How can I split two domain controllers 2000 and 2003

Posted on 2009-02-09
Last Modified: 2013-12-05
Hello,  Can someone let me know what I need to do in this situation.

I used to have two server on my network. Win2k DC and Win2003 DC.  Win 2000 DC was the main domain controller.  Both servers were running on one LAN on the dame domain.  I have two offices now, and need to put one of these servers in to my second office.  These offices are not going to be connected on the same domain.  

Can you please let me know what I need to to split these domain controllers, without loosing any user information.  Basically I need both of these servers to be independent main domain controllers.


Question by:mirchevsky
    LVL 58

    Accepted Solution


    The easiest way in which I can think of doing this would be to disconnect one of the DCs and move it to the new office. In each office, you can then treat the DC which moved out as a 'failed' DC, and clean up its Domain Controller account from the remaining DC's Active Directory by running a metadata cleanup: On the DC you moved which did not hold the FSMO roles, you would need to Seize those roles over to that DC:

    There are many implications to what you are doing, and this really is something I would not recommend. In doing this, if you did ever want to reconnect the two servers together in the future, one would have to be rebuilt - or at least demoted as a DC and then repromoted. You will also have two distinct copies of your Active Directory database, which will quickly move out of sync with one another as changes are made in each office. If the two sites are for the same company, the most efficient and accepted route is to link the sites by VPN and then have the two DCs act in the same domain. This is the best route.

    LVL 6

    Assisted Solution

    Here's what you have to do.

    Windows Domains after Active directory are different in that both domain controllers have the same features. That means you can just move the domain controller to the new site and it will still act as required.

    Exception is the 5 FSMO roles, which can only reside on a particular Domain controller. Since Windows 200 DC was the first to be installed. It will have all of these 5 roles, unless you had moved them. Only one FSMO role of the 5 is important here. i.e the PDC Role ( password changes for ex. are handled by this).

    If the 2 sites will be connected by high speed reliable links, then you dont have to do anything much. Else, the recommended way is to create 2 sites for each location, and create the required subnets and then move the domain controllers to the sorresponding site.
    LVL 58

    Expert Comment


    The original question asked by the Author was answered in my opinion by the two expert comments. This is despite the request being against standard best practices and recommendations, but the question was answered.


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Highfive Gives IT Their Time Back

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    My previous article  ( one possible method to get SCCM 2007 installed an…
    Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
    This video discusses moving either the default database or any database to a new volume.
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

    758 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now