HELP!!! Transferring user, computer accounts groups and shares

[WilliamUT]

is there a way to save all the users and computer accounts (with ssid) and transfer them to another server? and the shares etc? i have tried using LDIFDE and i keep getting the error : access to this attribute is not permitted because the attribute is owned by the security accounts administrator (SAM) and it wont even attempt it....our boot sector on our server is hosed and lost all the parity on our raid 5 drives and were scared the server is going to crash for good so were trying to transfer everything to another server with the same domain name so people can just log into that (without us having to go to each pc and rejoin the domain) thanks

 

[tcambridge]

Have you tried to stand up a new server and make it a domain controller? You can transfer all of the roles to the new server and then demote the bad server.

If you need more details, let me know.

Good Luck!

Tim
Certified AND Qualified

 

[WilliamUT]

yes we have a second server that is replicated...were just worried if we demote the 1st bad server we might lose everything...

 

[GrnEyedLdy]

WilliamUT,

If you correctly demote the first server any FSMO roles left on it should be transfered during the demotion. If the 'first server' was the only Global Catalog server in the Domain, this roles should also be transfered during demtion. However, if you want to you can manually make the other DC in your Domain a Global Catalog server by opening Active Directory Sites and Services, then right-clicking the server and choosing NTDS settings. Right-click and choose Properties. There is a check box to make this DC a Global Catalog server.

Hope this helps,

Patty

 

[Breakerfall]

1º check what roles are assigned to the first server,
2º seize the roles when sitting on the new server.

NOTE: that will kill the first server, use w/ care.
for full information, search for

Microsoft Knowledge Base Article - 255504

like always,
keep us posted.


Breakerfall
®º°¨¨°º can you ping me now...GOOD! º°¨¨°º®

 

[WilliamUT]

another question...is it possible to replicate files and shares?

 

[Breakerfall]

For Shares:
Only shares created in AD (e.g. inside an OU) will replicate automatically with other domain controllers.

For Files:
If you are usings DFS links with their respective Replicas configured for automatic replication, files will replicate, yes.


Breakerfall
®º°¨¨°º can you ping me now...GOOD! º°¨¨°º®

 

[tcambridge]

If you are using the same directory structure, you can copy the registry key containing the share information from the bad server to the good server. But this will ONLY work if you use the same directory structure.

Assuming you have your files on the same drives as the original server, you can export the following registry key from the old server:

HKLM\System\CurrentControlSet\Services\lanmanserver\Shares

This will export all of the shares you created on the original server (not the default admin shares that Windows creates). Your share and NTFS permissions will be included as well so you don't have to grant access again to those users.

Import the registry file into the new server and restart the server service.

Good Luck!

Tim
Certified AND Qualified

 

[JefferyUT]

We ran dcpromo on the First server and it failed to demote. We also transfered the FSMO and this failed to transfer the server. We have both servers on the same domain every thing is replicating to the Second server that we want to transfer the system to and it still won't seize control. Any ideas?

(-: