Building AD from Scratch

iFixedIT
iFixedIT used Ask the Experts™
on
We have AD Infrastructure in the company ,m asked to build  AD from the scratch on server 2012 with new domain and then just migrate the OU's . we will have 1 physical DC and  1 Virtual DC  at one  site and One physical DC in other site.We have two main sites distance between them is 2000 miles. Company is about 250-300 users , how would I go about it ?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Senior Solution Architect
Most Valuable Expert 2015
Top Expert 2015
Commented:
If you plan on only migrating OU's then all you need to do is extract your current OU structure of your current domain and import that using powershell into the new one.

If you are looking to migrate AD objects as well as OU's and have this communicating while you are doing the migration then you will need to do the following...
- create a new Forest Root Domain on 2012
- setup DNS between the 2 domains
- create a forest trust between your old and new domain
- use ADMT (active directory migration tool) in the source domain to migrate users to the new domain
- use SIDHistory for backward compatibility to the old domain once the ad objects have been moved to the new domain

Setting up a new domain is very easy
- install 2012R2 on a server
- add the active directory domain services role
- promote the server to a DC
- follow the on-screen wizard to complete the processs (internal fqdn etc)

Once that is in place use the ADMT to migrate the users.
https://connect.microsoft.com/site1164/program8540

Step by step guide for ADMT setup
https://blog.thesysadmins.co.uk/admt-series-1-preparing-active-directory.html

Will.

Author

Commented:
Thanks for the quick response Will. already have 2008 AD in environment. Needed to built 2012 AD from scratch with DNS and new domain, then only migrate the OU's. Basically new environment with fresh 2012 AD .
Will SzymkowskiSenior Solution Architect
Most Valuable Expert 2015
Top Expert 2015

Commented:
That should not be hard at all then. Glad to help!

Will.
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

yo_beeDirector of Information Technology

Commented:
I know you already awarded point to this question, but you also mentioned multiple sites as well as VM's.
I have a some questions which were not addressed.

1st: How many hypervisors are you going to run in your environment?

2nd: Are you planning to run Hyper-v as your hypervisor and have this running as a role on your DC?  

3rd: How do the offices connect to each other?

You will need to setup your Sites & Services correctly.

Author

Commented:
Thank you

One physical Dc and one virtual running on VMware and the other site will have Physical DC too
offices connect through WAN link
yo_beeDirector of Information Technology

Commented:
Good to hear that

Just make sure you add the subnets and your sites that clients communicate on to Sites & Services. After you do that assign the subnets to the correct site.

This will control how clients communicate with the various DC's. If you do not set this up or set it up incorrectly then it becomes a round-robin call to any one of your DC's.  Being that your sites are 2000 miles apart this can result in slow logins and DNS calls.
yo_beeDirector of Information Technology

Commented:
Here is a link that will help explain it more and set it up correctly.

https://technet.microsoft.com/en-us/library/cc730868.aspx

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial