Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Windows 2003 Transfer of FMSO Roles and GC - Advice needed

Posted on 2007-03-29
6
Medium Priority
?
2,702 Views
Last Modified: 2008-05-31
We have a small network, with one Windows 2003 R2 based Active Directory DC. The controller generally works fine, but due to some other issues with the Server (that I won't bother you with here) I want to transfer all the FMSO roles and switch global catalogue to another Server, then demote this Server and format it for other uses. I've joined the New Server to the Domain as a DC, and have all the MS white papers on how to transfer the roles and switch on Global Catalogue on this new Server.

However, have I missed anything? Is there anything more than the 5 x FMSO roles (Schema Master, Domain Naming Master, Infrastructure Master, RID Master and PDC Emulator) & GC that need consideration?

I await any useful advice someone might be able to offer :)

Many thanks,

Bluemercury
0
Comment
Question by:bluemercury
  • 4
  • 2
6 Comments
 
LVL 33

Accepted Solution

by:
Busbar earned 1500 total points
ID: 18814870
Be sure the replication is completed and DNS is working correctly then you will be fine.
also be sure that clients will point to the new server in the DNS section from the TCP/IP properties ir change the IP of the new server to be as the old IP

and you will be fine
0
 
LVL 1

Author Comment

by:bluemercury
ID: 18814934
Many thanks for your prompt reply busbar - in terms of DNS working correctly, I'm setting up DNS on the new Server to hold a replicated copy via AD - I assume this is ok?

Yes, no worries about the IP thing - this is going be done over a weekend, and this new Server will ultimately be given the IP address of the old one, so all the clients will fall in line. I use DHCP anyway, so if things do change, a refresh of the clients will sort that.

Thanks again - any further help welcomed!!

Bluemercury
0
 
LVL 1

Author Comment

by:bluemercury
ID: 18818138
Ok, I went ahead and did all the FSMO role changes and GC change. It all seems to work well. However, when I go into DNS on the new sole Domain Controller, I note it still contains AD relevant records that shoudln't be there - the old Server is till listed as a DC as one example. Is it safe for me to remove such records that pertain to the old server?

Many thanks.
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 33

Expert Comment

by:Busbar
ID: 18821910
the DC will still be listed until you remove it using the DCPROMO on the old server, don't remove the server my disconnecting it, run dcpromo and if the command failed use dcpromo /forceremoval
0
 
LVL 1

Author Comment

by:bluemercury
ID: 18822334
Thanks for your post. Sorry I didn't outline everything I've done - I have already successfully run Dcpromo on the old Server, and demoted it without any issues. It claimed to be a sucess, and returned to being a member Server on the domain.

So you see, why didn't this process remove the DNS records that relate to the old Server as a domain controller? There were LDAP records, DC records and all sorts in there. As I'm working with a test network, I've manually removed these now - do you reckon this i ok?

Many thanks
0
 
LVL 1

Author Comment

by:bluemercury
ID: 19138614
Didn't receive any further posts - all worked out fine though. Server ran great after transfering the roles to and forth from various servers, till I had the setup I wanted. Ultimately your first answer was correct about me being fine with the FSMO role transfers I suggested - I just had to make those DNS changes myself at the end of it all (it seems when I've tried dcpromo and demoted servers on other networks since that the DNS entries for demoted DCs always get left behind - is there any tool to clean this up?) I will award the points.

Thanks for your help!

Best wishes,

Bluemercury
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Here's a look at newsworthy articles and community happenings during the last month.
Active Directory can easily get cluttered with unused service, user and computer accounts. In this article, I will show you the way I like to implement ADCleanup..
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

972 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question