"JK" <jk@jhu.edu> wrote in message
news:eQ2azLxmIHA.4712@TK2MSFTNGP04.phx.gbl...
> kj [SBS MVP] wrote:
>
>> JK wrote:
>>> Dcpromo fails trying to promote an Enterprise Edition R2 64-bit
>>> server to domain controller.
>>>
>>> Current configuration:
>>> 2 Server 2003 standard edition 32-bit domain controllers. Service
>>> pack 2 installed and running at Native 2003 level.
>>>
>>>
>>> Adprep /forestprep fails with "Adprep was unable to extend the
>>> schema. The schema master did not complete a replication cycle ..."
>>>
>>> ( Adprep from disc 2 of the 32-bit, R2)
>>>
>>
>> Run on the schema master using an account with schema admin membership?
>>
>> If so, probably want to run a dcdiag /c /v /e and look for problems
>> before
>> proceeding.
>>
>>>
>>>
>>> I'm able to manually replicate with the AD Sites & Services
>>> application.
>>>
>>> What am I missing? Should I / can I upgrade the Standard Edition
>>> 2003 to R2 EE then add the new 64-bit servers?
>>>
>>> JK
>>
>
>
>
> Yep, running dcdiag /c /v /e shows several errors:
>
>
> server1 failed test KnowsOfRoleHolders
> server1 failed test VerifyReplicas
> server1 failed test VerifyEnterpriseReferences
> server2 failed test KnowsOfRoleHolders
> server2 failed test systemlog
> server2 failed test VerifyReplicas
> server2 failed test VerifyEnterpriseReferences
> ForestDnsZones failed test CrossRefValidation
> ForestDnsZones failed test CheckSDRefDom
> DomainDnsZones failed test CrossRefValidation
> DomainDnsZones failed test CheckSDRefDom
> Schema failed test CrossRefValidation
> Configuration failed test CrossRefValidation
> OurDomain failed test CrossRefValidation
>
> The KnowsOfRoleHolders test throws warnings about CN=server2 is the Schema
> Owner but is deleted and the Domain Owner but is deleted.
>
> This seems like a lot of errors! And I thought everything was just fine
> ...
>
>

I'd start out with troubleshooting DNS problems and go for there. Making AD
structure changes where AD already has problems isn't likely to be
beneficial.


You might also want to spring for the PSS/CSS call to Microsoft for rapid
resolution.

If you post the unedit dcdiag output, some additional diagnosis may be
possible.

> Should I run ntdsutil on server1 to seize all roles? Then try dcpromo
> from
> the new servers again.
>
> Thanks!
>
> JK
>
>