SupermanTB
asked on
Replacing SBS 2003 server with Windows 2008, DCPROMO issue
I have a small network with one domain controller. I am replacing an SBS 2003 server with a new 2008 server. I'm in the final step of running DCPROMO on the SBS 2003 server and am running into a problem.
One of the first steps as part of the DCPROMO has a check box saying This server is the last domain controller in the domain. I leave that box unchecked and click next. After I do that, I get an error message saying
"no other Active Directory domain controllers for that domain can be contacted. Do you wish to proceed anyway"
I'm not sure why this is happening as everything with the 2008 machine appear fine. Here are the steps I've taken so far
1. Joined the 2008 server to the domain
2. Raised the functional level of the domain and forest on the 2003 server to 2003
3. I ran adprep /forestprep and adprep /domainprep on the 2003 machine
4. Ran DCPROMO on 2008 machine. Installed DNS and made a Global Catalog server
5. Successfully transferred the 5 FSMO roles
I can browse to both servers from each other without any problems. I can also see both servers as domain controllers in AD.
I ran a DCDIAG on the 2008 server and have attached the results. The 2003 server is called JW-Server.
Would love some help. Thanks in advance!
dcdiag.txt
One of the first steps as part of the DCPROMO has a check box saying This server is the last domain controller in the domain. I leave that box unchecked and click next. After I do that, I get an error message saying
"no other Active Directory domain controllers for that domain can be contacted. Do you wish to proceed anyway"
I'm not sure why this is happening as everything with the 2008 machine appear fine. Here are the steps I've taken so far
1. Joined the 2008 server to the domain
2. Raised the functional level of the domain and forest on the 2003 server to 2003
3. I ran adprep /forestprep and adprep /domainprep on the 2003 machine
4. Ran DCPROMO on 2008 machine. Installed DNS and made a Global Catalog server
5. Successfully transferred the 5 FSMO roles
I can browse to both servers from each other without any problems. I can also see both servers as domain controllers in AD.
I ran a DCDIAG on the 2008 server and have attached the results. The 2003 server is called JW-Server.
Would love some help. Thanks in advance!
dcdiag.txt
Is this a SBS 2008 server, or just 2008 standard?
Did you configure the 2008 machine to be the GC and host DNS, and transfer the FSMO roles?
Did you configure the 2008 machine to be the GC and host DNS, and transfer the FSMO roles?
ASKER
No it is not. It is pointing to itself. For future reference at what point during this migration process Should I point the DNS to the new server
Once you have changed DNS onto the SBS 2008 server and made the SBS 2008 server the FSMO role holder.
@Tom - the question states "Replacing SBS 2003 server with SBS 2008"
and
"4. Ran DCPROMO on 2008 machine. Installed DNS and made a Global Catalog server"
and
"5. Successfully transferred the 5 FSMO roles"
and
"4. Ran DCPROMO on 2008 machine. Installed DNS and made a Global Catalog server"
and
"5. Successfully transferred the 5 FSMO roles"
ASKER
Hey Alan. I did make one small mistake. In the question, I list it as an SBS 2008 server. That is not the case and mistake on my part. It is a standard 2008 server. I apologize for the fat finger. I don't think that matters in your advice, but just thought I would mention it.
It doesn't. I'll correct the question.
@Tom - Sorry. You were right to ask - I hadn't spotted that (tired eyes).
ASKER
Thanks Alan. I can't say I've replicated SYSVOL too many times. I see quite a bit online, but would appreciate a point in the right direction.
It should replicate itself - but sometimes it doesn't work.
You can encourage by running the following command from a command prompt:
repadmin /syncall /AePd
If the servers are talking to each other happily, they should replicate and then you can run dcdiag again to see if there are errors.
On the Server 2008 server in a command prompt, run
net share
If the SYSVOL and NETLOGON shares are visible, then things are looking happier and you should be syncing happily and can then DCPROMO the SBS 2003 server.
You can encourage by running the following command from a command prompt:
repadmin /syncall /AePd
If the servers are talking to each other happily, they should replicate and then you can run dcdiag again to see if there are errors.
On the Server 2008 server in a command prompt, run
net share
If the SYSVOL and NETLOGON shares are visible, then things are looking happier and you should be syncing happily and can then DCPROMO the SBS 2003 server.
ASKER
should I run the repadmin command on the 2003 machine?
Either should be fine.
ASKER
I ran the repadmin /syncall /AePd from the 2008 machine. After doing the net share I don't see those two shares.
Okay - please run
dcdiag >c:dcdiag.txt
on both machines and post the output (attach both .TXT files) please.
Heading to bed soon - have to be up in 6 hours :(
dcdiag >c:dcdiag.txt
on both machines and post the output (attach both .TXT files) please.
Heading to bed soon - have to be up in 6 hours :(
ASKER
I certainly understand that and really appreciate the help. will post them pronto
ASKER
Here's the 2008 server
2008.txt
2008.txt
No probs - eyes not getting too heavy just yet!
ASKER
2003 server
2003.txt
2003.txt
Okay - is the 2008 server pointing to itself for DNS and are both servers listed in DNS on the 2008 server?
