Solved

Moving Domain Controller

Posted on 2010-11-29
10
491 Views
Last Modified: 2013-12-05
Hi Friends,

We have two domain controllers in office.

I need to move one of my domain controller to new office(windows 2003).

there will no connection between new and old offices.

in both places domain name will be same .

NETWORK ID will change

Wt steps i have to take.

Thanks


0
Comment
Question by:NarendraG
10 Comments
 

Expert Comment

by:sanjaj1
ID: 34236425
Once you move one of your DC to new location, Just make sure that it is working. Then change the IP address of DC & reboot the server. Try to join client machine to that domain & check whether it joins & DC is authenticating that client.
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 250 total points
ID: 34236580
When you say "there will be no connection between the new and old offices"

Does that mean there is no chance that these domain controllers will ever replicate.  DCs have to replicate within the Tombstone Lifetime  If they can never communicate then you will definitely have issues.

What do you mean when you say the network ID will change.  Are you trying to create a new domain?

One other thing is that it is highly recommended to have at least two functioning DCs in any domain (for disaster purposes)

Thanks

Mike
0
 
LVL 24

Expert Comment

by:Awinish
ID: 34236677
If i understand you correctly, you have two dc's in single site & now you want to create another site & move the other domain controller to that site.

The duration required for movement there will not be any connection & later on will be restored.
Since the dc will move to different site,so other site will have different subnet & which will require change of IP on dc.

If this is the case, its not a big deal, you can move the dc to other site but make sure both the dc's are connected before 60 days of tombstone else it will create lingering object in domain.

Changing IP is not a big deal, but take care that proper ports are open b/w both the offices along with bandwidth available for syncing both the dc's.

http://technet.microsoft.com/en-us/library/cc739015%28WS.10%29.aspx
0
 
LVL 13

Author Comment

by:NarendraG
ID: 34236712
@mkline71
@Awinish

Yes there will be no communication between old and new office domain controllers.

They both cant work as Individual domain controllers in diff locations?

i wanted to achieve above what needs to be done?

Becoz i have 50 workstations and 6 terminal servers in old office and 2 domain controllers (no exchange server)

Now i am planning to move 25 work stations , 3 T servers and one domain controller to new office

if i do this i thought i don't need to install new ADS and adding machines and servers to domain, profile copy.

i am not planning to change domain name and not planning any replication

i don't have budget to install new domain in the network :)

Thanks
0
 
LVL 24

Assisted Solution

by:Awinish
Awinish earned 250 total points
ID: 34236730
They both cant work as Individual domain controllers in diff locations?
No, because both the dc's are from same domain & FSMO roles has to be seized on one dc, so if you seize on one other will be w/o FSMO.

You can demote AD from one dc & move the server to new site & create new forest with domain.

There will not be expense but yes everything has to be reconfigured with reinstall of AD & rejoin for client computers.

Installing new domain doesn't require expense as long as you have hardware & license..:)
0
Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 
LVL 13

Author Comment

by:NarendraG
ID: 34236851
There is no other solution for this Awinish?

plz help me
0
 
LVL 24

Expert Comment

by:Awinish
ID: 34236870
Creating new domain with dcpromo is not a big deal but yes it requires some hardwork, but what you are asking is not possible in my opinion.

I have never tried to separate two dc's & seize FSMO role on both the dc which is not going to be in the same network, i doubt will it work in that way,but removing one dc from domain & getting it new AD configured is more appropriate & second each domain should have at least two dc's to avert any disaster from dc's from crash.

0
 
LVL 13

Author Comment

by:NarendraG
ID: 34245257
Hi Awinish,

Then what if i had two domain controllers in the network (windows2003)

one holding FSMO if this Domain crashed (Hardware) i had no backup .

above situation how can assign FSMO roles to second domain controller?
0
 
LVL 13

Author Comment

by:NarendraG
ID: 34245260
HOW ABOUT SEIZING FSMO ROLES ON SECOND DOMAIN?
0
 
LVL 24

Expert Comment

by:Awinish
ID: 34245268
As  i said earlier i haven't done this but you can try & see if that works. In production noone would want to carry such thing & yes you have to perform metadata cleanup also.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now