troubleshooting Question

Windows 2000 DC Migration to Windows 2008 ServerProblems

Avatar of shaboyi
shaboyi asked on
Microsoft Legacy OSMicrosoft Server OSWindows Server 2008
7 Comments1 Solution492 ViewsLast Modified:
I have encountered critical problems in the migration of Windows 2000 DC to a Windows 2008 DC.   It's a dingle domain network and I want to retire the Windows 2000 Server

I followed these instructions by tigermatt:

https://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Q_23964303.html

Everything seemed to go fine..  The two DCs replicated, the FSMO roles where transferred and both DCs reported the same (via netdom query).  No errors during the process.

Everything works fine when both DCs are up - no significant events.  However as soon as I take the windows 2000 server offline, I get the following issues

1. Clients do not authenticate.  They can logon (from the cache I assume) but shares prompt for credentials.  

2. The 2008 Server AD reports Event 2092:  "This server is the owner of the following FSMO role, but does not consider it valid. For the partition which contains the FSMO, this server has not replicated successfully with any of its partners since this server has been restarted. Replication errors are preventing validation of this role.
 
Operations which require contacting a FSMO operation master will fail until this condition is corrected. "

3.  DNS reports Event 4013: "The DNS server is waiting for Active Directory Domain Services (AD DS) to signal that the initial synchronization of the directory has been completed. The DNS server service cannot start until the initial synchronization is complete because critical DNS data might not yet be replicated onto this domain controller. If events in the AD DS event log indicate that there is a problem with DNS name resolution, consider adding the IP address of another DNS server for this domain to the DNS server list in the Internet Protocol properties of this computer. This event will be logged every two minutes until AD DS has signaled that the initial synchronization has successfully completed."

4. DHCP reports Event 1059: "The DHCP service failed to see a directory server for authorization."

When I bring the old Windows 2000 Server back on line, everything is fine.  All errors go away and clients authenticate fine.

any help will be greatly appreciated!
Join the community to see this answer!
Join our exclusive community to see this answer & millions of others.
Unlock 1 Answer and 7 Comments.
Join the Community
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 7 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros