WellingtonIS
asked on
Adding a 2012 server to an existing domain as a DC
I lost a DC from a domain. I only have one left. I'm trying to raise the function of the domain so I can add a 2012 server. It is still looking for the schema master which was a 2003 server. What can I do to make the current 2008 server the schema master? it's tell me the current server is off line so it will not change.
If the server that died was the schema master then you'll have to restore a backup (recommended) or "seize" (not transfer) the role. I generally don't recommend seizing roles unless it is a last resort, but that all depends on your situation.
ASKER
I don't have that option. The server is dead and it has all the roles
Well, the very first thing you'll want to do is review and update your disaster recovery plan then. Obviously this failure has caused a pain point and could've been avoided. I don't say this to pour salt in the wound, but to stress that *anything* moving forward has the chance for further damage, and having a DR plan in place in case your repair plans go sideways is even *more* important now.
Once you have a trusted DR plan, then you can seize the roles. Then remove the remnants of the old DC from AD and DNS. Then introduce a new DC. In that order.
Once you have a trusted DR plan, then you can seize the roles. Then remove the remnants of the old DC from AD and DNS. Then introduce a new DC. In that order.
ASKER
So there's nothing I can do at all right now.
ASKER
I deleted it out of AD and it worked. I was able to take back the roles
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
OK because if it query the FSMO it's on the correct server however, the 2012 is still thinking the function level is 2000?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
did the clean up the old DC is gone. But the 2012 is still seeing the forest as 2000? What to do?
ASKER
You were right. I just did it now let me see if I can make my 2012 a DC.
If you think AD is corrupt, rebuild AD. If not, go forward as normal. If you are unsure, it is best to hire a local Active Directory expert to help clean up your situation.
ASKER
Thanks guys that did the trick! Much appreciated. I forgot the basic rules about the forest - thanks for reminding me.
Hi,
Open adsiedit.msc>>Connect RootDSE>>Right click and select properties of RootDSE>>What's the forestFunctionality showing? I.e - 6=(WIN2012R2).
If it's showing correct here then no need to worry. But here too showing 2000 then you may need to perform adprep /forestprep and adprep /schemaprep
Then raise the functional level.
Open adsiedit.msc>>Connect RootDSE>>Right click and select properties of RootDSE>>What's the forestFunctionality showing? I.e - 6=(WIN2012R2).
If it's showing correct here then no need to worry. But here too showing 2000 then you may need to perform adprep /forestprep and adprep /schemaprep
Then raise the functional level.
Didn't realized that you already assigned points :)
You said you "lost a DC from domain" was it the 2003 DC? what was the issue with that DC? did you completely de-commissioned the DC? or is it just unplugged and kept aside?
What's the outcome for the below command?
netdom query fsmo
and
netdom query dc
Looks like all the FSMO roles are still holding by the old DC.