Migrating Active Directory 1

[CorbinMyMan]

I have a really old machine as our Domain Controller (we only have 1). I built a sweet new machine to migrate to. I've installed Win server 2003 with the latest service packs and what not.

I ran dcpromo on the new server and now I have two domain controllers. I know I'm suppose to let it replicate for at least 24 hours before decommissioning the old server and shutting it down.

I've never done a migration before. Am I doing this the right way? My OLD DC is also my DHCP and DNS server, how do I migrate these as well?

A point in the right direction would be great. Thanks!!

 

[swabs]

You are going to need to transfer all of the FSMO roles. Read up on transferring those roles. If your DNS Active Directory Integrated then you can just add the DNS role to your new server and it will transfer over the forward and reverse lookup zones. You can also export your dhcp settings from the old server and import them to the new server.

 

[markdmac]

If your DNS was AD Integrated, then it shoud already have been setup on the new server at the time you ran the DCPROMO.

Here is a KB on moving the DHCP.

http://support.microsoft.com/kb/325473/

To transfer FSMO roles look at this KB

http://support.microsoft.com/kb/324801

Before you decommision the old server you will ALSO need to set the new server up as a Global Catalog.

http://support.microsoft.com/kb/313994/en-us

When you are ready to decommision, remove the GC status. Transfer all FSMO roles. Then run DCPROMO.

I hope you find this post helpful.

Regards,

Mark

 

[CorbinMyMan]

Thats great! But how do i know if my DNS is AD integrated?
Right now the new server doesn't have DNS setup

 

[markdmac]

In DNS Manager, expand the DNS Server object.

Expand the Forward Lookup Zones folder.

Right-click the zone you created, and then click Properties.

On the General tab, the Zone Type value is set to Primary. Click Change to change the zone type.

In the Change Zone Type dialog box, click DS Integrated Primary, and then click OK.

The DNS server writes the zone database into Active Directory.

Right-click the zone named ".", and then click Properties.

On the General tab, the Zone Type value is set to Primary. Click Change to change the zone type.

In the Change Zone Type dialog box, DS Integrated Primary, and then click OK.



I hope you find this post helpful.

Regards,

Mark

 

[CorbinMyMan]

Ok using everything you just suggested, I found out that it is already setup to be Active Directory Integrated.

So now I should just install DNS on my new server and all the settings will follow from the old server?

 

[markdmac]

Yes they should.

I hope you find this post helpful.

Regards,

Mark

 

[CorbinMyMan]

Alright! I installd DNS on my new domain controller and all the settings filled in from my old dns server without a problem! Is there a time amount i should let it replicate? Or is it ok to turn off my old dns?

Thanks again! You're assistance is extremely valueable to me!

 

[markdmac]

It should replicate fully within 15 minutes if you have only 1 site. If you have a remote location leave it overnight. Otherwise my advice would be to give it an hour for a fudge factor and go ahead and remove the other server.

Before turning off the old DNS, make sure you have updated DHCP and any static IP configurations on servers and workstations to point them to the new server.

I hope you find this post helpful.

Regards,

Mark

 

[CorbinMyMan]

Ok great! This should be the last question, i just want to make sure I do this right.

I went ahead and made the new DC a Global Catalog Server like you suggested. How long does that need to replicate? Its been about 2 hours now, and I went ahead turned off the Global Catalog setting on the OLD DC. Is that good practice?

The only thing left to do now is transfer DHCP and the FSMO roles.

 

[markdmac]

You are all set. The GC part is immediate.

You should be able to proceed from here with the DHCP and FSMO moves.

Then you can DCPROMO the old server to not be a DC if you wish.



I hope you find this post helpful.

Regards,

Mark

 

[CorbinMyMan]

Excellent! Thanks for all your help Mark! I would have been lost without your guidence!!

 

[markdmac]

Happy to help. Pass it on some day when you can assist someone else.



I hope you find this post helpful.

Regards,

Mark

 

[CorbinMyMan]

I will definately do that!~

BUT
I made it to the last role to transfer, the Infrastructure tab , and when I click change it tells me

domaincontroller is a global catalog server. The infrastructure operations master role should not be transferrred to a GC server.

Do I still want to transfer this? I've never seen this error before

 

[markdmac]

If you will only have one DC then yes you want to transfer it. If you have a second DC then transfer to that server.

I hope you find this post helpful.

Regards,

Mark

 

[CorbinMyMan]

Awesome!

I've done everything you said. But is there away to see which DC is my primary domain controller? I haven't demoted my old one yet, but i wanna make sure everything has replicated and stuff before I do.

Thanks!

 

[markdmac]

You can use netdom resource kit utility.

netdom query fsmo

I hope you find this post helpful.

Regards,

Mark

 

[CorbinMyMan]

hmm well i ran that and it said that my new dc was running everything...

so i demoted the old one now it seems my dns is screwed up. I configured it on the new server, but even left the service running on the old server. but now it seems the dns isn't working right

 

[markdmac]

Please be more specific when you say "isn't working right."

What errors are you getting in the logs or on screen?

Did you flush and reregister with DNS?

ipconfig /flushdns
ipconfig /registernds


I hope you find this post helpful.

Regards,

Mark

 

[CorbinMyMan]

Yes I know I'm sorry for being vague. I was panicing a little. Its fine now. I cleared my DNS cache from the MMC on the NEW server, and shut down the old DC/DNS server.

I had to update some DNS records pointing to the new domain controller, and after that everything seemed to work.

I'm just gonna keep an eye on logfiles and what not for the week..

Thanks again for ALL your help!