Replace Server 2003 Domain Controller with Server 2008

Greetings,

Current Local Network Setup = Server 2003 Standard 32 bit File Server (our one and only Server on the Network) acting as the sole Domain Controller and managing Active Directory, DHCP, DNS. No Exchange.
15 user/Computer Network.

I need to replace the 2003 Standard File Server (remove from the Network) with a new Server 2008 Standard 64bit and have this new Server 2008 Server act as the Sole Domain Controller managing Active directory, DHCP, and DNS.

There appears to be specfic steps that need to be taken to "demote" and "promote" Domain Controllers within a Network.

My questions are:
1. Since there is a minimal amount of user data and configurations to "re-enter" into the new Server 2008 Server is it possible to simply use the same Server Name and IP address as the Server 2003 Server when setting it up the new Server 2008 Server as a Domain Controller and avoid having to perform the steps to demote / promote?

2. IF I do need to follow and impliment the demote / promote steps (Restructering?) I'd like to know the simplest steps to take to accomplish this Server Replacement.

3. Is it possible to use the same Server name and IP address on the new Server 2008 Server that is currently on the Server 2003 Server?

4. Since the AD info is outdated, are there "minimal" steps I can take to demote / promote without transferring the necessary information?  (the current Server 2003 DHCP & DNS config info is still valid)

Thank you in advance.
COM1Asked:
Who is Participating?
 
SandeshdubeyConnect With a Mentor Senior Server EngineerCommented:
Here is the complete guide how to migart 2008 DC.

There are a couple of very important considerations, that you should have in mind, before you proceed with your migration scenario.

--Check, and raise, if necessary, the Domain and Forest functional levels. You cannot upgrade directly from Windows 2000 mixed, or Windows Server 2003 interim domain functional levels.

--The first Windows Server 2008 Domain Controller in the forest must be a Global Catalog Server, and it cannot be a Read Only Domain Controller, RODC.

--Check the FSMO roles assignments. When you prepare the existing AD, you should run adprep /forestprep on the Schema operations master, and adprep /domainprep /gpprep on the infrastructure master.In your case as there is a single Dc you need to run on the same server.

The installation of Windows 2008 into the domain and migration is quite simple.
First you need to Adprep your 2003 Domain by running
adprep /forestprep    and
adprep /domainprep   and
adprep /gpprep
from the 2008 DVD on the Windows 2000 DC  - adprep is in the SOURCES folder on the DVD.

Next install 2008 server on the new machine. You need to assign the 2008 new computer an IP address and subnet mask on the existing network. Make sure that the preferred DNS server on new machine points to the existing DNS Server on the Domain (normally the existing domain controller)

Join the new 2008 machine to the existing domain as a member server

From the command line promote the new machine to a domain controller with the DCPROMO command from the command line Select "Additional Domain Controller in an existing Domain"

Once Active Directory is installed then to make the new machine a global catalog server, go to Administrative Tools, Active Directory Sites and Services, Expand, Sites, Default first site and Servers. Right click on the new server and select properties and tick the"Global Catalog" checkbox. (Global catalog is essential for logon as it needs to be queried to establish Universal Group Membership)

Install DNS on the new server. Assuming that you were using Active Directory Integrated DNS on the first Domain Controller, DNS will automatically replicate to the new domain controller along with Active Directory. Set up forwarders as detailed at http://www.petri.co.il/configure_dns_forwarding.htm

You must transfer the FSMO roles to the 2008 machine then the process is as outlined at http://www.petri.co.il/transferring_fsmo_roles.htm

Change all of the clients (and the new 2008 DC itself), to point to the 2008 DC for their preferred DNS server this may be in DHCP options or the TCP/IP settings.

You can then transfer any data to the new server.

Before removing the old DC from the domain, run DCPROMO on it to remove Active Directory.


0
 
Mike KlineConnect With a Mentor Commented:
Normally you can reuse the name/IP   and Ace has a great writeup   http://msmvps.com/blogs/acefekay/archive/2010/10/09/remove-an-old-dc-and-introduce-a-new-dc-with-the-same-name-and-ip-address.aspx

You would have to rename and reIP the current box before you could resue the names.  You can't have two machines with the same name on the network.

I went over steps here   http://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/Q_27195917.html

You should try to have 2 DCs though.  If you only have one and that goes down hard you are in a bind.

Thanks

Mike
0
 
kiwistagConnect With a Mentor Commented:
Does the new server have to be the same name as the old? I.P address is simple as it can be changed at any time (as long as you replicate the changes in the DHCP server).
Depending on your MS licensing structure upgrade from Server 2003 to Server 2008 first.

