[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now


Add Windows 2008 R2 Server as DC on Windows 2000 Domain

Posted on 2013-01-30
Medium Priority
Last Modified: 2013-05-31
Good day everyone. So I am looking at eventually shifting our entire domain to a Windows 2008 R2 domain.

Currently, our DC holding all FSMO roles is a Windows 2000 Server (and I believe the entire domain is a Windows 2000 Domain). We have three other DCs which are all Windows 2003 SP2 servers.

I want to add the Windows 2008 R2 server to the domain as a DC, transfer over all FSMO roles from the Windows 2000 server, and make it our primary DC.

What steps (the more detail the better) do i need to follow to make this happen and are there any issues with doing what I want to do? Any expected downtime for our environment?
Question by:mig1980
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
LVL 57

Assisted Solution

by:Mike Kline
Mike Kline earned 1332 total points
ID: 38836443
High level steps:

prep your forest for 2008 R2 (adprep32 in this case)
install the 2008 R2 member server (can be done before the prep too)
use dcpromo to promote the box
make the box a global catalog (does it by default in the 2008 R2dcpromo process)
if you have DNS on your 2000 box install it on the 2008 box (checkbox)
At that point you have a fully functional 2008 R2 DC
Transfer FSMO roles to 2008 box
Point clients (static and DHCP) to the new box for DNS services.
once all your 2000 DCs are demoted you can raise the functional level.

There is a lot of great info on this subject already so I won't rewrite the book.  

The official Microsoft document

·     http://www.microsoft.com/downloads/details.aspx?familyid=FA629DE2-F4DD-47AC-8D80-3DB46B2877A2&displaylang=en


I also really like two blog entries by MVPs on the upgrade.  One is from Meinolf the other from Sander.  

·     http://msmvps.com/blogs/mweber/archive/2010/02/10/upgrading-an-active-directory-domain-from-windows-server-2003-to-windows-server-2008-or-windows-server-2008-r2.aspx

·     http://blogs.dirteam.com/blogs/sanderberkouwer/archive/2010/05/26/transitioning-your-active-directory-to-windows-server-2008-r2.aspx



Author Comment

ID: 38836476
Now, does it matter if the server is already part of the domain but just not a DC? Would I still have to prep the forest?
LVL 57

Assisted Solution

by:Mike Kline
Mike Kline earned 1332 total points
ID: 38836492
yes you still have to prep your forest/domain, that is to update the schema.  You are at version 13 now and you will be at 47 after the prep.  More on the version numbers here



 [eBook] Windows Nano Server

Download this FREE eBook and learn all you need to get started with Windows Nano Server, including deployment options, remote management
and troubleshooting tips and tricks


Author Comment

ID: 38836569
Would I experience any downtime? I want to know if I could do this during business hours.

Also, where would you run all of the commands mentioned? On the existing FSMO DC (Windows 2000) or on the new Windows 2008 server?

I am remotely located from the servers I manage. Would I be able to perform all of the tasks needed to add the Windows 2008 server as a DC remotely without restarting the servers?

 I am planning on being onsite for the transferring of FSMO roles from the Windows 2000 server to the Windows 2008 R2.
LVL 57

Expert Comment

by:Mike Kline
ID: 38836981
You should not experience downtime, having said that we always do our schema updates/promotions after hours.

adprep is run on the schema master (forestprep) and infrastructure master (domain prep)

FSMO transfer from the 2008 box.

The box will need to be promoted after you make it a DC.


LVL 11

Accepted Solution

RickSheikh earned 668 total points
ID: 38836992
No downtime is expected if you follow all the good advice Mike has provided you. Having a good recovery plan is a good idea, thus, its generally a good idea to perform such changes in off hours. All tasks are remotely doable. Sander's blog above cover where the ADPREP should be run from, ADPREP bits need to be available (found on the new media i.e ISO for W2K8 R2) and if you have the proper rights. The server you promote as the first 2008 R2 (after the ADPREP) will have to be restarted after the DCPROMO is complete.

Also, take a look at this article.

Best Practices for Implementing Schema Updates or : How I Learned to Stop Worrying and Love the Forest Recovery

Author Comment

ID: 38915930
Will be testing this out in the next two weeks. Will report back as to what my findings are.

Author Comment

ID: 39211564
Unfortunately, this project was postponed. Will create another question when the project arises again.

Featured Post

Are You Ready for GDPR?

With the GDPR deadline set for May 25, 2018, many organizations are ill-prepared due to uncertainty about the criteria for compliance. According to a recent WatchGuard survey, a staggering 37% of respondents don't even know if their organization needs to comply with GDPR. Do you?

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.
Suggested Courses

656 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question