Solved

Process for replacing Server 2003 Domain controller with Server 2008

Posted on 2013-01-18
4
306 Views
Last Modified: 2013-01-28
I am responsible for a domain environment that does not have Internet access(location and circumstances prohibit).  The network currently is using Server 2003 R2 under a domain.  I want to eventually replace my old 2003 box with a new 2008 Server.  What is the best way to setup the new server(Setup onsite or remote; pre-install decisions, etc.).  I have the new server box offsite at a location that does have Internet access.  I was planning on performing initial setup offsite and then bringing the 2008 box to the existing network.  I know I need to move all domain responsibilities from the 2003 to 2008 server so I plan on both servers running together for at least a limited amount of time.  Can anyone offer insight/recommendations on the best approach to my project and pitfalls to watch out for?
0
Comment
Question by:davef22
  • 3
4 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 38793029
You should not need internet access to add a new DC

High level steps:

prep your forest for 2008 R2 (adprep32 if your current DC is 32 bit)
install the 2008 member server (can be done before the prep too)
use dcpromo to promote the box
make the box a global catalog (does it by default in the 2008 dcpromo process)
if you have DNS on your 2003 box install it on the 2008 box
At that point you have a fully functional 2008 DC
Transfer FSMO roles to 2008 box
Point clients (static and DHCP) to the new box for DNS services.
once all your 2003 DCs are demoted you can raise the functional level.

There is a lot of great info on this subject already so I won't rewrite the book.  

The official Microsoft document

·     http://www.microsoft.com/downloads/details.aspx?familyid=FA629DE2-F4DD-47AC-8D80-3DB46B2877A2&displaylang=en

 

I also really like two blog entries by MVPs on the upgrade.  One is from Meinolf the other from Sander.  

·     http://msmvps.com/blogs/mweber/archive/2010/02/10/upgrading-an-active-directory-domain-from-windows-server-2003-to-windows-server-2008-or-windows-server-2008-r2.aspx



·     http://blogs.dirteam.com/blogs/sanderberkouwer/archive/2010/05/26/transitioning-your-active-directory-to-windows-server-2008-r2.aspx

Thanks

Mike
0
 

Author Comment

by:davef22
ID: 38803275
I'm looking at your response and will provide my comments in the next couple of days.  Thanks for your very prompt reply.
0
 

Author Comment

by:davef22
ID: 38804006
I see that there is a fair amount of "promoting and demoting" that will occur once the new and existing servers are on the same network.  But am I correct, that prior to that, I can install my OS offsite first?  I would use the same Domain name as the existing DC, when prompted, assign a new, unique name to the computer, and install all Microsoft updates and patches.  I would skip any role setups until onsite with the existing DC.  Is that an accurate overview of my process?
0
 

Author Closing Comment

by:davef22
ID: 38826878
Mike's response time was outstanding!  I am in the process of implementing his suggestions and everything has gone well so far.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
This article outlines the process to identify and resolve account lockout in an Active Directory environment.
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question