Proper way to DC promo

[BobSchleicher]

Currently we have 2 DC's running windows 2000 and I am going to install windows 2003 on to 2 new servers and would like to retire the 2 original DC's.

My take is install the 2 new servers and make them DC's and then DCPROMO one of them to sieze the FSMO roles. Once that is complete I can take the 2 old DC's off line.

I would like some opinions on the direction to take.

Thanks,

BobSchleicher

 

[djtech2k]

I think you will need to add the 2003 servers to the 2000 domain. Then run forestprep/domainprep. Then I would add the 2003 machines as DC's. Once that is complete, then you should transfer the FSMO roles to the 2003 boxes. The last step should be DCPromo of the 2000 boxes.

Also make sure your DNS environment is correct before you dcpromo the old ones.

I think that should work. If anyone sees a missed step, let me know.

 

[kmkeshav]

1. Introduce new Windows Server 2003 servers as member servers.

2. Run ForestPrep and DomainPrep on an existing Windows 2000 Domain Controller.

3. Promote one of the new Windows Server 2003 servers as Domain Controller.

4. Transfer the FSMO roles one by one to the new Windows Server 2003 Domain Controller.

5. Promote the other new Windows Server 2003 as Domain Controller.

6. After you ensure everything is working fine, you demote your Windows 2000 Domain Controllers one by one.

-Keshav

 

[BobSchleicher]

kmkeshav,

Regarding #2 - I am running ForestPrep and DomainPrep from the Windows 2003 server, correct?

Regarding #6 - Why demote the original and not just take them offline? Is is just good practice or doing it this way insures nothing was missed?

BobSchleicher

 

[djtech2k]

You need to run dcpromo on those old DC's BEFORE taking them offline. If you do not, you will have all sorts of replication errors and all kinds of garbage NTDS data left behind.

 

[kmkeshav]

#2----You have to prepare your forest and domain to hold Windows Server 2003 Domain Controllers. This is done by running DOMAINPREP and FORESTPREP. It is recommended to run this on an existing Domain Controller (in your case it is a Windows 2000 Domain Controller) which holds the SCHEMA MASTER and INFRASTRUCTURE MASTER roles. If you don't to this, DCPROMO on the new Windows Server 2003 computer will fail.

#6----If you don't want your Windows 2000 Domain Controllers in your domain anymore, you have to demote them properly. Once you demote them, they will become member servers of the domain. After this you can take these computers out of domain by joining them to a WORKGROUP.

Please post back if you have more questions.

-Keshav

 

[58sniper]

Make sure you make the 2003 boxes GCs, and make sure you transfer any other services such as DNS, DHCP, WINS, etc.

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt