Windows Server - Upgrading W2K domain Controllers

Asked By Jordan
17-Nov-09 04:01 PM
My network is two W2K DCs and several W2003 servers.  If I already have
Windows 2003 servers (not set as DCs) and I also have an Exchange 2003
server can I just replace my two W2K DCs by running dcpromo on a couple of
my 2003 servers and set them up as Global Catalogs?
PDCEmulator
(1)
Database
(1)
Controllers
(1)
Catalogs
(1)
Trainer
(1)
Windows
(1)
Domainhierarchie
(1)
Manualpeerlist
(1)
  Meinolf Weber [MVP-DS] replied to Jordan
17-Nov-09 08:49 PM
Hello Jordan,

Basically yes, BUT check this one first, just to be sure even that you are
running exchange 2003:
http://support.microsoft.com/?id=314649

Do not promote a 2003 server when exchange is installed on it.

If it does not occur, you can upgrade the domain for the new schema with adprep
commands.

See here for details:
!!!NEVER START BEFORE HAVING CREATED AND TESTED A BACKUP OF YOUR DATA/MACHINE!!!

- On the old server open DNS management console and check that you are running
Active directory integrated zone (easier for replication, if you have more
then one DNS server)

- run replmon from the run line or repadmin /showreps (only if more then
one DC exist), dcdiag and netdiag from the command prompt on the old machine
to check for errors, if you have some post the complete output from the command
here or solve them first. For this tools you have to install the support\tools\suptools.msi
from the 2000 or 2003 installation disk.

- run adprep /forestprep and adprep /domainprep from the 2003 installation
disk against the 2000 server, with an account that is member of the Schema
admins, to upgrade the schema to the new version

- Install the new machine as a member server in your existing domain

- configure a fixed ip and set the preferred DNS server to the old DNS server
only

- run dcpromo and follow the wizard to add the 2003 server to an existing
domain

- if you are prompted for DNS configuration choose Yes (also possible that
no DNS preparation occur), then install DNS after the reboot

- for DNS give the server time for replication, at least 15 minutes. Because
you use Active directory integrated zones it will automatically replicate
the zones to the new server. Open DNS management console to check that they
appear

- if the new machine is domain controller and DNS server run again replmon,
dcdiag and netdiag on both domain controllers

- if you have no errors, make the new server Global catalog server, open
Active directory Sites and Services and then double-click sitename, double-click
Servers, click your domain controller, right-click NTDS Settings, and then
click Properties, on the General tab, click to select the Global catalog
check box (http://support.microsoft.com/?id=313994)

- Transfer, NOT seize the 5 FSMO roles to the new Domain controller (http://support.microsoft.com/kb/324801)

- after transfer of the PDCEmulator role, configure the NEW PDCEmulator to
an external timesource and reconfigure the old PDCEmulator to use the domainhierarchie
now. Therefore run on the NEW "w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
/reliable:yes /update" where PEERS will be filled with the ip address or
server(time.windows.com) and on the OLD one run "w32tm /config /syncfromflags:domhier
/reliable:no /update" and stop/start the time service on the old one. All
commands run in an elevated command prompt without the quotes.

- you can see in the event viewer (Directory service) that the roles are
transferred, also give it some time

- reconfigure the DNS configuration on your NIC of the 2003 server, preferred
DNS itself, secondary the old one

- if you use DHCP do not forget to reconfigure the scope settings to point
to the new installed DNS server

- export and import of DHCP database (if needed) (http://support.microsoft.com/kb/325473)

- backup WINS (http://technet.microsoft.com/en-us/library/cc727901.aspx)

- restore WINS (http://technet.microsoft.com/en-us/library/cc727960.aspx)


Demoting the old DC (if needed)

- reconfigure your clients/servers that they not longer point to the old
DC/DNS server on the NIC

- to be sure that everything runs fine, disconnect the old DC from the network
and check with clients and servers the connectivity, logon and also with
one client a restart to see that everything is ok

- then run dcpromo to demote the old DC, if it works fine the machine will
move from the DC's OU to the computers container, where you can delete it
by hand. Can be that you got an error during demoting at the beginning, then
uncheck the Global catalog on that DC and try again

- check the DNS management console, that all entries from the machine are
disappeared or delete them by hand if the machine is off the network for ever

- also you have to start AD sites and services and delete the old servername
under the site, this will not be done during demotion

Best regards
  Ace Fekay [MCT] replied to Jordan
17-Nov-09 07:10 PM
Hi Jordan,

SBS configuration is controlled by it is CIECW wizard. As Meinolf said, you
are better off posting this to the SBS group for the SBS gurus to help.

