Solved

FSMO Question

Posted on 2008-06-20
10
353 Views
Last Modified: 2010-04-18
Our Windows 2003 Domain Controller (the first in the forest, so I assume it has all the FSMO's on it) is running as both a DC and an Exchange server.  Since we do not want to rip off Exchange, we have decided to build a separate server, dcpromo it, and then move the FSMO's off to the new DC from the old DC/Exchange box.  Any problem in doing this? Would I be using the NTDSUTIL command?
0
Comment
Question by:cytogenadmin
10 Comments
 
LVL 70

Accepted Solution

by:
KCTS earned 500 total points
ID: 21831684
Exchnage will not like it one little bit if you DCPROMO the server it is on and make it so its not a DC anymore. Exchange on a DC is always a proplem - hense all the advice NOT to do it

If you want to add a second DC and move the FSMO roles - fine but its not going to achieve much.
- You can use the GUI - no need to use NTDSUtil http://www.petri.co.il/transferring_fsmo_roles.htm
0
 

Author Comment

by:cytogenadmin
ID: 21831756
What kind of problems can we run into with running DCPROMO on the Exchange server?  Would you recommend moving Exchange and leaving the DC alone?
0
 
LVL 3

Expert Comment

by:Rikketyrik
ID: 21831772
I have successfully promoted/demoted a DC with Exchange using the standard DCPROMO. However, I may have been lucky. I would tread lightly and make sure you have good backups and a no plans for the weekend before proceeding.

Don't forget to transfer the Shema Master role. (Extra steps to do so).
0
Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

 
LVL 70

Expert Comment

by:KCTS
ID: 21831781
It will break !

You only course of action is to install exchnage on another server, member server not a DC, migrate the mailboxes to the new exchnage server then remove exchnage from the orginal server.
0
 
LVL 13

Expert Comment

by:TheCapedPlodder
ID: 21831784
KCTS is right.  Do not DCPROMO the Exchange server back to be a member but I gather you aren't planning to do this anyway.

You are correct in that you can add a second DC and transfer the FSMO roles either by NTDSUTIL or through the MMC.

A few thoughts to share:

Ensure the new DC is also a GC.
Install DNS on the new DC and if you haven't already done so convert your DNS zones to be AD integrated.  Once this is done you can repoint all your clients to the new DNS server for primary DNS and use the exisiting DNS server as a secondary.
If the current DC is also running DHCP or WINS consider moving these functions to the new server.

Anything else you need, just shout.

Cheers,

TCP
0
 
LVL 3

Expert Comment

by:Rikketyrik
ID: 21831793
Moving Exchange would probably be the easiest and safest route to go with. That way you have Exchange on a clean machine. You will also have two clean DCs as well.

Before moving I would bring up the second DC and transfer the FSMO roles.
0
 
LVL 70

Expert Comment

by:KCTS
ID: 21831813
if you go to all the trouble of moving exchange PLEASE DON'T put it on another DC - that will achive ZERO
0
 
LVL 3

Expert Comment

by:Rikketyrik
ID: 21832115
Agreed. You are looking at 3 machines total.
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
In a recent question (https://www.experts-exchange.com/questions/28997919/Pagination-in-Adobe-Acrobat.html) here at Experts Exchange, a member asked how to add page numbers to a PDF file using Adobe Acrobat XI Pro. This short video Micro Tutorial sh…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

773 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question