FSMO Role Transfer from 2003 DC to 2008 R2 DC

Posted on 2012-12-27
Last Modified: 2012-12-28
We have a single forest/single domain and would like to transfer all 5 FSMO roles from a 2003 SP1 domain controller to a 2008 R2 domain controller.  Is there anything we need to keep an eye out for or any gotchas when performing this change?  We also have Exchange and System Center Configuration Manager in the environment.  Thanks.
Question by:bsohn417
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 70

Expert Comment

ID: 38723619
Should not be an issue - just transfer the roles in the normal way
LVL 57

Assisted Solution

by:Mike Kline
Mike Kline earned 500 total points
ID: 38723626
Just make sure the health of your DCs/replication is working fine before and after.  You can use repadmin or the ad replication status tool. (nice GUI tool)

It should be fine.



Author Comment

ID: 38723673
Thanks guys.  Any order you would recommend doing them in?
Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

LVL 23

Expert Comment

by:Thomas Grassi
ID: 38723678
Which version of exchange you have?

Check for event Id 2080 to check for the Global Catalog.

Author Comment

ID: 38723680
Exchange 2003, 2007 and 2010.
LVL 57

Accepted Solution

Mike Kline earned 500 total points
ID: 38723697
damn, one thing I forgot, if your current PDCe is set to sync with an external time source make sure to do that on the new PDC too.


LVL 26

Expert Comment

by:Leon Fester
ID: 38723785
As mentioned above it's a straight forward process can be done via GUI or command line.

In addition to the time sync'ing from the PDCe, also make sure that your DC is a Global Catalog server.

When a forest consists of a single domain, every domain controller has a full, writable copy of every object in the domain and forest. However, it is important to retain the global catalog on at least one domain controller because many applications use port 3268 for searching. For example, if you do not have any global catalog servers, the Search command on the Start menu cannot locate objects in AD DS.

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question