DCPromo Win Server 2019 to take over Win2008R2 DC (migrate DC)

EJ Chan 1 Reputation point
2022-12-30T08:05:00.973+00:00

Hi all, need your advice, any work around on this error? Thanks in advance.

All pre-requisite checks passed but when click install button, the follow error message displayed immediately.

ADPrep execution failed --> Microsoft.DirectoryServices.Deployment.ADPrepLdapException: No Such Attribute. Server extended error: 87. Server extended message: 00000057: LdapErr: DSID-0C090CB7, comment: Error in attribute conversion operation, data 0, v1db1.
Adprep was unable to create the object CN=Claim Types,CN=Claims Configuration,CN=Services,CN=Configuration,DC=sgrr,DC=local in Active Directory Domain Services.
[Status/Consequence]
This Adprep operation failed.
[User Action]
Check the log file ADPrep.log in the C:\Windows\debug\adprep\logs\20221230155455 directory for more information. Restart Adprep..
Check the log files in the C:\Windows\debug\adprep\logs\20221230155455 directory for detailed information.

Extracted log file:

[2022/12/30:15:54:55.780]
Adprep was about to call the following LDAP API. ldap_add_s(). The entry to add is CN=Claim Types,CN=Claims Configuration,CN=Services,CN=Configuration,DC=sgrr,DC=local.
[2022/12/30:15:54:55.786]
LDAP API ldap_add_s() finished, return code is 0x10
[2022/12/30:15:54:55.787]
Adprep was unable to create the object CN=Claim Types,CN=Claims Configuration,CN=Services,CN=Configuration,DC=sgrr,DC=local in Active Directory Domain Services.

[Status/Consequence]

This Adprep operation failed.

[User Action]

Check the log file ADPrep.log in the C:\Windows\debug\adprep\logs\20221230155455 directory for more information. Restart Adprep.
[2022/12/30:15:54:55.787]
Adprep encountered an LDAP error.

Error code: 0x10. Server extended error code: 0x57, Server error message: 00000057: LdapErr: DSID-0C090CB7, comment: Error in attribute conversion operation, data 0, v1db1

DSID Info:
DSID: 0x18111003
ldap error = 0x10
NT BUILD: 17763
NT BUILD: 2931

[2022/12/30:15:54:55.787]
Adprep was unable to update forest information.

[Status/Consequence]

Adprep requires access to existing forest-wide information from the schema master in order to complete this operation.

[User Action]

Check the log file, ADPrep.log, in the C:\Windows\debug\adprep\logs\20221230155455 directory for more information.

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,858 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Dave Patrick 426.1K Reputation points MVP
    2022-12-30T13:22:14.467+00:00

    Do not do an in-place upgrade.

    The two prerequisites to introducing the first 2019 or 2022 domain controller are that domain functional level needs to be 2008 or higher and older sysvol FRS replication needs to have been migrated to DFSR
    https://techcommunity.microsoft.com/t5/Storage-at-Microsoft/Streamlined-Migration-of-FRS-to-DFSR-SYSVOL/ba-p/425405

    I'd use dcdiag / repadmin tools to verify health correcting all errors found before starting any operations. Then stand up the new 2019 or 2022, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over (optional), transfer pdc emulator role (optional), use dcdiag / repadmin tools to again verify health, when all is good you can decommission / demote old one.

    --please don't forget to upvote and Accept as answer if the reply is helpful--