Hi, I have 2008 R2 server with DNS, DHCP, DC and AD. I also have an old server 2003 that I decided to run like as a "backup server" (files/folders from main server and files/folders from user desktops). I'm also thinking to have a second DC on 2003. What is the easiest way to do this ? What are the only things install on 2003 Server and how do I add 2003 server to existing 2008 r2 ? I already installed on 2003 server: DNS, DC and AD (I just made a standard new/fresh installation). Thank you for helping. Mike

Hi i would join old server as a additional domain controller. make that server a GC server as well. make a server a dns as well. server 2008r2 will hold a fsmo role becuase that server will be primary domain controller. can you define your question in detail please. thanksNaeem Bhatti MCITP EA, MCITP, MCTS Exchange 2007 MCSE security,MCSE AD, MCSE in Messaging, MCDST SBS2003 and SBS2008 Specialist

How to create a DC? You would run DCPROMO. However, before you can proceed, it depends on several factors. The most important I think is related to functional level. It may not be possible to introduce a Windows 2003 server as a DC into this AD 2008 R2 domain. It depends on the current functional level of the domain. Do you know what is the current forest and domain functional level for this AD instance? After this question is answered, and lets assume that it is supported, then you will need to consider what roles you would want to run on this server. Generally DCs run well with the DNS service. Some people also run DHCP on DCs, but I find that as you consider additional roles, it is best to run them on other systems. Some definate don'ts--> Exchange and/or SQL. Here is more information about Functional Levels. What Are Active Directory Functional Levels? http://technet.microsoft.com/en-us/library/cc787290(WS.10).aspx Visit: anITKB.com, an IT Knowledge Base.

Hello, Thank you all for helping. I'm beginner and probably this problem is very simple to resolve, and it is probably stupid problem :) [quote]Do you know what is the current forest and domain functional level for this AD instance?[/quote] Yes I know, 2008 R2 has functional level - Windows Server 2003. (it was in standard when I installed system) Well, I try to explain in detail. I have in my company only one 2008 R2 server that is working for more than 2 months. I have installed on it DHCP (for desktops), DNS, AC/DC. I have installed on it some medical program that using SQL Express. All computers and server are connected to one switch. Of course server has static IP address and desktop get IP from DHCP server. Everything is working perfect, so far. And, Now :) I found one old (3-4 years old) server with MS 2003 Server. I just reinstall it and it looks good, it already have installed DNS, AC/DC - I made a standard 2003 installation. I decided to used it as a backup server. If it is one of my equipment what to not use it :))) Am I right ? ;) I want backup on it some files from server 2008 R2 and some files from desktops. And I read that is good to have second DC on network, and I thought that I can use 2003 server for this also. Later, maybe I will install on it "Employees clock in and out - Time & Attendance" software. I was never in my life add a second server, that why I need to know what I should remember/know ;) 1. Should I install/uninstall some roles from servers ? if yes, what is it ? 2. Should I change something in configuration ? If yes, what I need to change ? There is something else that I should to know ? If you can explain me in simple steps what should I do, I would be very grateful ! I cannot afford to search on Google and testing "it will working or not"; it's for my company too big risk, moreover, for me too ;) One more time sorry for stupid question. At school we only learn how to configure 2008R2 and have never add second server. Thank you for help ! Mike

Hello Mike, Ok, based on your response, your AD domain will allow for you to integrate a 2003 DC. However, you mentioned that AD is already installed on that server??? So is it in the same domain as the R2 server? If so, that is very good. If not, you cannot use that DC to participate in the same domain as the R2 server. What you can do is check the domain membership for both systems. Make sure they are on the same domain. You can easily open the Active Directory Users and Computers console. Look at the domain controllers OU. Are both servers listed there, hope so... Lets say for a moment that this was a new clean install, nothing installed. You would first join it to the existing domain, then run DCPROMO. then you can install DNS and any other service you are interested in related to Active Directory. since both servers would be running DNS, you can update your DHCP scopes to have your clients point to both servers for DNs name resolution. In regars to "There is something else that I should to know ?" . YES, there is definately alot of knowledge that you need to gain to be able to properly manage Active Directory and other networking services. Too much to provide in a forum posting. Visit: anITKB.com, an IT Knowledge Base.