ASKER
Both servers are pointing to 2008 server. I see both servers in the DNS on the 2008 machine
Okay - please reboot both servers and then leave them to settle overnight.
Then run dcdiag tomorrow and see if the errors are still present and check the netlogon / sysvol shares on the 2008 server.
If still not there - we can encourage them.
Can each server ping each other by FQDN and IP Address happily?
Then run dcdiag tomorrow and see if the errors are still present and check the netlogon / sysvol shares on the 2008 server.
If still not there - we can encourage them.
Can each server ping each other by FQDN and IP Address happily?
ASKER
Sounds good. Thanks for your help and get some sleep.
Each server can ping and browse each other by FQDN
Each server can ping and browse each other by FQDN
No problems - thanks.
If anyone else has ideas between now and tomorrow - don't be shy!
If anyone else has ideas between now and tomorrow - don't be shy!
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I'll give it a shot. Thanks!
Last post tonight!
Before you run the burglags option - run net share on the SBS server and let me know if sysvol and netlogon shares exist.
Before you run the burglags option - run net share on the SBS server and let me know if sysvol and netlogon shares exist.
ASKER
They do exist on the 2003 server
ASKER
We've got some progress. I followed the instructions to set the registry value to D4 on the 2003 server. After restarting the FRS service, I then went to the 2008 server and set the registry value to D2. After restarting the FRS service I can see the shares
I lied!
So run the repadmin /syncall /AePd command, then DCDIAG on both and see if they are happy (ignore system log errors) and if happy - dcpromo away!!
So run the repadmin /syncall /AePd command, then DCDIAG on both and see if they are happy (ignore system log errors) and if happy - dcpromo away!!
ASKER
Did you see my last post? Still want me to do that?
Yep - saw it. Please follow my last post. The lie was about the "my last post tonight" comment :)
ASKER
dcdiag looks great. I'm off to DCPROMO. Hope that was your last post
Morning! How did you get on?
0
Sign In to Vote
Hi,
As of now the only SBS2003 DC in a domain hence that is the highest functional level, you can not raise to 2008 at this moment. You already have schema extended so verify health of existing DC using DCDIAG and NETDIAG and go ahead an run DCPROMO on 2008R2 to promote it as DC. Once you are done with this then you can raise functional level to 2008/R2.
Here are the steps:
Health Checks on Small Business Server 2003
Join new Windows 2008 Server to the domain as a member server
Prepare Active Directory for Windows 2008 R2 Server
Make Windows 2008 R2 Server a Domain Controller of the Existing Small Business Server 2003 Domain
Transfer DHCP Service
Install Exchange 2010
Installing Exchange 2010 SSL Certificate
Migrate Exchange Data
Migrate SharePoint Services
Migrate shared user data
Uninstall Exchange 2003 from Small Business Server 2003
Transfer all 5 FSMO roles to Windows 2008 Domain Controller
DCPROMO SBS 2003 server so it is no longer a domain controller and remove from network
Once you know you will never need or introduce another 2003 DC then you can raise your domain and forest functional levels to 2008/2008R2 and enjoy all the cool new features like the AD recycle bin, fine-grained passwords.
Check this step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010.
For more info follow on
http://social.technet.microsoft.com/Forums/en/winserverDS/thread/e66bd2bf-dceb-4655-b90a-f49c256faf4d
Sign In to Vote
Hi,
As of now the only SBS2003 DC in a domain hence that is the highest functional level, you can not raise to 2008 at this moment. You already have schema extended so verify health of existing DC using DCDIAG and NETDIAG and go ahead an run DCPROMO on 2008R2 to promote it as DC. Once you are done with this then you can raise functional level to 2008/R2.
Here are the steps:
Health Checks on Small Business Server 2003
Join new Windows 2008 Server to the domain as a member server
Prepare Active Directory for Windows 2008 R2 Server
Make Windows 2008 R2 Server a Domain Controller of the Existing Small Business Server 2003 Domain
Transfer DHCP Service
Install Exchange 2010
Installing Exchange 2010 SSL Certificate
Migrate Exchange Data
Migrate SharePoint Services
Migrate shared user data
Uninstall Exchange 2003 from Small Business Server 2003
Transfer all 5 FSMO roles to Windows 2008 Domain Controller
DCPROMO SBS 2003 server so it is no longer a domain controller and remove from network
Once you know you will never need or introduce another 2003 DC then you can raise your domain and forest functional levels to 2008/2008R2 and enjoy all the cool new features like the AD recycle bin, fine-grained passwords.
Check this step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010.
For more info follow on
http://social.technet.microsoft.com/Forums/en/winserverDS/thread/e66bd2bf-dceb-4655-b90a-f49c256faf4d
ASKER
Everything worked great Alan. Thanks for all your help!
Happy days - well done and thanks for the points.
Alan
Alan
You have a problem with SYSVOL Recplication, so check your DNS settings and then make sure that the SYSVOL has been replicated before you try to DCPROMO the SBS 2003 server again.