If not then your best bet is to install the Active Directory data for Server 2008 on the Server 2003 AD.
( http://www.petri.co.il/windows-server-2008-adprep.htm ). This will need to be done regardless of what step you take.
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
COM1Author Commented:
Thanks kiwistag,

No, the new Server 2008 does not have to have the same Server name...I thought it might simplify other network set ups.

 " install the Active Directory data for Server 2008 on the Server 2003 AD "
I'm confused about what you mean about installing AD data from Server 2008 on the Server 2003 Server?....do you mean running adprep then raise the functional level?

It sounds like I'll need to run adprep.exe/forestprep & adprep.exe/domainprep on the Server 2003 Server while the Server 2003 is connected to the network then raise Domain functional level on the Server 2003 to Server 2008 level (?).....then what?
0
 
kiwistagCommented:
You do need to run adprep to "prepare" the domain structure for Server 2008's new improvements.

With Server 2008 R2 from memory is that there is tools to migrate all settings from another server (2003/2008). This includes DNS & DHCP. You'd have to read up about it though.
http://technet.microsoft.com/en-us/library/dd365353%28WS.10%29.aspx

I thought that if you wanted to upgrade the server from Server 2003 to Server 2008 (just a basic install-upgrade) it could ease the process. Your best bet may be the migration tools however.
0
 
mwiener1Connect With a Mentor Commented:
Migration is always a safer bet.

run adprep32 /forestprep  and adprep32 /domainprep from the server 2008 disk on the old server to prepare it for the migration.

on the new server install the active directory role through server manager.

Set the new servers IP addresses statically and make sure that you point dns to the old server.

after that has been installed, you need to run dcpromo.

basically click next through the whole thing - make sure that you pick new DC in existing forest, and make sure its a Global Catalog, and that you choose to install DNS. ( i believe those are all defaults anyway)

once dcpromo is finished and the machine restarts, you'll have to transfer the FSMO roles from the other server. I find the fastest way to do this is with NTDSUtil.

From a cmd prompt, type ntdsutil

type the following all one line at a time followewd by enter key:

roles

connections

connect to server oldservername

quit

transfer infrastructure master

transfer PDC

transfer RID master

transfer schema master

quit

quit


Once that completes give it a little while to replicate all of the necessary data, since you only have a small amount of users it shouldn't take very long.  Maybe give it an hour to be safe.

after you're satisfied that you have waited long enough, run dcpromo on the old server and follow the prompts to demote it.

Install DHCP role on the new server if the old one was doing DHCP for you, and you'll be all set and can safe;y remove the old server from the network.





quit


0
 
mwiener1Commented:
I forgot to mention, after the new server is promoted and before you pull down the other server, make sure you set the new servers DNS to 127.0.0.1 so it looks to itself for dns.
0
 
kiwistagCommented:
with adprep also you'll have to run the 32bit version from the Server 2008 DVD. If you only have the 64bit then you'll have to source a 32bit version (I can't remember if both are on the DVD or not).
0
 
mwiener1Commented:
They're both there. I gave the command for it - aprep32 /forestprep.

I just fought with that the other day for like 15 minutes until i realized there was a different file. Felt like a complete n00b.
0
 
kiwistagCommented:
Ah, tired eyes. Yeah - had total hell with it in the past when we had to push the settings in for Exchange in the past, got caught there too.
COM1: what do you use for e-mail on that network?
0
 
COM1Author Commented:
Thanks Kiwistag & mwiener1....I appreciate your time!

kiwistag: We are using Google Apps (Paid)  for Business for our email.

mwiener1: I am confused...in your first post  you mention running dcpromo on the S2k3 Server twice at separate points...once after running adprep32 and then again after running NTDSUtil (?).

Also, which Server do I run the NTDSUtil from?...it sounds like I would run it from the 2003 Server side....if this is the case does it at some point ask for static IP of new DC?....."make sure that you pick new DC in existing forest" = the time you designate IP address of new DC?



0
 
mwiener1Commented:
You run adprep on old server, dcpromo on new server to promote, and then dcpromo on old server to demote.
0
 
COM1Author Commented:
Thank you kiwistag,mwiener1 & Sandeshdubey.

mwiener1: thanks for clarification of dcpromo...got it

Sandeshdubey: VERY thourough info, thank you.

It all comes together when combing info from all 3 contributing  experts!

It appears relinqiushing control is tricky business....whether your a Domain Controller or Dictator of a county!

Thank you all for contributing. I will execute the DC change over & impliment all provided info this weekend
0
 
COM1Author Commented:
Forgot to thank the 4th expert, mkline71 for  his input and links.
Thank you all again for your contributions.
0
 
Mike KlineCommented:
no problem, just glad you were helped

Thanks

Mike
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.