Your company has an Active Directory forest that contains only Windows Server 2008
domain controllers.
You need to prepare the Active Directory domain to install Windows Server 2008 R2 domain
controllers.
Which two tasks should you perform? (Each correct answer presents part of the solution.
Choose two.)

A.
Run the adprep /domainprep command.

B.
Raise the forest functional level to Windows Server 2008.

C.
Raise the domain functional level to Windows Server 2008.

D.
Run the adprep /forestprep command.

Explanation:
http://www.petri.co.il/prepare-for-server-2008-r2-domain-controller.htm
Prepare your Domain for the Windows Server 2008 R2 Domain Controller
Before installing the first Windows Server 2008 R2 domain controller (DC) into an existing
Windows 2000, Windows Server 2003 or Windows Server 2008 domain, you must prepare
the AD forest and domain. You do so by running a tool called ADPREP.
ADPREP extends the Active Directory schema and updates permissions as necessary to
prepare a forest and domain for a domain controller that runs the Windows Server 2008 R2
operating system.
Note: You may remember that ADPREP was used on previous operating systems such as
Windows Server 2003, Windows Server 2003 R2 and Windows Server 2008. This article
focuses on Windows Server 2008 R2.
What does ADPREP do? ADPREP has parameters that perform a variety of operations that
help prepare an existing Active Directory environment for a domain controller that runs
Windows Server 2008 R2. Not all versions of ADPREP perform the same operations, but
generally the different types of operations that ADPREP can perform include the following:
Updating the Active Directory schema
Updating security descriptors
Modifying access control lists (ACLs) on Active Directory objects and on files in the SYSVOL
shared folder
Creating new objects, as needed
Creating new containers, as needed
To prepare the forest and domain for the installation of the first Windows Server 2008 R2
domain controller please perform these tasks:
Lamer note: The following tasks are required ONLY before adding the first Windows Server
2008 R2 domain controller. If you plan on simply joining a Windows Server 2008 R2 Server
to the domain and configuring as a regular member server, none of the following tasks are
required.
Another lamer note: Please make sure you read the system requirements for Windows
Server 2008 R2. For example, you cannot join a Windows Server 2008 R2 server to a
Windows NT 4.0 domain, not can it participate as a domain controller in a mixed domain. If
any domain controllers in the forest are running Windows 2000 Server, they must be running
Service Pack 4 (SP4).
First, you should review and understand the schema updates and other changes that
ADPREP makes as part of the schema management process in Active Directory Domain
Services (AD DS). You should test the ADPREP schema updates in a lab environment to
ensure that they will not conflict with any applications that run in your environment.
You must make a system state backup for your domain controllers, including the schema
master and at least one other domain controller from each domain in the forest (you do have
backups, don’t you?). Also, make sure that you can log on to the schema master with an
account that has sufficient credentials to run adprep /forestprep. You must be a member of
the Schema Admins group, the Enterprise Admins group, and the Domain Admins group of
the domain that hosts the schema master, which is, by default, the forest root domain.
Next, insert the Windows Server 2008 R2 DVD media into your DVD drive. Note that if you
do not have the media handy, you may use the evaluation version that is available to
download from Microsoft’s website.
If you only have the ISO file and do not want to or cannot actually burn it to a physical DVD
media, you can mount it by using a virtual ISO mounting tool such as MagicIso (can Convert
BIN to ISO, Create, Edit, Burn, Extract ISO file, ISO/BIN converter/extractor/editor).
Browse to the X:\support\adprep folder, where X: is the drive letter of your DVD drive. Find a
file called adprep.exe or adprep32.exe.

Note: Unlike in Windows Server 2008 where you had to use either the 32-bit or 64-bit
installation media to get the right version of ADPREP, Windows Server 2008 R2 ADPREP is
available in a 32-bit version and a 64-bit version. The 64-bit version runs by default. If you
need to run ADPREP on a 32-bit computer, run the 32-bit version (adprep32.exe).

