Solved

Transferring FSMO Roles from Win2K3 R2 to Win2K8 R2 DC's

Posted on 2013-11-05
4
607 Views
Last Modified: 2013-11-05
Hi,

We recently upgraded our Schema and installed a Win2K8 R2 domain controller onto our network.

Currently we are at the following levels:
- Domain functional level = Windows Server 2003
- Forest functional level = Windows 2000

My questions are these;
- Are we able to move the FSMO roles at anytime?
- Should we raise any of the levels first?
- Will moving over any of the roles be impacting on the DC's while it is happening?
- Should this be completed outside of business hours?

Ultimately we will be decommissioning all of our 2003 DC's, currently we have #1, 2, 3, and 4 as 2003 DCs and #5 as a 2008 DC.

We would like to deploy some RO domain controllers versus having all writeable DC's as we currently have.

Also, the #5 DC is a physical box and all of the other DC's have been virtualized. If we are looking at deploying RO domain controllers in different geographical locations are there any recommendations on whether or not it should be physical versus virtual?

Thank-you everyone in advance for taking the time to respond back.

ElliTech
0
Comment
Question by:ellitech
  • 2
4 Comments
 
LVL 45

Accepted Solution

by:
Craig Beck earned 400 total points
ID: 39624667
You can move roles at any time, by simply transferring them.

I would promote all of the 2008 servers to DCs first, then demote the legacy DCs after a bedding-in period, just to make sure you have no issues.

There are certain things you need to consider when migrating to a 2008 domain if you want to raise the functional level.  Some permissions may be altered and you might find that some resources aren't accessible in certain situations especially where you use Everyone or Anonymous users in ACLs.

As always, do this in a scheduled maintenance window as moving roles may have adverse effects!

This provides some useful info...

http://kpytko.pl/2011/08/25/adding-first-windows-server-2008-r2-domain-controller-within-windows-2003-network/
0
 
LVL 21

Assisted Solution

by:RK
RK earned 100 total points
ID: 39624677
Hi,

You need to consider few things;
1) Raise the forest functional level to 2003
2) You can transfer the FSMO roles any time you wish and this won't impact anything
3) Regarding the Read Only DC, i hope you have already performed rodc prep, if so, it's no matter whether it's a physical or virtual both works same way.

I would also sugegst you to configure the NTP server on the new DC where the PDC role has placed.

I hope this helps.
0
 
LVL 45

Assisted Solution

by:Craig Beck
Craig Beck earned 400 total points
ID: 39624703
2) You can transfer the FSMO roles any time you wish and this won't impact anything
Don't take this for granted... you might transfer a FSMO role to a server which has a problem that you weren't aware of previously.
0
 

Author Closing Comment

by:ellitech
ID: 39624867
Thanks for the feedback, I'll follow the article provided, looks decent enough.

http://kpytko.pl/2011/08/25/adding-first-windows-server-2008-r2-domain-controller-within-windows-2003-network/

Thanks for taking the time to respond back.

ElliTech
0

Featured Post

Make managing Office 365 email signatures a breeze

Are you using Office 365? Having trouble trying to set up email signatures for your users? Getting stressed out managing multiple signatures? Need an easier way to manage? We have a solution for you, try the most-user friendly and powerful signature management tool on the market.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you migrate a Terminal Server licenses server inside the 2008 server family, you can takte advantage of the build-in migration tool. If you like to migrate an older 2003 Server (and the installed client CALs) to a 2008 R2 server for example, you …
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now