Do I need to Promote/Demote Windows 2003 DCs if one will be relocated to a new branch office as a stand alone Domain Controller
Windows 2003 Server environment with 2 Domain Controllers. Both running File/Print Services, DNS, AD, separate databases,etc. The office is expanding into a new branch office and planning to bring one of the DCs and some of the desktops. The branch office will be isolated or stand alone. No resource will be shared except for their email and CRM database that is being hosted offsite. Do we need to demote the DC that will be relocated? If not, will I get a lot of synching errors such as DNS, AD, etc. Thanks.Ramon Nuguit
December 2nd, 2010 1:20pm

Hello, to understand you correct, the new location should work with the same domain users/computers as in your currecnt situation? If this is the case you can't demote a DC as this will remove the complete domain information from it and moving machines to the new location will only allow local machine login. If the new location should use the same accounts/machines as on the current situation you have to create a connection between the sites and make sure both DCs can replicate. If you just move one DC from the 2 to another location you run into trouble, as the FSMO roles are missing on one of them, they exist only once in the domain, this is by design and prevents you from creating new accounts or reset passwords for example. ----------------------------------------------------------- Theoretical you can separate the DCs( both must be DNS server and Global catalog) and seize the FSMO roles on the one that doesn't have them. Then on each of the DCs must be run a metadata cleanup to remove the other DC from the AD database etc. to avoid replication errors. BUT WITH THIS KIND OF BREAKING A DOMAIN !!!NEVER!!! RECONNECT THEM OR USE A COMPUTER ON THE OTHER DOMAIN PART AGAIN. ----------------------------------------------------------- In your situation with separating them complete create a new forest/domain with different name and use ADMT to migrate the needed computers/users to the new domain. That way you have a new domain with the needed old accounts and profiles. Keep in mind that it is recommended to have at least 2 DC/DNS/GC per domain for failover and redundancy.Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
December 2nd, 2010 4:28pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics