Yournetwork contains one Active Directory domain named contoso.com. The domain contains the
domain controllers configured as shown in the following table.
The functional level of the domain and the forest is Windows Server 2008.
An administrator named Admin1 is a member of the Domain Admins group.
You need to ensure that Admin1 can deploy a Windows Server 2012 R2 domain controller to
contoso.com.
What should you do?
A.
Raise the forest functional level.
B.
Run the Set-ADForestMode cmdlet.
C.
Raise the domain functional level.
D.
Run the adprep.exe command.
E.
Demote DC1 to a member server.
F.
Upgrade DC1 to Windows Server 2012.
G.
Add Admin1 to the Schema Admin Group.
Explanation:
Adprep.exe commands run automatically as needed as part of the AD DS installation process on
servers that run Windows Server 2012 or later. The commands need to run in the following cases:
* Before you add the first domain controller that runs a version of Windows Server that is later than
the latest version that is running in your existing domain.
* Before you upgrade an existing domain controller to a later version of Windows Server, if that
domain controller will be the first domain controller in the domain or forest to run that version of
Windows Server. Running Adprep.exe
https://technet.microsoft.com/en-us/library/dd464018(v=ws.10).aspx
The given answers ar INCORRECT.
First: we are not asked for multiple ansers. So only 1 answer needed.
Second. We need to make sure Admin1 can add a 2012R2 DC to the domain.
For Admin1 to add a 2012R2 DC to the domain, the account needs to have Schema Admin rights.
So the answer is : G) Add Admin1 to the Schema Admin Group.
Answer D) adprep.exe We do not need to do this to make sure that Admin1 can add a DC
Answer F) upgrade DC1 This will not help in making sure that Admin1 can add a DC.
1
2
No need. Won’t mess with the schema.
Answer is adprep. you don’t need adprep because you can just start the instalation using the wizard, but you also can do it manually with adprep. Is the closest to an correct answer.
You just need to be domain admin since you already have a ws2k12 installed.
2
0
Domain Admin is enough. This is basic 410/411 stuff by now…
ADPrep is correct. There’s another question asking exactly the same thing, except there are just 4 multiple choices. ADPrep is one of them and schema admin isn’t one of the choices.
8
2
The given aswer is right
https://support.microsoft.com/en-us/kb/322692
Caution Do not raise the functional level if the domain has or will have a domain controller that is of an earlier version than the version that is cited for that level. For example, a Windows Server 2008 functional level requires that all domain controllers have Windows Server 2008 or a later operating system installed in the domain or in the forest. After the domain functional level is raised to a higher level, it can only be changed back to an older level by using a forest recovery. This restriction exists because the features often change the communication between the domain controllers, or because the features change the storage of the Active Directory data in the database.
0
4
The minimum level for installing Windows 2012 R2 domain controller is windows Server 2003, which we have here.
but we have the same questions in 70-412 V4 and V6, and we don’t need to upgrade DC1 to Windows Server 2012.
http://www.aiotestking.com/microsoft/you-need-to-ensure-that-admin1-can-deploy-a-windows-server-2012-r2-domain-controller-to-contosocom/
http://www.aiotestking.com/microsoft/you-need-to-ensure-that-admin1-can-deploy-a-windows-server-2012-r2-domain-controller-to-contosocom-3/
I think we are missing something in this question or the answer is wrong.
0
0
I think we have to read the question carefully:
The task is to prepare the described environment so that ANOTHER admin will be able to install new DC with 2012R2. This account admin1 is already setup and equipped with dom adm privs.
Further, to setup first 2012R2 DC we definately need to get the schema extended by running adprep.
We have several options getting this accomplished:
– perform inplace upgrade of existing DC – would come close to F, but “R2” missing, wrong version
– add admin1 to schema admins group – might work, but would result in too much unnessesary privileges for my taste
– run adprep – best solution, leaves admin1 with least privileges and lets mission get accomplished
answer is wrong according to F, but D is right
1
0
Answer G, D
In order to run ADPrep and make a schema change you must be part of the schema admins
0
0
Actually, you can run adprep.exe on a domain if you are just a domain admin. The question then is whether or not you would need to run adprep.exe on the forest or just the domain. At least according to this guide:
https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/upgrade-domain-controllers
Does anyone know if you can get away with running adprep.exe on just the domain but not the forest in order to be able to install a domain controller?
0
0
Sorry…I meant to use the term “deploy” rather than “install” for the domain controller.
0
0
Installing the first Windows 2012 R2 DC in the domain will update the schema so you have to be a member of the schema admin group. To me, this is the only answer to the question. Adding Admin1 to the schema group is ensuring that Admin1 can install a Windows Server 2012 R2 DC where one didn’t exist before.
adprep.exe is not necessary as it is included in dcpromo for Windows Server 2012. Neither will running adprep.exe ensure anything for Admin1.
If I had to pick two, I guess adprep.exe would be one of them.
0
0
Adprep.exe commands run automatically as needed as part of the AD DS installation process on servers that run Windows Server 2012 or later. The commands need to run in the following cases:
Before you add the first domain controller that runs a version of Windows Server that is later than the latest version that is running in your existing domain.
0
0
Adprep runs automatically when promoting 2012R2 to a DC, but my thought process here is that if user1 is only a DOMAIN ADMIN, will that be enough for the 2012R2 promotion to upgrade the schema? Or do they need to be a schema admin as well? Another way of looking at this is that the SCHEMA Master role is a forest FSMO role. Therefore would domain admin be enough to allow changes to a Forest role, or would it require Enterprise admin permissions if they were not assigned specific schema rights?
I am not sure and I don’t have the time to test this in a lab, but I think the correct answer is G because I don’t think being a domain admin is enough permission for the schema to be modifed.
0
0
Took the exam recently and there was no adprep.exe. They replaced it with: set-addomainmode cmdlet
3
1