I migrated Active Directory 2003 Domain Controller to 2008, Moved DHCP to 2008 R2. When I turn off the 2003 then the Internet access becomes very slow.

I completed the Primary AD DC from 2003 to 2008 R2, setup and moved the DHCP to 2008 R2. I changed the primary DNS setup in DHCP property to the new 2008 IP address.
I did not not demote the 2003 AD DC yet. I shut it down and realized the Internet access became extremely slow.
I can't think of anything that I have missed to complete the migration. Please help!

Thanks
Jay
Jay555IT DirectorAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Mike KlineCommented:
See if you have any forwarders setup on the 2003 box or are you just using root hints for internet resolution.


Thanks

Mike
0
Jay555IT DirectorAuthor Commented:
I will check it and let you know. I forgot to mention that DHCP is disabled on 2003 box.

Thanks

Jay
0
JAN PAKULAICT Infranstructure ManagerCommented:
do you have option 4 set up properly in dhcp scope options *default router,gateway)
is your DNS is configured properly on client and server (gp to point to  dns server)

http://support.microsoft.com/kb/294785

Also check if you clients dns registry points to right dns server ip

http://technet.microsoft.com/en-us/library/dd197418(WS.10).aspx

JAN MA CCNA

0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

Jay555IT DirectorAuthor Commented:
On my 2003 box forwarders, under Interfaces I only have the 2003 box IP, not the private IP of 2008R2 box
0
Jay555IT DirectorAuthor Commented:
Janpakula,

Where is tghe option 4 ?
0
Jay555IT DirectorAuthor Commented:
Janpakula,

Sorry for typo. Could you please explain more about option 4?
0
JAN PAKULAICT Infranstructure ManagerCommented:
http://technet.microsoft.com/en-us/library/cc958929.aspx


 option 3 = router (default gateway on subnet)
0
Jay555IT DirectorAuthor Commented:
Jampakula,

I have the router configured properly.
0
Jay555IT DirectorAuthor Commented:
Could someone help me how to view a gp to point to  dns server?

Thanks
0
JAN PAKULAICT Infranstructure ManagerCommented:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient]
"NameServer"="1192.168.1.25"


save as .reg and change ip address to you dns server

or gp it is in

go to gp editor
create and ling new group policy

It is in Computer Configuration\Policies\Administrative
Templates\Network\DNS Client - "DNS Servers".

change to enabled + add ip address


0
Jay555IT DirectorAuthor Commented:
I followed all the instructions.
 I stopped DNS service on old 2003 primary domain controller, immediately found that I was not able to browse any web site. Then I started the DNS service web browsing turned to work seamlessly.
I also have to mention that DHCP on 2003 has been disabled since mid last week.
Does anybody think by stopping DNS service on 2003, I caused stopping DNS service on whole domain?
Here is screen shut of my desktop IP config:
Old 2003 DC 10.1.0.1
New 2008 R2 DC 10.1.0.18
Gateway/Router 10.1.0.2


Windows IP Configuration



        Host Name . . . . . . . . . . . . : MC191

        Primary Dns Suffix  . . . . . . . : MAIN.com

        Node Type . . . . . . . . . . . . : Hybrid

        IP Routing Enabled. . . . . . . . : No

        WINS Proxy Enabled. . . . . . . . : No

        DNS Suffix Search List. . . . . . : MAIN.com

                                            main.com



Ethernet adapter Local Area Connection:



        Connection-specific DNS Suffix  . : main.com

        Description . . . . . . . . . . . : Broadcom NetLink (TM) Gigabit Ethernet

        Physical Address. . . . . . . . . : 00-25-64-8C-7E-B0

        Dhcp Enabled. . . . . . . . . . . : Yes

        Autoconfiguration Enabled . . . . : Yes

        IP Address. . . . . . . . . . . . : 10.1.0.101

        Subnet Mask . . . . . . . . . . . : 255.255.254.0

        Default Gateway . . . . . . . . . : 10.1.0.2

        DHCP Server . . . . . . . . . . . : 10.1.0.18

        DNS Servers . . . . . . . . . . . : 10.1.0.18

                                            10.1.0.1

        Primary WINS Server . . . . . . . : 10.1.0.1

        Secondary WINS Server . . . . . . : 10.1.0.18

        Lease Obtained. . . . . . . . . . : Monday, October 17, 2011 2:13:26 PM

        Lease Expires . . . . . . . . . . : Thursday, October 20, 2011 2:13:26 PM

0
JAN PAKULAICT Infranstructure ManagerCommented:
best way to do it would be to swap ip addresses around (leave dns off on 2003) turn off ipv6 on new one

also check this registry


[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient]
"NameServer"="192.168.1.25"

is your dns server is rigt in there?

