Upgrading Child Domain: Running Adprep in 2012r2

InfoTechdude 156 Reputation points
2020-11-12T15:16:19.147+00:00

Hi,

In order to upgrade a domain to 2012r2, one has to run adprep. Adprep has to have connection to schema fsmo and other roles (infra/rid ?), and needs 3 types of permissions when we run /forestprep, 1 when running /domainprep. Now, how does this apply to upgrading a child domain?
1)what permissions to logon
2)what permissions to upgrade
3)what to do with fsmos?
4)I guess /forestprep is run once per forest, so this does not apply to child domain?
5)other issues to take into consideration?

Thanks!

Windows Server 2012
Windows Server 2012
A Microsoft server operating system that supports enterprise-level management, data storage, applications, and communications.
1,534 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,932 questions
Windows Server Migration
Windows Server Migration
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Migration: The process of making existing applications and data work on a different computer or operating system.
409 questions
0 comments

4 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Dave Patrick 426.1K Reputation points MVP
    2020-11-12T15:46:41.547+00:00

    Domain adprep is now an integrated part of domain controller promotion.

    I'd use dcdiag / repadmin tools to verify health correcting all errors found before starting any operations. Then stand up the new 2012 R2, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over (optional), transfer pdc emulator role (optional), use dcdiag / repadmin tools to again verify health, when all is good you can decommission / demote old one.

    Also at some point after I'd recommend migrating sysvol replication from older FRS technology to DFSR
    https://techcommunity.microsoft.com/t5/Storage-at-Microsoft/Streamlined-Migration-of-FRS-to-DFSR-SYSVOL/ba-p/425405

    --please don't forget to Accept as answer if the reply is helpful--

  2. Dave Patrick 426.1K Reputation points MVP
    2020-11-13T16:28:23.16+00:00

    Your account needs to be a member of the Schema Admins and Enterprise Admins security groups. Some info here on FSMO roles placement
    https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/fsmo-placement-and-optimization-on-ad-dcs

    I'd probably do the childs, then the parent.

    --please don't forget to Accept as answer if the reply is helpful--

    0 comments
  3. Vicky Wang 2,646 Reputation points
    2020-11-16T06:59:15.017+00:00

    Hi,

    Just checking in to see if the information provided was helpful.

    Please let us know if you would like further assistance.

    Best Regards,
    Vicky

    0 comments
  4. Vicky Wang 2,646 Reputation points
    2020-11-18T09:36:45.547+00:00

    Hi,

    Just checking in to see if the information provided was helpful.

    Please let us know if you would like further assistance.

    Best Regards,
    Vicky

    0 comments