I cross-posted it for your convenience. Just check back here for responses,
since cross-posting allows multiple responses with one post.


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.
Create New Account
help
controller that I need to replace. It is running Server 2003. The other two Domain controllers are also running Server 2003. All fsmo roles have been transferred to another domain controller, and all domain controllers are running integrated dns. The new domain controller has to have the same name and few days before doing anything else. 3. Run Adprep on one of the remaining domain controllers with the server 2008 dvd. 4. Change the name and IP address of the new not I would appreciate any suggestions. Thanks. Windows Server Active Directory Discussions Active Directory (1) PDCEmulator (1) Database (1) Metadata (1) Remants (1) Windows (1) Trainer (1) Adprep (1) You should transfer the errors. After adding the new DC move the 5 FSMO to it, that way(when PDCEmulator FSMO comes to 2008) a new security group is created, Terminal server license servers, for the Metadata Cleanup procedure just to check if it is reference remains in the AD database. Cleanup (Metadata Cleanup) the AD database from the crashed DC How to remove data in Active Directory after an unsuccessful domain
Active Directory Discussions Windows Server 2003 (1) Windows 2008 Server (1) Windows Server 2008 (1) PDCEmulator (1) Database (1) ControllerIf (1) MesNews (1) Directory (1) Howdie! Carl schrieb: By writing "native mode" - - you 2008 to existing 2003 domain - Petri.co.il forums I have 2 windows 2003 domain controllers and I want to upgrade them to windows server 2008. What is correct sollution? Add and netdiag (copy the netdiag from the 2003 to 2008, will work) on both domain controllers - Transfer, NOT seize the 5 FSMO roles to the new Domain controller (http: / / support.microsoft for 2008), FSMO should always be on the newest OS DC - after transfer of the PDCEmulator role, configure the NEW PDCEmulator to an external timesource and reconfigure the old PDCEmulator to use the domainhierarchie now. Therefore run on the NEW "w32tm / config / manualpeerlist:PEERS / syncfromflags to point to the new installed DNS server - if needed export and import of DHCP database for 2008 choose "netshell dhcp backup" and "netshell dhcp restore" command (http: / / technet.microsoft.com
Win 2008 Windows Server I have the need to upgrade all existing Win 2k3 domain controllers (3) to Win 2008 DC. The reason is that W2K3 AD will not allow us 1) Windows Server 2008 (1) Windows Server 2003 (1) Active Directory (1) MOSS 2007 (1) PDCEmulator (1) Database (1) CSci (1) Hello Bill, If i understand your environment correct the DCs are "only and netdiag (copy the netdiag from the 2003 to 2008, will work) on both domain controllers - Transfer, NOT seize the 5 FSMO roles to the new Domain controller (http: / / support.microsoft for 2008), FSMO should always be on the newest OS DC - after transfer of the PDCEmulator role, configure the NEW PDCEmulator to an external timesource and reconfigure the old PDCEmulator to use the domainhierarchie now. Therefore run on the NEW "w32tm / config / manualpeerlist:PEERS / syncfromflags to point to the new installed DNS server - if needed export and import of DHCP database for 2008 choose "netshell dhcp backup" and "netshell dhcp restore" command (http: / / technet.microsoft.com
domain. I am not suhe wether is it good idea. JN Windows Server Migration Discussions PDCEmulator (1) Database (1) Windows (1) Domainhierarchie (1) Manualpeerlist (1) Syncfromflags (1) Connectivity (1) Controllers (1) Hello JN, Yes, you can do it. But personal i am against inplace upgrades and netdiag (copy the netdiag from the 2003 to 2008, will work) on both domain controllers - Transfer, NOT seize the 5 FSMO roles to the new Domain controller (http: / / support.microsoft for 2008), FSMO should always be on the newest OS DC - after transfer of the PDCEmulator role, configure the NEW PDCEmulator to an external timesource and reconfigure the old PDCEmulator to use the domainhierarchie now. Therefore run on the NEW "w32tm / config / manualpeerlist:PEERS / syncfromflags to point to the new installed DNS server - if needed export and import of DHCP database for 2008 choose "netshell dhcp backup" and "netshell dhcp restore" command (http: / / technet.microsoft.com