Solved

Move 2003 AD including GC and all FSMO to new subnet, then move Exchange.

Posted on 2009-03-30
6
447 Views
Last Modified: 2012-06-21
I have an AD2003 native environment with (2) servers at our seattle site. DC1 is the GC and all FSMO roles with AD integrated DNS. This is the one which Exchange coughs over when it's rebooted. The other server (DC2) is AD integrated DNS and DHCP server holding all the scopes for this site. I have to move both and then our Exchange Cluster (2 nodes in active/standby) to a new subnet. We will be routing between the 2 subnets until the migration is complete. The DC's are replicating with other pgysical sites across WAN links. My concerns involve the steps and sequencing for DNS reverse lookup zones, replication partners, standby partners (never designed in the first place currently) and of course, the potential for breakign Exchange. I wish I could offer more than 500 for this somehow. I've read some of the links and other solutions already. Please don't point me to MS KB's unless they truly apply to exactly my situation. Thanks all!!!
0
Comment
Question by:marksheeks
6 Comments
 
LVL 76

Expert Comment

by:arnold
Comment Utility
One you can add an IP from the new segment to each DC.  You need to at the same time configure your firewall to handle both segments.  When your data replicates, you can remove the old IP.

Are you mirating from 192.168.x.x to 172.z.x.y?
Or is the change necessitated because of a change in ISPs?
0
 
LVL 8

Accepted Solution

by:
Share-IT earned 250 total points
Comment Utility
As you are routing between the LANs there shouldn't be any issues with simply changing the ip addresses on the DC's. Just make sure that you do one at a time. Obviously you need to be awake as you'll need to update your DHCP scope with the new DNS servers etc. You'll also need to reconfigure your switches that have your IP Helpers so you don't break DHCP. but that's about it. The beauty of DNS is that you can change IP's as most systems look for a name.
As for adding additional IP addresses that's really not a good idea ad multi-homing DNS servers and DCs is generally considered a no-no.
Another alternative if you don't want to risk it (i've done it loads of time and never had issues so wouldn't worry), is to build a new DC with DNS, DHCP, etc. Then migrate the FSMO roles gracefully and make it a GC. Point the OAB and RUS servers (in exchange) to the new DC and then do as you please with the other DCs.
As for the Exchange Cluster just change the IP addresses of the nodes 1st then change the Virtual IP. here's a link for re-iping a cluster - i know you didn't want links but this applies. ;)
http://technet.microsoft.com/en-us/library/aa997813(EXCHG.65).aspx
0
 

Author Comment

by:marksheeks
Comment Utility
Awesome, thank you!
Is ther a preferred sequence to FSMO roles and/or should GC be enabled first please? Do you have an opinion. My impression is that the sequence does not matter.
Also, is it necesary to do anything in sites/svcs? Recommend any command line tools for verifying replication, GC operation? Thanks pal.
0
Want to promote your upcoming event?

Is your company attending an event or exhibiting at a trade show soon? Are you speaking at a conference? Spread the word by using a promotional banner in your email signature. This will ensure your organization’s most important contacts are in the know.

 

Author Comment

by:marksheeks
Comment Utility
to answer arnolds questions; it's all internal. we're redoing our vlans.
0
 
LVL 3

Assisted Solution

by:nskurs
nskurs earned 250 total points
Comment Utility
In a graceful transfer of an FSMO role between two domain controllers, a synchronization of the data that is maintained by the FSMO role owner to the server receiving the FSMO role is performed prior to transferring the role to ensure that any changes have been recorded before the role change.

It's always better to transfer Domain-Specific Roles first and then Forest-Specific Roles.
You can use GUI or NTDSUTIL.exe to transfer FSMO roles.

For AD replication verification between DCs use:
==================================================
repadmin /showrepl DC2.abc.com
repadmin /replsummary DC2.abc.com (This shows a summary of the replication of DC2. You can also use wildcard character to see all DCs replication status)

To Check and verify the GC promotion:
=====================================
When the account and the schema information replicate to the new global catalog server, event 1119 may be logged in the Directory Services log on the domain controller.
I means the computer is now advertising itself as a Global Catalog server.

You can use DSAdiag.exe to list all DCs and GCs.....

- Cheers!


0
 

Author Comment

by:marksheeks
Comment Utility
thanks all. Very helpful! Again, I wish I had more points.
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

Synchronize a new Active Directory domain with an existing Office 365 tenant
Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now