?
Solved

New 2003 server in NT domain

Posted on 2006-06-06
13
Medium Priority
?
241 Views
Last Modified: 2010-04-18
I have an NT domain with some NT servers and some 200 servers.  The DC is NT which handles dhcp and wins, but it is old and on its last leg.  I bought a new proliant server that I want to put 2003 server on and make the domain into a 2003 domain.  I have done some research and decided that I would put NT on the new server, make it the PDC and demote the old pdc to a bdc.  The problem is that the new proliant server will not let me install NT on it.    My goal is to get rid of the old PDC with NT on it once I have the new server with 2003 controlling the domain.  Does anyone have a recomendation for me.  Thanks!
0
Comment
Question by:jdltek
  • 6
  • 5
11 Comments
 
LVL 51

Expert Comment

by:Netman66
ID: 16846860
Yes.  Copy off all data you need from the original PDC.  Use a workstation temporarily to install NT4 as a BDC, then promote it to PDC after removing the old PDC.  Upgrade it to 2003 with DNS installed during the DCPROMO.   Make sure your DNS zones are AD Integrated.

Add your new server as a DC, install DNS and allow it to replicate from the temporary server, then transfer all the roles from the temporary server to this new one.  Don't forget to make it a GC as well.

Copy your data back that you saved from your old PDC.  Obviously, this means you should have copied it to a worksation with a large hard drive so it can be retrieved easily.  You may want to use ROBOCOPY or XCOPY to preserve any ACLs on the data.

Once the new server is stable, then DCPROMO (demote) the temporary server out of the domain.

Remove all DNS entries for the temporary server.  Remove any server object for this machine from AD Sites and Services.

You should be good to move forward now.  Make sure you DO NOT change the domain or forest functional levels from the defaults until ALL your NT4 domain controllers are gone for good.
0
 

Author Comment

by:jdltek
ID: 16861425
Is there a way to leave my existing nt domain the way it is temporarily, install 2003 server on the new server and create another domain.  Once this is done can I transfer things slowly over to the new domain and once I have everything that I want, then rename the new domain back to the old NT domain name?
0
 
LVL 51

Expert Comment

by:Netman66
ID: 16861595
You can, but renaming the domain is not a trivial job.  It can be done, but I haven't run into anyone that hasn't had some issues.  

Remember that your AD namespace doesn't need to be a public namespace.  If your domain is called "johnson" in the NT world, then name the new domain "johnsons.local" - the NetBIOS name of the domain must be different and the extension should be something non-public.

AD Namespace is only for domain functionality - nothing else.  It doesn't need to even be remotely similar to the external name.

You can install 2003 in a new Forest and Domain as a parallel installation.  The use ADMT to migrate everyone over.

I would really think twice about a domain rename after you're done.  If you hose things at that point then everything's gone.


0
Veeam Disaster Recovery in Microsoft Azure

Veeam PN for Microsoft Azure is a FREE solution designed to simplify and automate the setup of a DR site in Microsoft Azure using lightweight software-defined networking. It reduces the complexity of VPN deployments and is designed for businesses of ALL sizes.

 

Author Comment

by:jdltek
ID: 16861797
I am having trouble with setting up a two way trust between the NT domain and the 2003 domain.  On the NT side it lets me add the 2003 domain in the "trusting domains", but when I try to add the 2003 domain as a "trusted domain" it says the domain controller can not be contacted.  Any suggestions?
0
 
LVL 51

Expert Comment

by:Netman66
ID: 16862088
You may need to add the other domain to an LMHOSTS or HOSTS file (or both).

You need perfect resolution to make this work.

0
 

Author Comment

by:jdltek
ID: 16863056
Is it possible to reload 2003 on the new server, make it a member server in the existing NT domain, then copy data and all security information to it from the existing PDC?  Then promote it to be the PDC of the existing network?
0
 
LVL 51

Expert Comment

by:Netman66
ID: 16864417
No.

A 2003 cannot participate in an NT4 domain as a domain controller.  As a member, yes, but that doesn't help you out much.

0
 

Author Comment

by:jdltek
ID: 16864446
Can I promote it to the PDC at a later time after it is already a member?
0
 
LVL 51

Accepted Solution

by:
Netman66 earned 2000 total points
ID: 16864664
No.

The idea of PDC and BDC have long since gone since Windows 2000.  All Domain Controllers are peers now.  In order for the new server to populate AD from the domain (assuming it was already AD) is for it to join using DCPROMO and become a DC (thereby getting a copy of the AD).

With NT4, there is no AD and DCs must be installed originally as a BDC first then promoted if needed.  Since 2003 server must have DCPROMO run on it to become a DC, there must also be AD available for it to become part of.  

You only have 2 choices :

1)  Parallel installation and use ADMT to migrate.
2)  Install a new BDC, sync it, remove it from the network (as a roll back), upgrade the PDC, join the new 2003 server to it and transfer all the roles to it and make it a GC.  Install DNS on the new server to get a copy of the zones from the old server.  DCPROMO the old server out cleanly.  Clean up DNS.

The new BDC you removed can then be reformatted as it is no longer needed if the upgrade was successful.

These may help you:
http://support.microsoft.com/kb/326209/en-us

http://support.microsoft.com/kb/815332/en-us
0
 

Author Comment

by:jdltek
ID: 16873018
Thanks for the suggestions.  I will try it and let you know what happens.  Thanks!
0
 

Author Comment

by:jdltek
ID: 16912557
I have not had a chance to try it yet.  There has been no sufficient downtime yet.  I will update you soon.  Thanks.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an anti-spam), the admin…
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question