Solved

Server 2003 demote DC keep DNS

Posted on 2014-10-24
4
591 Views
Last Modified: 2014-10-27
I'm looking for step by step instructions.

I have several Domain Controllers.  Mostly Server 2008 R2.  However, I still have two Domain Controllers with Server 2003 that I want to Demote; I need to keep the DNS after the demotion.

There are still many Static IP Servers pointing to it for DNS resolution as well as other devices.  I want to eventually change their settings to the newer 2008 R2 Domain Controllers with DNS.  But for now I need these two Server 2003 Domain Controller to serve up DNS until they are all changed.

I can't wait until I get everything moved.  I need to demote now and move DNS later.
Step by Step on how I keep my DNS please.  After the Demotion I know the DNS will be gone.  I'm looking for step by step on how to keep the DNS exactly the same way.  I can't have any down time outside the demotion and DNS repair.
Thanks
0
Comment
Question by:cridog
  • 2
4 Comments
 
LVL 18

Expert Comment

by:Don S.
Comment Utility
DNS does not automatically go away when you demote a DC.  Those are two separate things.
0
 
LVL 34

Expert Comment

by:Seth Simmons
Comment Utility
you would need to configure the domain controller(s) for zone transfers of the zones you want to transfer
on the 2003 servers, add a zone as secondary and specify one of the domain controllers that have the zone transfer enabled

Modify DNS zone transfer settings
http://technet.microsoft.com/en-us/library/cc782181(v=ws.10).aspx
0
 

Author Comment

by:cridog
Comment Utility
dons6718 - DNS is still installed but there is nothing in it.  It is not useful at this point.  I'm trying to make it useful with the domains DNS entries.  It will still be the DNS server everyone else is hitting.  It needs to be able to respond with useful information.

Seth - Sounds like the right track.  The link shows me how to modify DNS zone transfer settings.  And I'm sure that is what I need to do.  However, I'm looking for a step by step solution.  So I demote the 2003 server; restart it; now what.  Where do I go to modify DNS zone transfer?  Is that all I need to do?  After I modify the DNS zone transfer it will work.  I'm missing the steps.  

Thanks
0
 
LVL 34

Accepted Solution

by:
Seth Simmons earned 500 total points
Comment Utility
Where do I go to modify DNS zone transfer?

DNS console in administrative tools

After I modify the DNS zone transfer it will work.

it's a 2 step process - allow zone transfer on the other domain controller and add the zone as secondary on the demoted 2003 server

on the 2008 server, open the dns console, right click on a zone and select properties
click the zone transfer tab
check the box to allow zone transfers and check the option you want to either allow transfer to any server or you can restrict to only allow the servers you want

once that is done, open the dns console on the 2003 server,  right click on the server and select new zone
you fill in the info as far as the name, etc. but for zone type it will have 4 options - primary, secondary, stub and AD integrated; select secondary.  it will ask for the master server to transfer to, put the address of the 2008 server you just allowed the zone transfer on
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
LINUX, CPANEL & WHM 5 16
DHCP Failover Relationship caveats 6 54
DNS A record 4 19
DNS Scavenging configuration 5 13
[b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
I wrote this article to explain some important DNS concepts that should be known to avoid some typical configuration errors I often see in forums. I assume that what is described here is the typical behavior of Microsoft DNS client. I don't know …
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now