Prepare a forrest and domain in server 2003

Posted on 2007-11-21
Medium Priority
Last Modified: 2010-04-21
My domain controller (we only have one domain controller) is ready to die (Windows Server 2000).  I purchased a new server with Windows Server 2003 R2 to replace it. I never installed Active Directory before so I am a bit apprehensive. I started the install and received a message that said I must prepare the Forrest by using AD PREP. I decided to ask this question because I would like to do this once and do it correctly.
Can you give me some tips on installing Ad prep? Is this installed on the new server \ domain controller that I am installing Active Directory on( or is it installed on the present domain controller, which is running Windows Server 2000 on it?)  Is there somewhere I can get a systematic instruction on how this will pan out? I have limited Microsoft Active Directory use- I came from a Novell Shop. I hope someone can help...thanks!
Question by:syarmush
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
LVL 51

Expert Comment

ID: 20329240
On the 2000 DC, run ADPREP /forestprep and ADPREP /domainprep /gpprep from CD#2 of the R2 disk set.

You'll find it in \CMPNENTS\R2\ADPREP

After that's done, run DCPROMO on the R2 box and make it an additional DC in an existing domain.

Once it's a DC, make it a Global Catalog then transfer all 5 FSMO roles to it.
Install DNS - do no more as replication should populate the zones.
If your using DHCP install it on the new box and configure the scopes with the correct options (004, 005 and 006 as a minimum) but do not activate it until the old server is DCPROMO'd out of the domain.
Active the scope and Authorize the server in DHCP once that is complete.

LVL 23

Accepted Solution

ormerodrutter earned 1000 total points
ID: 20329365
It is not a complicated process at all. You can do a search on google about Upgrading or migrating from Win2000 to win2003 domain and there will be thousands of links returned.

Basically, what you need to do is simply add the w2k3 server in the domain. AD Prep is a tool included in the w2k3 installation discs (disc 2 I think) that you can run on either a member server or your w2k DC. Its purpose is only to prepare your domain to accept w2k3 server to be DC. Its actually Forest Prep and Domain Prep you need to run.

Having successfully run the AD Prep promote your w2k3 server (DCPROMO) to be a DC. It takes approx 20-30 minutes so be patient and do NOT switch off during the process. Once its done you restart your new w2k3 DC and log in as domain admin.

Assuming your DNS is AD integrated it will be replicated automatically to the new server - so I recommend you leave your new DC alone overnight and let replication occurs. You can move the DHCP database but to be honest I found it easier to configure it from scratch. Copy data using Robocopy (which copy across not only the data but all permissions as well), install printer etc etc.

Before you shut down your old w2k DC, transfer the 5 FSMO roles to the new DC and make sure you make your new w2k3 DC a Global Catalogue (Very important!!).

I would recommend leaving the old DC running as a secondary DC for a while, just in case anything go wrong. AFter a couple of week perhaps you can think about demoting it to a normal server, then whether you keep it or not it doesn't really matter.

But the most important rule is - BACKUP !!!! Make sure you have a good backup before doing this. Its rarely goes wrong but you can never bank on Microsoft product :)


Author Comment

ID: 20329566
I only have one other question, I am sure you should back-up Active Directoty before you run Ad PREP?
Is there a certain way this should be done?  When you install ADPREP should you install it offline or locally- not logged into the domin?

HOw much time does it take to run ADPREP?
Get your Disaster Recovery as a Service basics

Disaster Recovery as a Service is one go-to solution that revolutionizes DR planning. Implementing DRaaS could be an efficient process, easily accessible to non-DR experts. Learn about monitoring, testing, executing failovers and failbacks to ensure a "healthy" DR environment.


Author Closing Comment

ID: 31410397
Very Good just what I was looking for!!!!
LVL 51

Expert Comment

ID: 20329653
Kind of curious why you accepted that answer over mine....he stated exactly the same thing.

LVL 23

Expert Comment

ID: 20333384
You need to backup the System State data on the DC.

ADPrep is a tool that you run IN your domain. So you must run it either on your existing DC or on the new w2k3 server after it has joined the domain.

ADPrep shouldn't take that long, I would say 5 minutes max.

Netman - I agree with your opinion but I guess he likes my answer more as I given him more info?

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
Let's recap what we learned from yesterday's Skyport Systems webinar.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Suggested Courses

719 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question