Solved

Windows 2003 Transfer of FMSO Roles and GC - Advice needed

Posted on 2007-03-29
6
2,689 Views
Last Modified: 2008-05-31
We have a small network, with one Windows 2003 R2 based Active Directory DC. The controller generally works fine, but due to some other issues with the Server (that I won't bother you with here) I want to transfer all the FMSO roles and switch global catalogue to another Server, then demote this Server and format it for other uses. I've joined the New Server to the Domain as a DC, and have all the MS white papers on how to transfer the roles and switch on Global Catalogue on this new Server.

However, have I missed anything? Is there anything more than the 5 x FMSO roles (Schema Master, Domain Naming Master, Infrastructure Master, RID Master and PDC Emulator) & GC that need consideration?

I await any useful advice someone might be able to offer :)

Many thanks,

Bluemercury
0
Comment
Question by:bluemercury
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
6 Comments
 
LVL 33

Accepted Solution

by:
Busbar earned 500 total points
ID: 18814870
Be sure the replication is completed and DNS is working correctly then you will be fine.
also be sure that clients will point to the new server in the DNS section from the TCP/IP properties ir change the IP of the new server to be as the old IP

and you will be fine
0
 
LVL 1

Author Comment

by:bluemercury
ID: 18814934
Many thanks for your prompt reply busbar - in terms of DNS working correctly, I'm setting up DNS on the new Server to hold a replicated copy via AD - I assume this is ok?

Yes, no worries about the IP thing - this is going be done over a weekend, and this new Server will ultimately be given the IP address of the old one, so all the clients will fall in line. I use DHCP anyway, so if things do change, a refresh of the clients will sort that.

Thanks again - any further help welcomed!!

Bluemercury
0
 
LVL 1

Author Comment

by:bluemercury
ID: 18818138
Ok, I went ahead and did all the FSMO role changes and GC change. It all seems to work well. However, when I go into DNS on the new sole Domain Controller, I note it still contains AD relevant records that shoudln't be there - the old Server is till listed as a DC as one example. Is it safe for me to remove such records that pertain to the old server?

Many thanks.
0
Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

 
LVL 33

Expert Comment

by:Busbar
ID: 18821910
the DC will still be listed until you remove it using the DCPROMO on the old server, don't remove the server my disconnecting it, run dcpromo and if the command failed use dcpromo /forceremoval
0
 
LVL 1

Author Comment

by:bluemercury
ID: 18822334
Thanks for your post. Sorry I didn't outline everything I've done - I have already successfully run Dcpromo on the old Server, and demoted it without any issues. It claimed to be a sucess, and returned to being a member Server on the domain.

So you see, why didn't this process remove the DNS records that relate to the old Server as a domain controller? There were LDAP records, DC records and all sorts in there. As I'm working with a test network, I've manually removed these now - do you reckon this i ok?

Many thanks
0
 
LVL 1

Author Comment

by:bluemercury
ID: 19138614
Didn't receive any further posts - all worked out fine though. Server ran great after transfering the roles to and forth from various servers, till I had the setup I wanted. Ultimately your first answer was correct about me being fine with the FSMO role transfers I suggested - I just had to make those DNS changes myself at the end of it all (it seems when I've tried dcpromo and demoted servers on other networks since that the DNS entries for demoted DCs always get left behind - is there any tool to clean this up?) I will award the points.

Thanks for your help!

Best wishes,

Bluemercury
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains the steps required to use the default Photos screensaver to display branding/corporate images
Here's a look at newsworthy articles and community happenings during the last month.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question