Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 185
  • Last Modified:

Promoting Windows Server 2012 R2 as domain controller in Windows 2003 forest & domain ?

Hi,

I've just rebuilt a physical server of Windows Server 2012 R2 Std. and I' about to promote it as Domain Controller and FSMO role holders, what are the caveats and pitfalls that I need to be aware of when transferring from old Windows 2003 DC ?

I'm planning to make the new 2012 R2 box as a PDC Emulator, Infrastructure and RID master.

The domain and forest functionality level is Windows 2003. Some of the domain controllers are Windows Server 2003 and the rest is Windows Server 2008 R2.

Thanks,
0
Senior IT System Engineer
Asked:
Senior IT System Engineer
  • 4
  • 2
  • 2
  • +2
7 Solutions
 
Lee W, MVPTechnology and Business Process AdvisorCommented:
As long as you keep the domain and forest functional levels at the 2003 level, there is nothing to be concerned with, at least nothing I would be and can recall being concerned with.  Obviously, functionality offered by 2012 that relies on the functional levels being higher won't be available, but other than that... go for it.
0
 
Senior IT System EngineerIT ProfessionalAuthor Commented:
Ok so what about the FSMO role to be transferred from 2003 to this new 2012 R2 box ?

Is there any special way to do it ?
0
 
Seth SimmonsSr. Systems AdministratorCommented:
you can use ntdsutil on the 2012 R2 server to transfer

Using Ntdsutil.exe to transfer or seize FSMO roles to a domain controller
http://support.microsoft.com/KB/255504?wa=wsignin1.0
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
Manoj BojewarCommented:
0
 
Will SzymkowskiSenior Solution ArchitectCommented:
Just a note, if you are going to be demoting your 2003 domain controllers make sure that all of your SRV records have been cleanup accordingly (_msdcs folder).

Will.
0
 
Senior IT System EngineerIT ProfessionalAuthor Commented:
Thanks All for the suggestion.

@Will: Ok so as part of the old DC decommission process, do I need to manually delete the _msdcs folder or entries that point to the old DC ?
0
 
Will SzymkowskiSenior Solution ArchitectCommented:
Each folder under the _msdcs folder will have GC,DC, domains etc. I would go through these and make sure there are no remnants of the old domain controller in here after demotion. I have seen issues like this when demoting 2003 domain controllers.

SRV records can create a lot of issues if there are objects in there referencing services to domain controllers that do not exist.

So don't delete the folder itself go through the entires and see if there are any objects in there referencing the old DC. If there are delete them.

Will.
0
 
Senior IT System EngineerIT ProfessionalAuthor Commented:
Ok, so one last question:

Can I just perform the DCPromo on the new Windows Server 2012 R2 to be the additional domain controller and make it as Global Catalog during the business hour ?

or would there be any impact to the user or to the Exchange Server email flow during the day ?
0
 
Manoj BojewarCommented:
there is no any issue. you can add additional domain controller any time.
0
 
Lee W, MVPTechnology and Business Process AdvisorCommented:
BEFORE you do any promotion or demotion of a DC, I strongly recommend you review the AD health using DCDIAG /C /E /V and correcting any unexplained/unexpected errors.  If memory serves, if you have any failed DCs in AD, it won't let you add another.
0
 
Senior IT System EngineerIT ProfessionalAuthor Commented:
Thanks !
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 4
  • 2
  • 2
  • +2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now