[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now


Moving Domain Controller to another box.

Posted on 2006-05-01
Medium Priority
Last Modified: 2010-05-18
Hi,  we need to move a DC  from one box to another.
The DC2 has also DHCP and WINS servers running.
There is anotehr , working DC (named DC1)o n the network that is working , serving clients and repricating with DC2.
What is the best prattice to perform the move without (m)any complications?

I plan to:

1.Promote the new box to a domain controller ( let's say DC3).
2.Stop DHCP service on DC2   ( DC1 is also a DHCP - it will serve the clients)
3.Stop the WINS on DC2
4.Transfer to DC1 any server roles that DC2 might have.
5.After replication is finished , demote DC2.

What am i missing? Any suggestions for a better plan/strategy?

What do I do about transfering the DHCP and wins services?
How do I let the new DC3 know about address leases , reservations etc. that existed on DC2?

I appreciate your input.

Thank you.

Question by:RICuser
LVL 51

Accepted Solution

Keith Alabaster earned 1600 total points
ID: 16578352
introduce the new DC and add in DNS & forwarders, dhcp & wins etc. Let it settle down.

reduce the scope range on the existing DHCP and create the same scope on the new server but without overlapping. ( - 127) on server one and .128-.254 on the new. on the second half of the scope put in the wins, dns entries etc on the new server, not the original. If you can't do this then you may have to do the move out of hours or at the weekend.
move the FSMO roles from the existing server to either of the other two DC's (new or other existing)
move printers/services to the new.
relocate any profiles/data shares etc
settle it down and check replication is operational.
shutdown the dhcp and wins on the first box and then dcpromo it down
amend the dhcp scope on the new box to cover the whole subnet range

LVL 17

Expert Comment

by:Dushan De Silva
ID: 16579313
Using this artical
Backup the CA Configuration,
Uninstall the CA,
Do the Domain Rename,
Install the CA,
Restore the CA Configuration.
LVL 51

Expert Comment

by:Keith Alabaster
ID: 16579383
No offence Dushan but what on earth has a Certificate Authority got to do with moving a system from one DC to another? Have you made this post in error?
New Tabletop Appliances Blow Competitors Away!

WatchGuard’s new T15, T35 and T55 tabletop UTMs provide the highest-performing security inspection in their class, allowing users at small offices, home offices and distributed enterprises to experience blazing-fast Internet speeds without sacrificing enterprise-grade security.


Expert Comment

ID: 16609030

There is a plethora of information here. I am sure there is a document buried in there that will show you the exact step-by-step procedure. Unfortuantely I cannot research this for you right now because I have to run inro a meeting. Good luck!!


Author Comment

ID: 16618563
Thanks for your detailed input keith,
but we already have the DHCP scope split between dc1 and dc2  like that DC1 -: x.x.x.127 and the other one Dc2 - from .127 to .254.

If we backup the old Dc2 DHCP database( dhcp.mdb) and then restore it on the new one( DC3) would that be ok ?

Would reducing the address lease time to , lets say, 1 hour ( just for a short time) be helpful ?
LVL 51

Expert Comment

by:Keith Alabaster
ID: 16620319
i would not use the backed up .mdb file, I'd recreate it on the new server.
Reducing your lease time down to one hour is a good idea. I assume you are doing this work out of hours in which case if someone should log on they will get a lease from your other DC. It shouldn't be that big a deal for you in truth.
LVL 51

Expert Comment

by:Keith Alabaster
ID: 16632289
Thank you :)

Featured Post

 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article is a collection of issues that people face from time to time and possible solutions to those issues. I hope you enjoy reading it.
LinkedIn blogging is great for networking, building up an audience, and expanding your influence as well. However, if you want to achieve these results, you need to work really hard to make your post worth liking and sharing. Here are 4 tips that ca…
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

872 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question