0
Jay555IT DirectorAuthor Commented:
I checked the 2008 DC registery. It is correct; the same as you explained with 10.1.0.18.
0
Jay555IT DirectorAuthor Commented:
I also see the following Error:

The local domain controller is both a global catalog and the infrastructure operations master. These two roles are not compatible.
 If another domain controller exists in the domain, it should be made the infrastructure operations master. The following domain controller is a good candidate for this role.
 Domain controller:
CN=NTDS Settings,CN=HONESTY,CN=Servers,CN=WestVirginia,CN=Sites,CN=Configuration,DC=MAIN,DC=com
 If all domain controllers in this domain are global catalogs, then there are no infrastructure update tasks to complete, and this message might be ignored.
0
JAN PAKULAICT Infranstructure ManagerCommented:
1  - do that

http://technet.microsoft.com/en-us/library/cc758330(WS.10).aspx

turn of GC on DC with Infraxtructure master

2 - 2008 DC should have  Old 2003 DC  ip address 10.1.0.1
why - are setup to point to 10.1.0.1 as dns sever

You have to check that on clients also:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient]
"NameServer"="10.1.0.1"

0
Jay555IT DirectorAuthor Commented:
What I posted yesterday is from my local desktop. As you see there are Primary DNS server 10.1.0.18
and secondary 10.1.0.1
Should I remove the secondary DNS server completely?
0
Jay555IT DirectorAuthor Commented:
I removed the secondary DNS server from DHCP Scop. I renewd my Local PC IP after that. I still can browse different web sites. Here is my IPCONFIG /ALL ststus:



Windows IP Configuration



        Host Name . . . . . . . . . . . . : MC191

        Primary Dns Suffix  . . . . . . . : MAIN.com

        Node Type . . . . . . . . . . . . : Hybrid

        IP Routing Enabled. . . . . . . . : No

        WINS Proxy Enabled. . . . . . . . : No

        DNS Suffix Search List. . . . . . : MAIN.com

                                            main.com



Ethernet adapter Local Area Connection:



        Connection-specific DNS Suffix  . : main.com

        Description . . . . . . . . . . . : Broadcom NetLink (TM) Gigabit Ethernet

        Physical Address. . . . . . . . . : 00-25-64-8C-7E-B0

        Dhcp Enabled. . . . . . . . . . . : Yes

        Autoconfiguration Enabled . . . . : Yes

        IP Address. . . . . . . . . . . . : 10.1.0.101

        Subnet Mask . . . . . . . . . . . : 255.255.254.0

        Default Gateway . . . . . . . . . : 10.1.0.2

        DHCP Server . . . . . . . . . . . : 10.1.0.18

        DNS Servers . . . . . . . . . . . : 10.1.0.18

        Primary WINS Server . . . . . . . : 10.1.0.18

        Lease Obtained. . . . . . . . . . : Tuesday, October 18, 2011 11:50:34 AM

        Lease Expires . . . . . . . . . . : Friday, October 21, 2011 11:50:34 AM

0
JAN PAKULAICT Infranstructure ManagerCommented:
is it ok now?
0
Jay555IT DirectorAuthor Commented:
I can browse any web site now, from my desktop. How can I make sure everything will be okay if I demote the 2003 previous primary DC? Should I just shut down the 2003 Box and see what happens?  or should I just stop the DNS service on 2003 and see the results?

Thanks
0
Jay555IT DirectorAuthor Commented:
I just stopped the DNS service on 2003 DC box, suddenly saw the internet access became very slow. It was taking a long time to open a web site.
It had no choice to start it again.
0
JAN PAKULAICT Infranstructure ManagerCommented:
0
Jay555IT DirectorAuthor Commented:
I tried to change DNS forwarder or Root Hints on 2008 DC, when I enter 10.1.0.18 it will come up with check mark (Found). As soon as I click on APPLY or OK then I get the following Mesage:
The Server Forwarders can not be updated.
The IP address is invalid
0
Jay555IT DirectorAuthor Commented:
I removed 10.1.0.1 from the DNS Forwarder and Root Hunts on 2008 DC, then I can browse any web site now.
There is nothing in DNS forwarder and Root Hints now.
Openning a web site seems a little slower than what felt before when using 2003 as DNS.
Should I just turn off the 2003 Dc server and see the results before demoting it? Do I need to be worried about anything before demoting the 2003 DC?
Thanks
0
JAN PAKULAICT Infranstructure ManagerCommented:
you need at least one server in dns forwarder - any quaries not resolved by your dns will go to this forwarded dns - (usually it is ISP dns server)
do backup of PDS before demoting - there shouldnt be any problems then:)
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
JAN PAKULAICT Infranstructure ManagerCommented:
sorry PDC - Primary Domain Controller (holds 5 FSMO operation masters)
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.