Migrating to a new DC and file server

Posted on 2006-03-29
Medium Priority
Last Modified: 2012-05-05

We're replacing a DC which is also our File and Print server aka dc01.  The DC has the following roles:

Domain Controller w/DNS and DHCP management roles
All FISMO roles Except Infrastructure Master Role see below
Global Catalog Server
Backup Exec Server
File and print services

During our original upgrade to Windows 2003, we configured a workstation as our original DC (DC0), migrated user accounts from NT, than rebuilt the original server as a DC(this happens to be the server we're retiring aka DC01).  All FISMO roles were on our workstation (DC0) but were eventually moved to dc01-all but IMR.  
I was warned that the infrastructure master role should not be assigned to a DC hosting the global catalog.  If the infrastructure master and global catalog are on the same domain controller, the infrastructure master will never find data that is out of date, so it will never replicate changes.  I’m not sure if it needs to replicate changes while acting in a solo DC configuration but that leads to another discussion.  Because the Infrastructure Master Role resides on the workstation server, I've been unable (nervous is more like it) to remove the workstation from AD.  

I have several questions based on our scenario.  

1. Can I migrate all FISMO Roles to a server that is also the Global Catalog Server allowing me to retire both dc0 and dc01?

2.Once I configure our new server (FS01) as a DC, how do I migrate DNS and DHCP management roles to FS01?  In other words, if I run DCPROMO, configure FS01 as a DC change the DNS IP address to point to FS01, what happens when both dc01 & fs01 DNS servers are online-how do I properly migrate those roles to the new server?

3. Since the GPO's are configured for specific OU's, what will happen to the GPO's?  Should I be concerned with GPO's at all?

Thanks to all.  If you have any additional things to look out for, please let me know.  I just started a new position and I'm trying to plan this project as accurately as possible.  

Question by:rmjcvelez
  • 2
LVL 13

Expert Comment

ID: 16326249
One server can have all FSMO rules.  This is proven by the fact that Small Business Edition requires all FSMO on the same box.  If you make the DNS zones Active Directory Integrated, then simply installing DNS on the new server and restarting the Netlogon service will start populating the new DNS installation.  As for DHCP, unless you have reservations it might just be easier to install it and setup the scopes then turn off the old DHCP service.  The clients should refresh on reboot.
LVL 51

Accepted Solution

Netman66 earned 2000 total points
ID: 16326668
1) Yes.  In a single domain forest, you can colocated the IM and GC roles.
2)  As stated above, if the original zones are AD Integrated, then simply installing DNS on the new server will trigger replication to create and populate DNS.  As for DHCP, unless you have Reservations or lots of manual entries then simply install it and setup the scope.  
3)  GPOs are part of the SYSVOL folder structure.  The act of making the new server a DC will populate SYSVOL with all your GPOs.

Hope this helps.

Author Comment

ID: 16326746
Thanks Netman66 & eatmeimadanish!!  
The advice to separate the IM and GC came from a consultant firm-they were very persuasive in their argument.  Perhaps it's time I prove them wrong and start looking for a new firm.  

Thanks again.

LVL 51

Expert Comment

ID: 16327755
The only time you need to separate them is if there are more than one domain in the Forest.  Other than that, there is no need.


Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Please read the paragraph below before following the instructions in the video — there are important caveats in the paragraph that I did not mention in the video. If your PaperPort 12 or PaperPort 14 is failing to start, or crashing, or hanging, …
As many of you are aware about Scanpst.exe utility which is owned by Microsoft itself to repair inaccessible or damaged PST files, but the question is do you really think Scanpst.exe is capable to repair all sorts of PST related corruption issues?

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question