To perform this procedure, you must use an account that has membership in all of the
following groups:
Enterprise Admins
Schema Admins
Domain Admins for the domain that contains the schema master
Open a Command Prompt window by typing CMD and pressing ENTER in the Run menu.
Drag the adprep.exe file from the Windows Explorer window to the Command Prompt
window. Naturally, if you want, you can always manually type the path of the file in the
Command Prompt window if that makes you feel better…
Note: You must run adprep.exe from an elevated command prompt. To open an elevated
command prompt, click Start, right-click Command Prompt, and then click Run as
administrator.
Note: If your existing DCs are Windows Server 2008, dragging and dropping into a
Command Prompt window will not work, as that feature was intentionally disabled in
windows Server 2008 and Windows Vista.
In the Command Prompt window, type the following command: adprep /forestprep

You will be prompted to type the letter “c” and then press ENTER. After doing so, process
will begin.

ADPREP will take several minutes to complete. During that time, several LDF files will be
imported into the AD Schema, and messages will be displayed in the Command Prompt
window. File sch47.ldf seems to be the largest one.

When completed, you will receive a success message.

Note: As mentioned above, ADPREP should only be run on an existing DC. When trying to
run it from a non-DC, you will get this error:
Adprep cannot run on this platform because it is not an Active Directory Domain Controller.
[Status/Consequence]
Adprep stopped without making any changes.
[User Action]
Run Adprep on a Active Directory Domain Controller.

Allow the operation to complete, and then allow the changes to replicate throughout the
forest before you prepare any domains for a domain controller that runs Windows Server
2008 R2.
In the Command Prompt window, type the following command: adprep /domainprep
Process will take less than a second.

ADPREP must only be run in a Windows 2000 Native Mode or higher. If you attempt to run
in Mixed Mode you will get this error:
Adprep detected that the domain is not in native mode
[Status/Consequence]
Adprep has stopped without making changes.
[User Action]
Configure the domain to run in native mode and re-run domainprep
Allow the operation to complete, and then allow the changes to replicate throughout the
forest before you prepare any domains for a domain controller that runs Windows Server
2008 R2.
If you’re running a Windows 2008 Active Directory domain, that’s it, no additional tasks are
needed.
If you’re running a Windows 2000 Active Directory domain, you must also the following
command: adprep /domainprep /gpprep
Allow the operation to complete, and then allow the changes to replicate throughout the
forest before you prepare any domains for a domain controller that runs Windows Server
2008 R2.
If you’re running a Windows 2003 Active Directory domain, that’s it, no additional tasks are
needed. However, if you’re planing to run Read Only Domain controllers (RODCs), you must
also type the following command: adprep /rodcprep
If you already ran this command for Windows Server 2008, you do not need to run it again
for Windows Server 2008 R2.
Process will complete in less than a second.

Allow the operation to complete, and then allow the changes to replicate throughout the
forest before you prepare any domains for a domain controller that runs Windows Server
2008 R2.
To verify that adprep /forestprep completed successfully please perform these steps:
1. Log on to an administrative workstation that has ADSIEdit installed. ADSIEdit is installed
by default on domain controllers that run Windows Server 2008 or Windows Server 2008 R2.
On Windows Server 2003 you must install the Resource Kit Tools.
2. Click Start, click Run, type ADSIEdit.msc, and then click OK.
3. Click Action, and then click Connect to.
4. Click Select a well known Naming Context, select Configuration in the list of available
naming contexts, and then click OK.
5. Double-click Configuration, and then double-click CN=Configuration,
DC=forest_root_domain where forest_root_domain is the distinguished name of your forest
root domain.
6. Double-click CN=ForestUpdates.
7. Right-click CN=ActiveDirectoryUpdate, and then click Properties.

8. If you ran adprep /forestprep for Windows Server 2008 R2, confirm that the Revision
attribute value is 5, and then click OK.

9. Click ADSI Edit, click Action, and then click Connect to.
10. Click Select a Well known naming context, select Schema in the list of available naming
contexts, and then click OK.
11. Double-click Schema.
12. Right-click CN=Schema,CN=Configuration,DC=forest_root_domain, and then click
Properties.

13. If you ran adprep /forestprep for Windows Server 2008 R2, confirm that the
objectVersion attribute value is set to 47, and then click OK.