Solved

Server Migration

Posted on 2013-11-18
7
179 Views
Last Modified: 2013-12-13
Hello,

We have 2008 server standard edition, working as domain controller. We added 2012 server as a additional domain controller. Now we want to remove 2008 server and make 2012 server as a primary domain controller with no downtime.

Please give proper step by step instructions to achieve the same.

Thanks
0
Comment
Question by:Tsicinc
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 37

Expert Comment

by:Mahesh
ID: 39656283
Please follow below steps

Move all FSMO roles from 2008 to Windows server 2012 with commadline NTDSutil tool or GUI
http://yadhutony.blogspot.in/2012/10/step-by-step-guide-to-transfer-fsmo.html

Move your NTP server configuration from 2003 DC to 2012 DC
http://support.microsoft.com/kb/816042

Note down any standard primary zones on windows 2003 and create them on windows 2012
If you have DHCP server, then change primary DNS ip to windows 2012 in DHCP scopes.
For all member servers, computers and network devices who are using static IP addresses, change primary DNS server to Windows 2012
Point preferred DNS IP on 2008 server to windows 2012 server.
Reboot the windos 2008 DC once and check if replication and name resolution between both DCs is proper
Then use dcpromo to demote the server to member server gracefully
Once demoted, go to active directory sites and services and remove server object from NTDS site settings

If you failed to demote server gracefully, then demote it forcefully with below command
dcpromo /forceremoval
This commad will remove DC forcefully from AD but you still need to cleanup server metadata from AD
http://technet.microsoft.com/en-us/library/cc816907(v=ws.10).aspx

Thanks
0
 

Author Comment

by:Tsicinc
ID: 39656291
can you please give link with snapshot where it explained step by step? Also if we transfer the roles and demote server later on will everything work as it is without affecting anything? OR we need to put new server address in dns list of all clients first?
0
 
LVL 37

Expert Comment

by:Mahesh
ID: 39656315
You can transfer fsmo roles to windows 2012 server and later on you can demote 2008 demote controller whenever you want.
You need to put 2012 server address as preferred DNS on all client computers and servers and network devices prior to demote the 2008 server.
Check below article for step by step
http://www.vmadmin.co.uk/microsoft/43-winserver2008/136-svr2008dcdemote
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:Tsicinc
ID: 39656322
if we just transfer the roles to new server do we still need to put new server address in dns list of clients?

Also what about the dns server on new server. will it replicate automatically or do we need to create manually. Please give proper steps if possible.
0
 
LVL 37

Expert Comment

by:Mahesh
ID: 39656356
You need to put 2012 server address as preferred DNS on all client computers and servers and network devices prior to demote the 2008 server.

You said that 2012 Domain Controller is already deployed.
If thats the case, your all ad integraded dns zones and all directory partitions must be already replicated to 2012 server
So, why you want to create dns manually ?
What i suggested in 1st post is, you need to create any standard priamry zones on windows 2012 if they are exists on windows 2008 server.
bacause after demotion of 2008 those zones cannot be used.

Do one thing.
Connect to DNS console on both servers and check if you have same zones exists on both servers.
If any extra zone (Standard primary) you found on windows 2008 server, then just change it to AD integraded so that it will be automatically created on 2012 server or manually create that zone on 2012 server.

Do you have any domain \ forest trust with other active directory forests, let me know please.
0
 

Author Comment

by:Tsicinc
ID: 39656757
I understand if we demote the dc then dns should be pointed to new dc that's fine.

My question is if we first transfer the roles to ADC and then we will demote the other dc after 4-5 days. then during that period do we need to change dns still? just after transferring roles?

we don't have any other dns zones so its fine we will leave this as it is.

No only two servers are there one DC and other ADC that just recently created.
0
 
LVL 37

Accepted Solution

by:
Mahesh earned 500 total points
ID: 39656911
Your question:
My question is if we first transfer the roles to ADC and then we will demote the other dc after 4-5 days. then during that period do we need to change dns still? just after transferring roles?

No, its not required.
Only You need to make ensure that before starting 2008 server demotion, DNS pointers should be pointed to windows 2012 server.
Thanks
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
OfficeMate Freezes on login or does not load after login credentials are input.
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

717 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question