Configuration cn=ForestUpdates cn=windows2003update ADPREP /DOMAINPREP cn=domain name cn=SYSTEM cn=DomainUpdates cn=Windows2003Update to check functional level, it's easiest to read rootDSE of a specific DC /Guido -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Freitag, 22. April 2005 22:18 To: ActiveDir (E-mail) Subject: [ActiveDir] Windows 2003 setings I forgot, but where are the settings kept in AD where you can see if forest/domain prep has been run and which domain/forest functional level a domain/forest is on? thanks List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Windows 2003 setings
I have the windows2003update folder in both the config and domain NC, but its empty. What does that mean? Thanks Grillenmeier, Guido wrote: to check prep ADPREP /FORESTPREP cn=forest name cn=Configuration cn=ForestUpdates cn=windows2003update ADPREP /DOMAINPREP cn=domain name cn=SYSTEM cn=DomainUpdates cn=Windows2003Update to check functional level, it's easiest to read rootDSE of a specific DC /Guido -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Freitag, 22. April 2005 22:18 To: ActiveDir (E-mail) Subject: [ActiveDir] Windows 2003 setings I forgot, but where are the settings kept in AD where you can see if forest/domain prep has been run and which domain/forest functional level a domain/forest is on? thanks List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Windows 2003 setings
Reading the rootDSE, I get - 1 domainFunctionality: 0; 1 forestFunctionality: 0; 1 domainControllerFunctionality: 2; Grillenmeier, Guido wrote: to check prep ADPREP /FORESTPREP cn=forest name cn=Configuration cn=ForestUpdates cn=windows2003update ADPREP /DOMAINPREP cn=domain name cn=SYSTEM cn=DomainUpdates cn=Windows2003Update to check functional level, it's easiest to read rootDSE of a specific DC /Guido -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Freitag, 22. April 2005 22:18 To: ActiveDir (E-mail) Subject: [ActiveDir] Windows 2003 setings I forgot, but where are the settings kept in AD where you can see if forest/domain prep has been run and which domain/forest functional level a domain/forest is on? thanks List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Windows 2003 setings
that's a perfectly valid state: this is a Windows 2003 DC (DC functionality = 2) in a domain that's still running at Win2000 mixed or native functional level (0) and a forest that's running at Win2000 functional level (0). Naturally, the DC won't turn on certain features (e.g. LVR) prior to the other settings being switched to a higher level -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Freitag, 22. April 2005 22:54 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Windows 2003 setings Reading the rootDSE, I get - 1 domainFunctionality: 0; 1 forestFunctionality: 0; 1 domainControllerFunctionality: 2; Grillenmeier, Guido wrote: to check prep ADPREP /FORESTPREP cn=forest name cn=Configuration cn=ForestUpdates cn=windows2003update ADPREP /DOMAINPREP cn=domain name cn=SYSTEM cn=DomainUpdates cn=Windows2003Update to check functional level, it's easiest to read rootDSE of a specific DC /Guido -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Freitag, 22. April 2005 22:18 To: ActiveDir (E-mail) Subject: [ActiveDir] Windows 2003 setings I forgot, but where are the settings kept in AD where you can see if forest/domain prep has been run and which domain/forest functional level a domain/forest is on? thanks List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Windows 2003 setings
I would point out.the presence of the objects Guido cited does not say that forest/domain prep has been run, it says it completed successfully. If you ran forest/domain prep and it failed, that object would not be present, but instead you'd only have the operational GUIDs for each of the operations that succeeded (in the correct location for the prep run of course). It's important to note the subtle difference, as you might not see that there but still be trying to run forest/domain prep. If so, that means it is failing, and we'd want to pick up the adprep logs to see what the nature of the failure is. Finally, I'd point out that running adprep from SP1 is better than from RTM. We added a lot of verbiage to error conditions to clearly spell out common error conditions which PSS saw in the field. So if you are prepping, SP1 is the best bet, as failure will be better spelled out should you hit any. ~Eric -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier, Guido Sent: Friday, April 22, 2005 2:06 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Windows 2003 setings yes, it doesn't have child objects, but it's not empty - it has some attributes determining it's status = the revision attribute is stamped when all tasks have been completed successfully. What's this set to in your environment you'll get more details as to what was performed by checking the Operations container at the same level as the Windows2003update container = this should contain an entry for every operations which was performed during the upgrade (which are 37 for the forestprep and 50 for the domain prep) and the fact that the objects exist confirms that ADPREP /forestprep and /domainprep was executed in the respective forest/domain (and that the update replicated to other DCs). also check out this KB for more details: http://support.microsoft.com/Default.aspx?kbid=309628 /Guido -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Freitag, 22. April 2005 22:49 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Windows 2003 setings I have the windows2003update folder in both the config and domain NC, but its empty. What does that mean? Thanks Grillenmeier, Guido wrote: to check prep ADPREP /FORESTPREP cn=forest name cn=Configuration cn=ForestUpdates cn=windows2003update ADPREP /DOMAINPREP cn=domain name cn=SYSTEM cn=DomainUpdates cn=Windows2003Update to check functional level, it's easiest to read rootDSE of a specific DC /Guido -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Freitag, 22. April 2005 22:18 To: ActiveDir (E-mail) Subject: [ActiveDir] Windows 2003 setings I forgot, but where are the settings kept in AD where you can see if forest/domain prep has been run and which domain/forest functional level a domain/forest is on? thanks List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/