• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 202
  • Last Modified:

New Domain Controller

I have a network with 8 domain controllers using Windows Server 2003. The main domain controller is a Dell Power Edge 4600, and all other domain controllers replicate from it. I have purchased a new Dell Power Edge 2950 to replace the 4600. What procedures do I need to take to have the 2950 take over the 4600's role.
  • 2
1 Solution
This link http://support.microsoft.com/kb/324801has step-by-step methods for transferring all FSMO roles.  Of course, the new server will need to be promoted to a DC and finish replication before you transfer the roles.
This link http://support.microsoft.com/kb/324801 has step-by-step methods for transferring all FSMO roles.  Of course, the new server will need to be promoted to a DC and finish replication before you transfer the roles.
AD domain controllers act in a "multi-master" capacity, which means that you can easily add and remove domain controllers from your environment.  Some things to keep in mind when retiring an existing DC:

[1] Does it hold any of the FSMO roles? If so, transfer those roles to another DC before removing the existing DC from the network using the steps listed here: http://support.microsoft.com/kb/324801

[2] Do any existing applications reference this DC directly by name?  If so, beat your developers about the head and shoulders, as they should be using DNS lookups to locate a DC for their applications.  :-)

[3] Does the DC hold any other file shares or applications (other than Active Directory) that need to be migrated to another server before decommissioning this one?

[4] Does this DC host any application partitions or ADAM instances that are not being replicated elsewhere? If so, modify the configuration of these partitions so that they are replicated to other DCs so that no data is lost.

Once you are satisfied that the existing DC is ready to be retired, simply run dcpromo on the existing DC and choose the option to remove Active Directory from this server - do NOT select the check-box next to "This is the last domain controller in this domain."

If you are configuring the new DC with a different DNS name than the one to be retired, you can add the new DC to AD at any time. If you want to configure it with the same name as the retired DC, you'll need to wait until you've dcpromo'd the old DC out and removed it from the network. Assuming the de-promotion went smoothly, you can add the new DC with the same name by simply running dcpromo on the new server. If there were any errors in removing AD from the old server, you'll need to perform a metadata cleanup before adding the new DC using the following steps: http://support.microsoft.com/kb/216498

Hope this helps.

Laura E. Hunter - Microsoft MVP: Windows Server - Networking

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now