/rodcprep WS2008 y WS2019

Question

我有一个具有以下条件的WS2008r2域：

• 域功能级: WS2008r2

• 森林功能级别: WS2003

我希望在同一域中的远程站点中部署RODC，但部署在WS2019中。

当我在主域中执行“adprep/rodcprep”时，我有以下错误：

D:\support\adprep>adprep /rodcprep

Adprep connected to the domain FSMO: XXX-DC01.XXX.XXX. 

==============================================================================

Adprep found partition DC=DomainDnsZones,DC=XXX,DC=XXX, and is about to update the permissions.

 
Adprep could not contact a replica for partition DC=DomainDnsZones,DC=XXX,DC=XXX.


Adprep encountered an LDAP error.

Error code: 0x0. Server extended error code: 0x0, Server error message: (null).


Adprep failed the operation on partition DC=DomainDnsZones,DC=XXX,DC=XXX. Skipping to next partition.

============================================================================== 

==============================================================================

Adprep found partition DC=ForestDnsZones,DC=XXX,DC=XXX, and is about to update the permissions.

Adprep could not contact a replica for partition DC=ForestDnsZones,DC=XXX,DC=XXX.


Adprep encountered an LDAP error.

Error code: 0x0. Server extended error code: 0x0, Server error message: (null).


Adprep failed the operation on partition DC=ForestDnsZones,DC=XXX,DC=XXX. Skipping to next partition.

============================================================================== 

Adprep detected the operation on partition DC=XXX,DC=XXX has been performed. Skipping to next partition.

============================================================================== 

Adprep completed with errors. Not all partitions are updated. See the ADPrep.log

 in the C:\Windows\debug\adprep\logs\20211020101000 directory for more information.

 

To successfully update all partitions, the currently logged-on user needs to be a member of the Enterprise Admins group.  If that is not the case, please correct the problem, and then restart Adprep.

森林功能级别目前无法提高，因为WS2003服务器中有一些应用程序。

有没有办法在WS2019上配置RODC？

非常感谢。

Answer 1

·由于您的森林功能级别在Windows 2003上运行，Microsoft主动退出了该级别，因此无法提供更新和支持。因此，建议您将域功能级别升级到Windows 2012 R2，将林功能级别升级到Windows 2008兼容性级别。尽管如此，由于某些应用程序和流程相关的依赖性，许多组织继续工作，并依赖于这些功能级别。

因此，在WindowsServer2019操作系统上安装域控制器时，环境中所需的最低森林功能级别是Windows 2008。此外，可以将域功能级别设置为高于林功能级别的值，但不能将域功能级别设置为低于林功能级别的值，因此域功能级别值始终设置为高于林功能级别的级别。

通过参考以下文章，您可以将环境中的林功能级别从Windows Server 2003升级到Windows Server 2008，域功能级别从Windows Server 2008升级到Windows Server 2012：

https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/raise-active-directory-domain-forest-functional-levels

·尽管对于接收到的错误，您可以尝试将旧的sysvol复制迁移到DFSR，并使用Dsmgmt工具的“remove”参数对孤立的分区执行元数据清理。欲了解更多信息，请参阅以下文档链接：-

https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/error-run-adprep-rodcprep-command

https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc730970(v=ws.10)?redirectedfrom=MSDN