Home / server / Questions / 482483
Accepted
Nicolas Raoul
Asked: 2013-02-26 21:25:03 +0800 CST

ActiveDirectory domain service wizard: Prerequisites check for domain controller upgrade fails

  • 772

I want to test my software's SSO, so I am trying to configure ActiveDirectory on Windows Server 2012, following this tutorial.

At "prerequisites step", the window is supposed to look like:

enter image description here

but unfortunately I get an error:

enter image description here

Sorry for the Japanese, it says:

x The prerequisites check for the domain controller upgrade failed.
   The certificate server is installed.
i The prerequisites check is over.
x One of the above failed. Please correct and retry.

It seems that ActiveDirectory is already installed, but not configured.

Is there another way to enter the forest/domain name details, apart from this wizard?
Or should I uninstall ActiveDirectory, then restart the tutorial?

active-directory

3 Answers

  1. Best Answer

    If you have already added the Active Directory Certificate Services before promoting it to a Domain Controller, remove the Certificate Services role, and then add the AD DS role again.

    If the "Add Roles and Features" wizard does not allow you to remove Active Directory Certificate Services" (checkbox is greyed out), then you can remove it using the following PowerShell command:

    Remove-WindowsFeature -Name AD-Certificate

    See also: https://serverfault.com/a/717841/239616

    • 9

  2. The removal of certificates worked in my case too for clearing off the pre-requisite failure. I'm pasting a powershell command in case the GUI does not work

    PS C:\WINDOWS\system32> Remove-WindowsFeature -Name AD-Certificate
    • 0

  3. I really like the answer by Mathias R. Jessen.

    Remove-WindowsFeature -Name AD-Certificate

    as a PowerShell command; however, if the option Network Device Enrollment Service is already installed, so the above command will be not enough before uninstalling this feature:

    PS C:\> Uninstall-AdcsNetworkDeviceEnrollmentService -Force

    Now, retry Mathias's solution and would work now ;-)

    • 0