Solved

Windows 2003 Transfer of FMSO Roles and GC - Advice needed

Posted on 2007-03-29
6
2,650 Views
Last Modified: 2008-05-31
We have a small network, with one Windows 2003 R2 based Active Directory DC. The controller generally works fine, but due to some other issues with the Server (that I won't bother you with here) I want to transfer all the FMSO roles and switch global catalogue to another Server, then demote this Server and format it for other uses. I've joined the New Server to the Domain as a DC, and have all the MS white papers on how to transfer the roles and switch on Global Catalogue on this new Server.

However, have I missed anything? Is there anything more than the 5 x FMSO roles (Schema Master, Domain Naming Master, Infrastructure Master, RID Master and PDC Emulator) & GC that need consideration?

I await any useful advice someone might be able to offer :)

Many thanks,

Bluemercury
0
Comment
Question by:bluemercury
  • 4
  • 2
6 Comments
 
LVL 33

Accepted Solution

by:
Busbar earned 500 total points
Comment Utility
Be sure the replication is completed and DNS is working correctly then you will be fine.
also be sure that clients will point to the new server in the DNS section from the TCP/IP properties ir change the IP of the new server to be as the old IP

and you will be fine
0
 
LVL 1

Author Comment

by:bluemercury
Comment Utility
Many thanks for your prompt reply busbar - in terms of DNS working correctly, I'm setting up DNS on the new Server to hold a replicated copy via AD - I assume this is ok?

Yes, no worries about the IP thing - this is going be done over a weekend, and this new Server will ultimately be given the IP address of the old one, so all the clients will fall in line. I use DHCP anyway, so if things do change, a refresh of the clients will sort that.

Thanks again - any further help welcomed!!

Bluemercury
0
 
LVL 1

Author Comment

by:bluemercury
Comment Utility
Ok, I went ahead and did all the FSMO role changes and GC change. It all seems to work well. However, when I go into DNS on the new sole Domain Controller, I note it still contains AD relevant records that shoudln't be there - the old Server is till listed as a DC as one example. Is it safe for me to remove such records that pertain to the old server?

Many thanks.
0
Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 33

Expert Comment

by:Busbar
Comment Utility
the DC will still be listed until you remove it using the DCPROMO on the old server, don't remove the server my disconnecting it, run dcpromo and if the command failed use dcpromo /forceremoval
0
 
LVL 1

Author Comment

by:bluemercury
Comment Utility
Thanks for your post. Sorry I didn't outline everything I've done - I have already successfully run Dcpromo on the old Server, and demoted it without any issues. It claimed to be a sucess, and returned to being a member Server on the domain.

So you see, why didn't this process remove the DNS records that relate to the old Server as a domain controller? There were LDAP records, DC records and all sorts in there. As I'm working with a test network, I've manually removed these now - do you reckon this i ok?

Many thanks
0
 
LVL 1

Author Comment

by:bluemercury
Comment Utility
Didn't receive any further posts - all worked out fine though. Server ran great after transfering the roles to and forth from various servers, till I had the setup I wanted. Ultimately your first answer was correct about me being fine with the FSMO role transfers I suggested - I just had to make those DNS changes myself at the end of it all (it seems when I've tried dcpromo and demoted servers on other networks since that the DNS entries for demoted DCs always get left behind - is there any tool to clean this up?) I will award the points.

Thanks for your help!

Best wishes,

Bluemercury
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

The saying goes a bad carpenter blames his tools. In the Directory Services world a bad system administrator, well, even with the best tools they’re probably not going to become an all star.  However for the system admin who is willing to spend a li…
Mapping Drives using Group policy preferences Are you still using old scripts to map your network drives if so this article will show you how to get away for old scripts and move toward Group Policy Preference for mapping them. First things f…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now