Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 293
  • Last Modified:

AD and DNS together in 2008 R2

I'm setting up a 2008 server to replace our 2003 server which is our AD, DNS, and DHCP server. We would like to transfer all the roles from the old to the new and then install 2008 on the old and make it a backup. I have the 2008 server installed and AD DS services role installed but am being told that I can not ad DNS to it. is this true?
0
MapleLife
Asked:
MapleLife
  • 6
  • 4
  • 3
  • +1
3 Solutions
 
ldavis07Commented:
There are two ways you can migrate your DNS services to Windows Server 2008 — although one is definitely better than the other. Your available options are:

    Manually copying the zone data files.
    Manually performing a zone transfer.

you can manually add them yes. Since 2008 is derived from 2003 it is migratable.
0
 
brwwigginsCommented:
If the zones on 2003 are AD integrated, then if you join the new 2008 server to the domain and promote it to a DC it should pull the DNS information over automatically.

I've done that plenty of times without issue. You do however have to prep your 2003 environment to accept a 2008 domain controller http://www.petri.co.il/windows-server-2008-adprep.htm
0
 
MapleLifeAuthor Commented:
brw,

We have already ran the prep as we have a subdomain with a 2008 controller in it. Once I promote the 2008 server to a DC should the dns console be installed? At present it is not.
0
Who's Defending Your Organization from Threats?

Protecting against advanced threats requires an IT dream team – a well-oiled machine of people and solutions working together to defend your organization. Download our resource kit today to learn more about the tools you need to build you IT Dream Team!

 
ldavis07Commented:
you should install the dns after the 2008 is installed. you can do that manual with what i wrote above
0
 
MapleLifeAuthor Commented:
ldavis,

can you be more specific as to what the process is?
0
 
brwwigginsCommented:
If the DNS tools do not show up, then you might have to add the "Remote Server Administration Tools" feature using the server manager.
0
 
ldavis07Commented:
The easiest, and preferred method, to migrate your DNS zone data is to manually imitate a zone transfer from the DNS server you are replacing to your new Windows Server 2008 DNS server

you need to go into the server properties and you will see the (zone transfers, name server, etc...) you can right click the zone transfter and create a primary zone or a secondary if you want to migrate it from the 2003 server. you then go through the wizard of name it.

dnscmd ServerName /ZoneRefresh ZoneName

is the command prompt way of doing it
You can specify multiple IP addresses by separating them with a comma. The FileName value must be the exact file name of the standard primary zone, just the same as when you are creating the zone via the DNS console.

Hope that is specific enough
0
 
MapleLifeAuthor Commented:
brw,

I added the dns tools but it only lets me connect to another server.

ldavis,

not sure what you mean by server properties.
0
 
ldavis07Commented:
in your AIK....you can view the property settings and change your zone transfer to add the new server
0
 
ldavis07Commented:
you can also do the cmd prompt way it might be a lot easier
0
 
MapleLifeAuthor Commented:
ldavis,

aik means what?
0
 
ldavis07Commented:
I means your windows aik where all the management is in server 2003 and 2008
0
 
brwwigginsCommented:
In server manager, do you see DNS listed under roles?
0
 
SandeshdubeyCommented:
On 2003 DC chek the DNS zone type is it AD integated zone or primary zone.If it is primary zone make the zone AD integrated zone.

Refer this link to change the zone to AD integarted:http://technet.microsoft.com/en-us/library/ee649181(WS.10).aspx

Install the DNS role on the 2008 DC if not install.Once the zone is changed to AD integrated the same should be replicated to other DC as well.

Refer this link to install DNS role if not installed on 2008 DC:http://www.zdnetasia.com/install-a-dns-server-in-windows-server-2008-62040433.htm

Note:Advantages of Active Directory integrated zone
Active Directory replication is faster, which means that the time needed to transfer zone data between zones is far less.

The Active Directory replication topology is used for Active Directory replication, and for Active Directory-integrated zone replication. There is no longer a need for DNS replication when DNS and Active Directory are integrated.

Active Directory-integrated zones can enjoy the security features of Active Directory.
The need to manage your Active Directory domains and DNS namespaces as separate entities is eliminated. This in turn reduces administrative overhead.

When DNS and Active Directory are integrated; the Active Directory-integrated zones are replicated, and stored on any new domain controllers automatically. Synchronization takes place automatically when new domain controllers are deployed.Note that this does not mean that all DC’s automatically become DNS servers. Only systems that have the DNS service installed can be DNS servers.
0

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

  • 6
  • 4
  • 3
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now