Active Directory Migration on windows server 2008

Posted on 2011-10-04
Last Modified: 2012-06-21
I am having one customer who is using AD server 2003 his setup details are below:


Box 1 kept in bulding1
Box 2 kept in building 2

Box1 having schema master, DNS, DHCP, GC
Box 2 having DNS, DHCP, GC also may be few roles as well.

Dependent application on AD are below:

Cisco NAC (clean access)
CX and Exchange.

we have to migrate his boxes to windows server 2008. please suggest how should i proceed migration for the same.
    LVL 41

    Accepted Solution

    Upgrade the schema first, then introduce 2008 as ADC on both sites and let it replicate, move the FSMO roles to 2008 servers at site 1, verify the applications, if they are hardcoded to specific dc, change it. Change the DNS setting at member server also, so they should point to new 2008 DC's for GC, DNS etc.

    Important point WINS, WINS plays are major role, don't forget to migrate to new server, if you have separate server for WINS, as lot of application including Exchange depends to WINS. Let me know, if this helps
    LVL 39

    Assisted Solution

    by:Krzysztof Pytko
    You don't have to migrate your environment to use 2008 server as DC. You need to extend schema and the you can promote it as DC.

    For that, plese check my blog at

    after all, you may wish to transfer FSMO roles to the new DC

    When you transfer PDC Emulator role, then you have to advertise new time server in your forest

    [...]- after transfer of the PDCEmulator role, configure the NEW PDCEmulator to an external timesource and reconfigure the old PDCEmulator to use the domainhierarchie now. Therefore run on the NEW "w32tm /config /manualpeerlist:PEERS /syncfromflags:manual /reliable:yes /update" where PEERS will be filled with the ip address or server( and on the OLD one run "w32tm /config /syncfromflags:domhier /reliable:no /update" and stop/start the time service on the old one. All commands run in an elevated command prompt without the quotes. [...]

    an extract from MVP blog at

    and as the last step, you can decommission the old DC

    LVL 59

    Assisted Solution

    by:Darius Ghassem
    LVL 24

    Assisted Solution

    There are a couple of very important considerations, that you should have in mind, before you proceed with your migration scenario.
    --Check, and raise, if necessary, the Domain and Forest functional levels. You cannot upgrade directly from Windows 2000 mixed, or Windows Server 2003 interim domain functional levels.

    --The first Windows Server 2008 Domain Controller in the forest must be a Global Catalog Server, and it cannot be a Read Only Domain Controller, RODC.

    --Check the FSMO roles assignments. When you prepare the existing AD, you should run adprep /forestprep on the Schema operations master, and adprep /domainprep /gpprep on the infrastructure master.In your case as there is a single Dc you need to run on the same server.

    Steps to Install Windows 2008 R2 DC

    1.First prepare the domain.
    Insert Win 2008 R2 DVD on windows 2003 DC and execute adprep as below
    Ran D:\2008DVD\Support\Adprep\adprep32.exe /forestprep on the server holding the Schema Master role.
    Ran D:\2008DVD\Support\Adprep\adprep32.exe /domainprep /gpprep on the server holding the domain master role.
    Reference article:

    2.Install 2008 server on the new machine. You need to assign the 2008 new computer an IP address and subnet mask on the existing network. Make sure that the preferred DNS server on new machine points to the existing DNS Server on the Domain (normally the existing domain controller)

    Join the new 2008 machine to the existing domain as a member server

    3.Install DNS role in win2k8
    Reference KB article:

    4.Once DNS role is installed.Ran dcpromo on win2k8 R2.
    Reference KB article:

    5.After the Win2k8 Dc promotion is completed restart the win2k8 DC.

    6.Once Active Directory is installed then to make the new machine a global catalog server, go to Administrative Tools, Active Directory Sites and Services, Expand, Sites, Default first site and Servers. Right click on the new server and select properties and tick the"Global Catalog" checkbox. (Global catalog is essential for logon as it needs to be queried to establish Universal Group Membership)

    7.You must transfer the FSMO roles to the 2008 machine then the process is as outlined at

    8.Ran dcdiag /q and repadmin /replsum on DC to check for any errors.

    9.Change all of the clients (and the new 2008 DC itself), to point to the 2008 DC for their preferred DNS server this may be in DHCP options or the TCP/IP settings.


    Featured Post

    Want to promote your upcoming event?

    Are you going to an event? Are you going to be exhibiting at a tradeshow? Talking at a conference? Using a promotional banner in your email signature ensures that your organization’s most important contacts stay in the know and can potentially spread the word about the event.

    Join & Write a Comment

    Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
    The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
    This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

    729 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now