Adding additional Windows Server 2012 R2 domain controller to windows 2008 domain.

Home Forums Server Operating Systems Windows Server 2012 / 2012 R2 Adding additional Windows Server 2012 R2 domain controller to windows 2008 domain.

This topic contains 5 replies, has 4 voices, and was last updated by  Pc_RoadRunner 5 months, 1 week ago.

Viewing 6 posts - 1 through 6 (of 6 total)
  • Author
    Posts

  • Ali Ahmed
    Member
    #167599

    Hi everyone

    I have two domain controllers in my domain. The OS of DCs is windows server 2008R2 and domain and forest functional level is Windows server 2008. I was trying to add a additional domain controller (Windows server 2012 R2) on my domain but its throwing an error while doing prerequisite check.The screenshot of error is attached with the post. The error says user should be member of enterprise admin and scheme admin group. According to microsoft: https://docs.microsoft.com/en-gb/win…MK_AdprepCreds

    [SIZE=16px]If you are not currently logged on with sufficient credentials to run adprep.exe commands and adprep is required to run in order to complete the AD DS installation, you are prompted to supply credentials to run adprep.exe. Adprep is required to run in order to add the first domain controller that runs Windows Server 2012 to an existing domain or forest. More specifically: …………[/SIZE]

    I am just confused and wondering its neither the RODC and nor the first DC in domain then why I am receiving this error. I am also wondering what if i use the other user which has required rights would it be safe to do that and my environment will keep on running without any problem. Please suggest.


    Ossian
    Moderator
    #192036

    The reason you need enterprise admin / schema admin is that, from server 2012, the setup attempts to extend the AD schema. I would suggest you use “the” administrator account for this and all should be well

    #392055

    Thank you Tom for the quick reply… You mean domain administrator account ?


    Ossian
    Moderator
    #192038

    Yes, the domain administrator


    wullieb1
    Moderator
    #245779

    To update the Schema you actually need Schema Admin rights.

    #392056
    Ossian;n517437 wrote:
    The reason you need enterprise admin / schema admin is that, from server 2012, the setup attempts to extend the AD schema. I would suggest you use “the” administrator account for this and all should be well

    Thank you Tom Jones. Its done.

Viewing 6 posts - 1 through 6 (of 6 total)

You must be logged in to reply to this topic.