How to change server from one domain to another?

Hi,

- I have an old  Windows 2000 file server on domain1
- I need to mount a new server with Wndows 2003 in domain2

Basically, I need to tranfer all files from old server to the new server with the same securities and shares. The server will keep the same IP and name.

Which steps should be used to proceed?
LVL 1
SAM2009Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

connectexCommented:
You didn't mention weather this was a domain controller (DC) or not. If it's a domain controller you'll need to do a 'dcpromo' to remove it from the first domain. If it's the only domain controller then it will destory the domain and any systems referencing it will need to be joined to another domain. If it's not a DC then it's a simple. Move it to a workgoup and then join it to the new domain. While I haven't don't this in a while, it shouldn't remove the shares but most or at least some of the file security will be removed. This is because security is based on security identifiers (SIDs). SIDs are unique for each object and will not be resolved properly once it's moved to the new domain. So even through you may have a user Mary in both domains. The two SIDs will not match and therefore the security copied to the new server will be using the 2000's server domain SID and not the SID for the 2003 domain. The one way I've avoid this is by being over the Active Directory Services (ADS) via concepts like a "Swing Migration". Backup software may also resolve the older SIDS to the new domain SID equilivents but I'm not completely sure.
0
Mike KlineCommented:
If the server is not a DC and a file server you have various options, rich copy is a decent program   http://blog.joeware.net/2009/04/08/1632/

There are other free command line tools and third party apps.  We can provide more info if needed.

Thanks

Mike
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
connectexCommented:
I forgot to mention I'd recommend robocopy for the copying of the files between the servers. It's quite extensive. It's like xcopy deluxe. My favorite things are it's ability to:

1. Copy security settings
2. It doesn't stop on errors (i.e. access denied).
3. It' has a nice logging including a tee option for having output to a log file and the screen.
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

kevinhsiehCommented:
Assuming that there is no trust between the two domains you can't just copy the files to a server in a different domain and keep the permissions because the user accounts and groups are different. Why is there a new domain, and can you keep using the original domain? If you must move to a new domain, you will need to either manually apply new security to all of the files that you copy over, or you must use the Active Directory Migration Tool to maintain permissions as you copy.

http://technet.microsoft.com/en-us/library/cc974332(WS.10).aspx
0
Sajid Shaik MSr. System AdminCommented:
0
Sajid Shaik MSr. System AdminCommented:
0
SAM2009Author Commented:
Hi,

No both servers are just file server and yes there is a trust domain.
0
SAM2009Author Commented:
Also I want to just mention that is not an upgrate because the files are transferred to new server... the os will change but is mounted on a new server. Name and IP will be the same maybe except for the time the files will be copied we will use a temporary name.
0
kevinhsiehCommented:
Since there is a trust you should be able to use "robocopy \\sourceserver\share\path \\newserver\share\path /mir /copyall /r:1 /w:1"
You can run the command several times to copy over the files. After the first pass it will only copy changed files. If you put everything to the same physical paths you can export the share information from the registry and import on the new server. You can then rename both servers and be off and running.

Saving and restoring existing Windows shares
http://support.microsoft.com/kb/125996
0
connectexCommented:
Here's the robocopy command line I use for migrations:

robocopy \\source\share\path \\destination\sharepath /z /copyall /e /r:0 /w:0 /np /log:c:\logfile.txt /tee

Switches explained:

/z          = restartable. Should avoid recopying the files again if you stop the copy before it finishs.
/copyall = copies file, attributes, and security settings
/e          = all subfolders including empty folders
/r:0       = No retries
/w:0      = No waiting between retries
/np        = No per file progress. When left on the log files are huge and hard to read.
/log:      = Logs the copies output.
/tee       = Sends the output to the log and screen. So you can see what the copy is working on.
0
connectexCommented:
I forgot to mention why the log file. That way you can make sure all the content got copied. Remember robocopy won't stop on errors. So errors like access denied and path too long will be in the log file. You can search the log file for ERROR to quickly find any errors that occured.
0
SAM2009Author Commented:
For the shares what happen if the path is different on the new server? For exemple instead to have all shares on D-E-F drives we will put all on G drive.
0
connectexCommented:
After the copying, you could try exporting HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares. Modify the path locations and importing it to the new server. You will also most likely need to reboot the server or at least restart the server service before the shares will take effect.
0
Sajid Shaik MSr. System AdminCommented:
yes connectex is right regarding shares
0
SAM2009Author Commented:
Thank you for all your suggestions!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.