The DNS patch released in July, 2008, reserves 2500 ephemeral UDP service ports. It is a security update to prevent spoofing. Attackers know that normally, without the update, a random ephemeral response port (service port), which a port is chosen randomly using UDP 1024 and above, is used in.
I have a Windows Server 2003 R2 DC running a private forest. I have added a Windows Server 2008 machine to the domain and want to promote it as a DC in the existing forest. I added the Active Directory Domain Services role to the server, and rebooted.
It asks me to run 'Active Directory Domain Services Installation Wizard (dcpromo.exe)'. As I step through this wizard, I get an error: - Active Directory Domain Services Installation Wizard - To install a domain controller into this Active Directory forest, you must first prepare the forest using 'adprep /forestprep'. The Adprep utility is available on the Windows Server 2008 installation media in the sources adprep folder. OK - So I go to the media and run this command: - BEGIN - Z: sources adprepadprep /forestprep Adprep cannot run on this platform because it is not an Active Directory Domain Controller.
Status/Consequence Adprep stopped without making any changes. User Action Run Adprep on a Active Directory Domain Controller. END - Oops, looks like I was supposed to run this on the currently active DC. So I go over to the Server 2003 R2 DC and run adprep from it's media and it seemingly succeeds: - BEGIN - Z: CMPNENTS R2 ADPREPadprep /forestprep ADPREP WARNING: Before running adprep, all Windows 2000 domain controllers in the forest should be upgraded to Windows 2000 Service Pack 1 (SP1) with QFE 265089, or to Windows 2000 SP2 (or later). QFE 265089 (included in Windows 2000 SP2 and later) is required to prevent potential domain controller corruption. For more information about preparing your forest and domain see KB article Q331161 at.
User Action If ALL your existing Windows 2000 domain controllers meet this requirement, type C and then press ENTER to continue. Otherwise, type any other key and press ENTER to quit.
C Opened Connection to DOMAIN1 SSPI Bind succeeded Current Schema Version is 30 Upgrading schema to version 31 Connecting to 'DOMAIN1' Logging in as current user using SSPI Importing directory from file 'C: WINDOWS system32 sch31.ldf' Loading entries. 139 entries modified successfully. The command has completed successfully Adprep successfully updated the forest-wide information. END - Returning back to the Server 2008 machine, and running the wizard again I still get this error: - Active Directory Domain Services Installation Wizard - To install a domain controller into this Active Directory forest, you must first prepare the forest using 'adprep /forestprep'.
The Adprep utility is available on the Windows Server 2008 installation media in the sources adprep folder. OK - But I just did this. I only have one DC in the forest, so not sure what else to do. I tried rebooting the Server 2008 machine, etc, and nothing works.
Anybody know what I might be missing here? Frankster 16/3/2009, 16:43 น. 'Agendum' wrote in message news:[email protected]. Problem solved! I was running adprep on the DC from the Windows Server 2003 R2 media. Instead, I used the adprep on the Windows Server 2008 media on the 2003 DC and everything is now working. 'Agendum' wrote: Thanks very much for the quick response.
I just tried this and it didn't have any effect on the existing DC, and the dialog still occurs on the 2008 machine: - BEGIN - Z: CMPNENTS R2 ADPREPadprep /domainprep Running domainprep. Domain-wide information has already been updated. Status/Consequence Adprep did not attempt to rerun this operation. - END - 'Frankster' wrote: Did you run 'adprep /domainprep' on the active DC?
I would do this and re-try the 2008 server. -Frank You have to run the adprep from the 2008 on the 2003 machine to bring the schema upto the 2008 level - SPAMCOP User Matt Croll 29/9/2010, 10:22 น. Hello, I noticed that my win2008 r2 x64 Volume license dvd had the adprep folder under support and not sources.
And also, adprep32.exe in that support folder successfully allowed a dcpromo of a win2008 r x64 standard server from a win2003 SP2 x86 server. On Monday, March 16, 2009 7:43 PM Frankster wrote: Did you run 'adprep /domainprep' on the active DC? I would do this and re-try the 2008 server. -Frank On Monday, March 16, 2009 8:05 PM Agendu wrote: Thanks very much for the quick response. I just tried this and it didn't have any effect on the existing DC, and the dialog still occurs on the 2008 machine: - BEGIN - Z: CMPNENTS R2 ADPREPadprep /domainprep Running domainprep. Domain-wide information has already been updated.
Status/Consequence Adprep did not attempt to rerun this operation. - END - 'Frankster' wrote: On Monday, March 16, 2009 8:59 PM Agendu wrote: Problem solved! I was running adprep on the DC from the Windows Server 2003 R2 media.
Instead, I used the adprep on the Windows Server 2008 media on the 2003 DC and everything is now working. Thanks! 'Agendum' wrote: On Tuesday, March 17, 2009 4:35 AM SPAMCOP User wrote: You have to run the adprep from the 2008 on the 2003 machine to bring the schema upto the 2008 level - SPAMCOP User On Wednesday, March 18, 2009 3:59 AM Meinolf Weber MVP-DS wrote: Hello AgendumAdprep command has to run on the 2003 Schema master from the 2008 installation disk. You have to run /forestprep, then /domainprep and just for the future i would also run /rodcprep to prepare for RODC(read-only domain controllers). Best regards Meinolf Weber Disclaimer: This posting is provided 'AS IS' with no warranties, and confers no rights. Please do NOT email, only reply to Newsgroups. HELP us help YOU!!!
Submitted via EggHeadCafe - Software Developer Portal of Choice HttpPostedFile Image Resizer.
Of all the questions I have ever asked in forums, I think that this is the most far-reaching. The problem combination: 64-bit Windows Server 2008 R2 (May also apply to 64-bit Windows 7) with IE8 – the version you get with R2 or Windows 7.
In a nutshell the problem is that Adobe Flash is not supported. Adobe's help line confirm it won't work. Anyone with an IE8 browser on a 64-bit system will get driven mad if they try to install Adobe Flash. The solution is attention to detail, seeking the 32-bit iexplorer. It's in the Program Files (x86) note the (x86). Amazingly if you use this 32-bit iexplorer (even on a 64-bit OS), you can download the Adobe Flash stuff – YouTube will then work. The downside.
You will need to Pin the iexplorer in the Programs (x86) to your Taskbar or start menu to get the benefit. Does it automatically start a download, or does it still say something about being unable to install? If it automatically starts a download, give that a go. EDIT: I have a couple more things for you to try if my original suggestion does not work.
If you go, it will allow you to download the standalone installer. It says that it is Server 2008 compatible. I'm not sure how the 64bit vs. 32bit situation is going to affect this. I was also able to find a technical article on Adobe's site that stated the following.
If the ActiveX Control for Flash Player fails to install, download the executable installer. If the information above has not resolved the issue, download the executable Flash Player installer here: and unzip (Internet Explorer for Windows only).