Swapping out Domain Controller hardware (need to make sure all bases are covered)

Posted on 2006-04-03
Medium Priority
Last Modified: 2008-01-09
We are getting ready to swap out or domain controller hardware and want to make sure we do this right. Right now we have 2 domain controllers, one is Windows 2003 and one is Windows 2000. We are going to keep the same names and ip addresses on these servers. I have a few questions reguaring this process.

1. Is there any certain order we should swap out the servers? Should we do the 2000 DC first?
2. Is there any reason to do an inplace upgrade on the 2000 DC before we swap out the hardware?
3. FSMO roles are spread out betwen the two DCs. We should transfer all of the roles before swapping out a server, transfer them to the new one before swapping out the remaining DC. Is this correct?
4. When we swap out the first DC is it as simple as running dcpromo and the AD info will be synchronised onto the new server? I'm assuming there will be some manual work involved.
5. What are we missing? My colleague and I have both built several domain controllers but have not done as hardware swap. This will be a learning experience for both of us.

Thanks in advance for your input.
Question by:deh5
1 Comment
LVL 33

Accepted Solution

NJComputerNetworks earned 2000 total points
ID: 16364457
I would upgrade the Windows 2000 DC to Windows 2003 just so that all DC's are Windows 2003.

This is how I would do it...but there are several ways:

1) inplace upgrade the Windows 2000 server to Windows 2003
2) Add the two new servers to the network as member servers.  
3) Run DCPROMO on both and join the existing domain
4) transfew the FSMO roles to the new servers. (http://support.microsoft.com/default.aspx?kbid=324801&product=winsvr2003 )
5) Make the new DC's GC's... and remove the GC from the old servers:  http://technet2.microsoft.com/WindowsServer/en/Library/7b1c3e1c-ef32-4b8e-b4c4-e73910575f611033.mspx
6) wait and make sure DCDIAG and DNS looks right..  Also run Netdiag ... Use replemon to verify replication...  And validate that you can create new user accounts ...and that these show up on the new DC's.
7) Add the DNS role to each DC...and any other roles that your existing DC's might have ...like DHCP or WINS.
8) point your environment to use the NEW DNS servers....including your old DC server... point these to your new DNS servers...
9) run DCPROMO on the old DC's and choose to remove the domain controller roles.

At this point, your old DC's are out of AD.  Now, delete the computer accounts for these DC's in the domain (us AD users and computers).

Now...if you want to rename these computers, you can.

Now ... if you want to change the ip of these computers, you can... but make sure that you plan for the updates of DNS, WINS, etc for you clients.  If you are using DCHP, this is very easy to accomplish.

Featured Post


Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
Integration Management Part 2
Whether it be Exchange Server Crash Issues, Dirty Shutdown Errors or Failed to mount error, Stellar Phoenix Mailbox Exchange Recovery has always got your back. With the help of its easy to understand user interface and 3 simple steps recovery proced…

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question