So the quick 30k foot view. New Company with a single DC that's currently on a 2k8 VM.
Goal is to migrate to 2k12 and spin up a secondary 2k12 at another site.
In my attempts to go through this I am getting an error on the /domainprep portion, which I guess I don't have a clear understanding as what needs looked at after googleing the internet and back this past weekend.
Process: Mount the 2k12 disc, run forestprep (passes) and domainprep (fails) with the following.
E:\support\adprep>adprep /domainprep
Adprep was unable to modify the security descriptor on object CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=corp,DC=mgmtdn,DC=com.
[Status/Consequence]
ADPREP was unable to merge the existing security descriptor with the new access control entry (ACE).
[User Action]
Check the log file ADPrep.log in the C:\Windows\debug\adprep\logs\20150601090340 directory for more information.
Adprep encountered an LDAP error.
Error code: 0x20. Server extended error code: 0x208d, Server error message: 0000
208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data 0, best match of: 'CN=File Replication Service,CN=System,DC=corp,DC=mgmtdn,DC=com'
Adprep was unable to update domain information.
[Status/Consequence]
Adprep requires access to existing domain-wide information from the infrastructure master in order to complete this operation.
[User Action]
Check the log file, ADPrep.log, in the C:\Windows\debug\adprep\logs\201506010903
40 directory for more information.
Notes:
All 5 FSMO roles are assigned to the single DC
If the adprep debug log would help I can certainly post it.
I don't see any errors pertaining to this in logs
I can also run dcdiag.exe /v /c /d /e /s: and attach if needed.
Running cmds as Administrator (user part of ent admins)
Any help would be greatly appreciated. Thanks!