Prereq for AD Prep failed with trying to promote a Windows 2016 server to a domain controller in a domain with a Windows Server 2012 R2 Functional Level.

Anonymous
2023-10-12T01:10:28+00:00

Prereq for AD Prep failed with trying to promote a Windows 2016 server to a domain controller in a domain with a Windows Server 2012 R2 Functional Level.

The specific error is: Verification of prerequisites for Active Directory preparation failed. Unable to perform Exchange schema conflict check for domain office.danielsequipment.com. Exception: Access is denied. Adprep could not retrieve data from the server SERVERX.DOMAIN.COM through Windows Managment Instrumentation (WMI).

[User Action] Check the log file ADPrep.log in the C:\Windows\debug\adprep\logs\20231011205218-test directory for possible cause of failure.

The Data in the file is:

Adprep encountered a Win32 error.

Error code: 0x5 Error message: Access is denied.

DSID Info:
DSID: 0x1810012a
HRESULT = 0x80070005
NT BUILD: 14393
NT BUILD: 1770

Windows for business | Windows Server | Directory services | Active Directory

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question. To protect privacy, user profiles for migrated questions are anonymized.

0 comments No comments
{count} vote
Accepted answer
  1. Anonymous
    2023-10-13T17:15:36+00:00

    Resolved the problem. The "Access is Denied" error was because I let the SSL Certs on my domain controllers expire. Once I addressed this issue, I was able to add a Windows 2016 domain controller without issue.

    0 comments No comments

2 additional answers

Sort by: Most helpful
  1. Anonymous
    2023-10-13T01:14:05+00:00

    Hello Herb Oakes,

    Thank you for posting in Microsoft Community forum.

    Based on the description above, I understand both the forest functional level and domain functional level are Windows server 2012 R2.

    1.Please ensure AD replication before you promote 2016 server as Domain Controller.

    2.Based on the error message "Exception: Access is denied", it seems the issue is related to permission. Please try to use one domain account in Enterprise Admins or in Sechma Admins to log on DC and promote the 2016 server.

    I hope the information above is helpful.

    If you have any question or concern, please feel free to let us know.

    Best Regards,
    Daisy Zhou

    0 comments No comments
  2. Anonymous
    2023-10-16T06:49:32+00:00

    Hello Herb Oakes,

    Thank you for your update and sharing.

    I am so glad that the issue is resolved. I will mark your reply with solution as answer.

    Thank you again.

    Best Regards,
    Daisy Zhou

    0 comments No comments