DC promotion issues

[Guest /u/TheThunderGod7]

Joining another DC to domain issues

 

Hey All,

 

Need some help trying to track down this issue

 

We have 2 Server 2016 Standard servers.

 

One is the old DC, and the other is one we want to promote to replace it.

 

Trying to promote it so it can replicate isn’t working.

 

It throws the error below

 

ADPREP was unable to modify the security descriptor on object CN=Keys,DC=“name”,DC=local

 

ADPREP requires access to existing domain-wide information from the infrastructure master in order to complete this operation

 

Error code 0x208d

 

I have tried the following:

 

Verified the account trying to join it is a member of Schema, Domain, Enterprise admin

 

Tried to find the CN=Keys, and I can’t find it

 

Ran ADPREP command /forestprep on source DC

 

Checked sysvol registry key

 

Help!

 

submitted by /u/TheThunderGod7

[link] [comments]

 

Continue reading...