Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Moving Active Directory accounts to a new server

Posted on 2003-03-19
Medium Priority
Last Modified: 2010-04-13
Hi all,

I am planning on building a new Windows 2000 Server and I want to move all user accounts (including computer accounts) from my existing 2000 server to the new one.
Any idea on how to do this simply?

Question by:lehan
  • 2
LVL 13

Accepted Solution

rhinoceros earned 500 total points
ID: 8171184
The new server joined to the domain as Additional Domain Controller (ADC), then they will replicate all data include user account between them.

But take care it, what do you think later ? If you want to use the New Server instead of existing W2K server as PDC in AD. You must do it as following :

1. Create new DNS in new machine at first

2. Move the FSMO roles to new server

3. Set Global catalog server to the new server

4. After everything done & replcated, demote the old server out of domain.

More info




I hope it can help.  

Expert Comment

ID: 8171428
That pretty much answers it.  If you are trying to replace the server with the one you have and need to keep the name of the old server, though, the other option would be to image the drives using Symantec Ghost Enterprise or some other imaging software(difficult, but possible with RAID drives due to the sheer volume of info) and then reinstall the operating system again and it will pick up all the old info from the registry and NTDS and SYSVOL directories.  This is much more hazardous than rhinoceros's suggestion.  I don't recommend it unless you're in a hole and really need to do a "replace" of the old server...as you might waste a lot of time if the upgrade of the image doesn't work.

Of course, you WOULD have your old server around and would always be able to go back to it.

Good Luck!

Author Comment

ID: 8171533
Actually I will be taking the old server out of the domain. I am basically changing the old server due to its hardware age.

Its not really important to keep the old server name as long as changing it does not affect account logins and/or permissions.

So correct me if I am wrong:
I install W2k server on the new system (using a new comouter name)
Have it join the domain as an ADC
Then follow the 4 steps that "rhinoceros" mentioned above
Then prey to god that users can still login and everything is intact :)

I am sure that its easier said than done!
Thank you both for great answers so far.

will be rewarding the points as soon as I get little more feedback.

LVL 13

Expert Comment

ID: 8172908
Yes, it's true.

But you should give more enough time for two servers replcation before demote. Like as DNS replication, AD (Directory service / File service ) replication, license replication (each 24hrs) etc.

I think a few days time as well. (make sure 100% transferred between them), & remind the Event log for  any mistake / error will come out during this waiting period.

One more, look for two servers' "Active Directory Users and Computers", "Active Directory Sites and Services" (replcation link will appear & Global catalog setting), "DNS server" for double check before demote.

I hope it can help.


Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
The number of companies understanding the potential of IoT on B2B market is growing with each day. And yet only a small share of IoT developers have managed to equalize incomes and stay competitive in the international market.
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an anti-spam), the admin…
Look below the covers at a subform control , and the form that is inside it. Explore properties and see how easy it is to aggregate, get statistics, and synchronize results for your data. A Microsoft Access subform is used to show relevant calcul…
Suggested Courses

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question