I was wondering if anyone has a way to install Active Directory on a Windows 2003 R2 Server, without any tricks, and have no errors/warnings in the event log.
I have traditionally used an about 15 step "manual" process for installing AD, but I was doing a new server with Windows 2003 R2 and thought I'd try the "Server Manager" way. So after I installed a clean copy of Windows 2003 R2 and loaded SP2, I clicked on Add Role from the Manage Your Server window and ran the Configure Your Server wizard. I chose Typical Configuration for a First Server.
After restarting, I noticed a few issues in the event logs (some familiar):
The DSRestore Filter failed to connect to local SAM server. Error returned is <id:997>.Fixing this involved removing "dsrestor" from
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\Notification Packages, then resetting the Directory Services Restore Mode Administrator Account per Q322672 and rebooting.
MS DTC could not correctly process a DC Promotion/Demotion event. MS DTC will continue to function and will use the existing security settings.This is related to KB923977 and involved just going into Component Services->MyComputer->Properties->MSDTC->Security Configuration->Click OK then stopping and restarting MSDTC.
Time Provider NtpClient: This machine is configured to use the domain hierarchy to determine its time source, but it is the PDC emulator for the domain at the root of the forest, so there is no machine above it in the domain hierarchy to use as a time source.Fixing this involved a lengthy process outlined in this article.
I didn't see the DNS error that I usually see that makes you set
HKLM\System\CurrentControlSet\Services\NTDS\Parameters\Repl Perform Initial Synchronizations to 0, which was nice, but, still, 3 issues with a clean install "by the book".
EDIT: The DNS Error just appeared (Error 6702
DNS server has updated its own host (A) records...) so I had to implement the above fix. So that makes FOUR issues.
So my thought was...Windows 2003 has been around since, well 2003...so over six years ago. It has had innumerable patches, two service packs, even an R2 update. Is it really not possible to have an error free install of Active Directory without tricks? What am I missing?