• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 585
  • Last Modified:

Domain Controller Upgrades

Hello!

I have 4 DC's to upgrade.

DC1 - Server 2003 -- FSMO: Domain Naming Role -- DHCP & DNS Secondary
DC2 - Server 2008 R2 -- DHCP & Primary DNS
DC3 - Server 2003 -- FSMO: Schema master, PDC, Infrastructure, RID
DCX - Server 2008 R2

I would like to get all of the DC's up to Windows Server 2012. I know I have to get the Server 2003's up to 2008 R2 first as well.

My issue is I am unsure of how to do the upgrade and preserve the other roles on the servers. In-place upgrades are always an option, but seem to work sometimes and other times don't.

So would I need to pass off the DNS roles to other servers somehow along with the DHCP?
Everything is actively being used, so I'd like to find a plan with as little downtime as possible.

I'm open to any and all suggestions.

Thanks for any help!
0
lanits
Asked:
lanits
  • 3
2 Solutions
 
Brad BouchardInformation Systems Security OfficerCommented:
Trust me or not on this one, it's your choice, but I did something very similar about a month ago.

Transfer all 5 FSMOs to a single DC.  Demote and leave as member servers the rest of the DCs.  Once they are member servers they can retain their DNS and DHCP roles without having to transfer those to other servers.  After that, do in place upgrades.  I don't know what you mean by sometimes they work, sometimes they don't, but they always work unless some error is encountered at which point that can be worked out.  Once the updates are done, re-promote the other servers to DCs then spread the FSMOs back out.  It really is an easy process that could be done over a single night, or weekend.  

The only thing to make sure of is that Active Directory Sites and Services reflects the fact that you will be demoting and re-promoting servers in several steps.  If all DCs are replicating properly changes should reflect very quickly and replication shoulnd't be an issue.  However if after you are done with all that I've mentioned above and you have several DCs again, check replication with the DCDIAG command line tool to make sure that all DCs are talking, and all workstations/network devices are talking with the DCs.

I can clarify further anything above that isn't clear, just let me know.
0
 
MAS (MVE)EE Solution GuideCommented:
Do 2 servers at a time. transfer fsmo roles and upgrade the servers.

after upgrade check your event viewer for any replication errors. if you have exchange point exchange to the new fsmo holder.

if replication is ok and transferred back fsmo roles shutdown the other servers for a day to check for errors.

if there is no problem do the same for the remaining servers
0
 
Brad BouchardInformation Systems Security OfficerCommented:
after upgrade check your event viewer for any replication errors. if you have exchange point exchange to the new fsmo holder.

Use DCDIAG instead of this method... this would be way too tedious and time consuming, plus that's what DCDIAG was built for.

dcdiag /test:replications

Also...

if replication is ok and transferred back fsmo roles shutdown the other servers for a day to check for errors.

Not a good way to test for errors... if everything is fine you will know and your logs should be clean and replication will be good, if not, you will have alerts/events that will let you know and the test replication DCDIAG will show that.

Not trying to be pretentious here but these are some pretty archaic/band-aid recommendations for dealing with DCs, the single most important server types in any organization.  I would think a little further ahead before answering with these recommendations in the future.
0
 
lanitsAuthor Commented:
So I should be safe to assume that when I demote a DC with dcpromo that the AD integrated DNS will not be removed with it?
0
 
Brad BouchardInformation Systems Security OfficerCommented:
Correct, you have to manually remove the DNS role from the server after demotion.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now