Solved

New DC to take over Primary DC

Posted on 2013-06-05
5
295 Views
Last Modified: 2013-06-12
Hello,

Just needs some advice on things to check before I move roles from Current PDC to new PDC.
Want to make sure all is in tip top shape before i seize what is necessary.

Details.
Current PDC- Server 2003 ENT
Backup DC - Server 2008 R2 will take over for Current PDC

Server 2003 PDC after transferring roles will be rebuilt.
0
Comment
Question by:chadkline
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 57

Assisted Solution

by:Mike Kline
Mike Kline earned 250 total points
ID: 39222737
A few things to look out for

1.  Make sure all clients (static/dynamic) are no longer pointing to the old DC for DNS
2.  If your PDC is set to get time from an external source make sure the new one is set the same way

3.  Do you have any other DCs?   Try to get a second one up ASAP (worst case disaster scenario)

Any other apps on the current PDC?

Thanks

Mike
0
 

Author Comment

by:chadkline
ID: 39223888
Well the current 2003 PDC will transfer all roles to NEW 2008 PDC.
The 2003 DC will become the backup.

Just want to find out all the areas I need to check before transferring roles.
0
 
LVL 5

Accepted Solution

by:
HornAlum earned 250 total points
ID: 39234692
You can transfer your 5 FSMO roles without needing to check a whole lot, but there are things to do before you demote the other machine.

If your 2003 box is your DHCP server, you'll need to move the DHCP database
Move DHCP Database

Fix your DHCP rules so that the new server is the primary DNS server.

Check if your server is running a Certificate services. Mine did when i moved from 2003 to 2008R2.

If your old PDC is the time server for the domain, perform this:

w32tm /config /syncfromflags:domhier /reliable:no /update
net stop w32time
net start w32time

Open in new window


on 2008 box, do the following:
w32tm /config /manualpeerlist:PEERS /syncfromflags:manual /reliable:yes /update

Open in new window


Where PEERS is the time source

you can check to make sure the other server is grabbing time from the new server by doing a "w32tm /monitor". you may need to rerun the w32tm /config line from the first snippet of code just to make sure it is grabbing time from the new PDC

see http://support.microsoft.com/kb/816042

Because your new box will most likely be the primary DNS server, define forwarders in the DNS properties of the box to use a few public DNS servers. use fast dns servers. (google and opendns servers tend to be some of the fastest)
0
 

Author Comment

by:chadkline
ID: 39242139
HornAlum,

If my Time Server settings are controlled thru GPO will i still need to do your w32tm steps above?
0
 
LVL 5

Expert Comment

by:HornAlum
ID: 39242160
depends? are you pointing clients to an external source, or are you pointing them to a PDC? if you want your clients to point to the PDC, you still need to do the setting on the PDC, otherwise it will not grab the time properly from the external source.

I'm not familiar with using a GPO for time settings, but I think your PDC needs to be at least set up
0

Featured Post

Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
A hard and fast method for reducing Active Directory Administrators members.
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question