Solved

DC to PDC now or later -- that is the question

Posted on 2004-09-10
7
295 Views
Last Modified: 2010-04-14
I'm promoting a 2003 server to the PDC on my domain.
It's currently a DC.
I'd like to test an XP machine on the 2003 server as the PDC, but the users are pointing to and
using the data on the 2000 server that's currently the PDC (which will only be a DC, after I promote the 2003 server to the PDC).
So this is my question, should I make the 2003 server the PDC now, or will demoting the 2000 server while the users
are still using it adversely affect them by perhaps keeping them from accessing files.
Is it safe to make the 2003 server the PDC now - I'll be switching all of the FSMO roles over to the 2003 also.

Thanks in advance for your assistance.
0
Comment
Question by:AccessMaster
7 Comments
 
LVL 16

Assisted Solution

by:JamesDS
JamesDS earned 20 total points
ID: 12024519
AccessMaster

Under Windows Active Directory the PDC does not exist. There is a FSMO role (1 of 5 roles) that is called the PDCEmulator, but this is not the same thing.

If you wish to transfer roles, then you can do that anytime you like without adverse effect, provided you maintain connectivity between the DCs and both DCs are GCs.

So to answer your questions: If you like, no, yes, great!

Hope this helps!

Cheers

JamesDS
0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 12026209
Thanks JamesDS,,, i write that exact same thing every day in this forum.. people are stuck in NT 4.0 PDC BDC mode still for some reason.... below are some good articles that explain the placement and movement of the five FSMO roles:


http://support.microsoft.com/default.aspx?scid=kb;EN-US;223346

http://support.microsoft.com/default.aspx?scid=kb;EN-US;255690

http://support.microsoft.com/default.aspx?scid=kb;en-us;255504
0
 

Author Comment

by:AccessMaster
ID: 12026559
Thanks for the responses.

O.K. take this into consideration - maybe I should have mentioned this but I didn't think it would have a impact but maybe so
with regards to whether or not I should have a GC.

My domain is a child domain in a giant forest. And I use the DNS server that belongs to the forest.
Prior to this 2003 addition, I only had a 2000 server, but now I have 3 DC's:
The original 2000 server
A test server,
and now the 2003 server.

My original 2000 server never was a GC - I was told that it didn't need to be.
But now that I'll have 2 servers on the domain, does the 2003 server (which will soon have all of the FSMO roles) need to be the
GC for the domain. Or do I need a GC at all?
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 
LVL 25

Accepted Solution

by:
mikeleebrla earned 30 total points
ID: 12026629
I would say that you definetly need a GC somewhere.  I assume that you are in a different physical site from any other GC?  Besides that it doesn't hurt to have a DC a GC.  Also note that (as noted in article 255690) above that there is only one schema master and one Domain naming master per FORREST,,, which means that if you make your 2003 server a schema master and a domin naming master as you indicated in your above post, then this role will be REMOVED from where it is now,  which will probably piss whoever is in charge of the forrest off.  Also note that replication errors can occur if the infrastucture master is on a GC.  hope this helps
0
 

Author Comment

by:AccessMaster
ID: 12026919
O.K. I see the article where  I read to transfer the 5 roles was different from my setup - they
were updating their forest and domain. I only have administrative rights over my child domain.

So really all I need is to transfer the RID, PDC, and Infrastructure Master roles, right.


0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 12027137
to be honest im not sure.. the MS article above says "RID master, PDC emulator, and infrastructure master, are per-domain roles",,, and im not sure if they count a child domain as a domain or not.  To test this i would run "netdom query fsmo" on a DC in your child domain and see where all 5 roles are now. Then run it on a DC in your parent domain. This will tell you if these roles are held in your parent domain only,, or once in the parent domain, and once in your child domain.
0
 
LVL 18

Assisted Solution

by:exx1976
exx1976 earned 30 total points
ID: 12027598
RID, PDC, and IM are in EVERY domain, regardless of it's location the forest.  They are required in order for the domain to function.

From the sounds of his post, he can't run anything on the parent domain, since he only has administrative rights over his child domain..

If there are no other domains in your site that have a GC in them, then yes, you most definitely should have a GC or even two in your site.  I have 5 domains spread across three sites, and I have 10 GCs...  Two per domain.  I did this because I chose to make EVERY DC a GC..  If you go this route you can ignore the IM role since it is not necessary anymore.  However, I would suggest checking with the guys who maintain your parent domain before you go screwing with any of this stuff...


HTH,
exx
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
win2k service packs 5 657
VSS on host & VM 10 414
Repair old Windows 2000 boot 15 234
Device with fixed IP not seen in DHCP server manager Windows 2000 9 96
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
In threads here at EE, each comment has a unique Identifier (ID). It is easy to get the full path for an ID via the right-click context menu. However, we often want to post a short link within a thread rather than the full link. This article shows a…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question