Hi Mike, As JM mentioned, start from "just reinstall it", we will add it to domain (by change the "Member of" from workgroup to domain), reboot and run DCPROMO to promote it as a DC (of existing domain), then it will be a second DC of the domain you just joined. If "DC is already installed" means the DCPROMO step is finished, and it is joined to the same domain (your company domain), it is already been the second DC.Shaon Shan| TechNet Subscriber Support in forum| If you have any feedback on our support, please contact tngfb@microsoft.com

OK, Thank you for all ;) I have one more question. I have static IP on the main server (2008 R2): IP Address: 192.168.1.254 Subnet Mask: 255.255.255.0 Default gateway: 192.168.1.200 (my router IP address) Prefered DNS server: 127.0.0.1 (loopback) How should looks like second server (backup) - 2003 ? Like that: ? IP Address: 192.168.1.253 Subnet Mask: 255.255.255.0 Default gateway: 192.168.1.200 Prefered DNS server: 192.168.1.254 Thank you ;) Mike

Hello, I alreday add second server (DC) and main server (2008 R2) now see the second DC. Everything looks OK. I think ;)))) Couple more questions: 1. If I add this server 2003 as second DC, I can NOT login to this server like built-in user (not domain) ? 2. If I'm not built-in administrator account I can NOT install other server setup (programs/roles and futures) ? 3. After I add server like secondar DC I lost possibility to run Server Managments. That is normal ? Thank you one more time for helping, and I'm sorry for stupid (i guess) questions... Mike

Your IP settings above look correct for the initial config. Once the 2003 DC is established and DNS is running on it, you should point the server's DNS client settings to itself (like you set up the 2008 server) In regard to your last posting: 1) There are no "local" users on DCs, so no there is no "built-in" user. You need to log in as a domain user. 2) That is correct. Non domain admin users are limited to certain activities on DCs. 3) Not sure what you mean by server managments. please clarify. Mike, no worries... there are no stupid questions here. Every question is valid. that is the purpose of the forum. Visit: anITKB.com, an IT Knowledge Base.

3) Not sure what you mean by server managments. please clarify. Mike, no worries... there are no stupid questions here. Every question is valid. that is the purpose of the forum. Visit: anITKB.com, an IT Knowledge Base. Hi, Thanks !!! I already changed DNS record ;) ad.3 I mean: Start / Administrative Tools / "Server Management" - can'r run... probably this is the same reason - DC limited. Can you tell me what are default shared folders in 2003 server ? I disable all shared folders in 2003 server, and now 2008 R2 server have problem access to AD/DC scripts/files etc. and I get some errors like: Event ID: 1925, 1307. Thank you Mike PS: ITKB - can you email me please, I have a personal request to you. mmalejko[at]gmail[dot]com - Thanks !

ad.3 I mean: Start / Administrative Tools / "Server Management" - can'r run... probably this is the same reason - DC limited. --> No, you should expect to run Server Management on a DC just as you would on any other server. Can you tell me what are default shared folders in 2003 server ? I disable all shared folders in 2003 server, and now 2008 R2 server have problem access to AD/DC scripts/files etc. --> Wow, I don't know these off the top of my head. Not sure at the moment, what the easiest way to restore that is going to be. PS: ITKB - can you email me please, I have a personal request to you. --> Mike, don't take this the wrong way, but I really do not engage outside of this forum. I will be more than happy to help using this forum. I stopped teaching and charging people for my time a while ago. This is the most that anyone is going to get from my currently. thanks for understanding. You should be able to get someone else, much smarter than me to help you with your personal request. PS if you are going to post your email address on the internet, you should probably put it in this format otherwise you are exposing yourself to systems that crawl the net looking for potential email addresses to spam--> email[at]domain[dot]com. Visit: anITKB.com, an IT Knowledge Base.

Can you tell me what are default shared folders in 2003 server ? I disable all shared folders in 2003 server, and now 2008 R2 server have problem access to AD/DC scripts/files etc. --> Wow, I don't know these off the top of my head. Not sure at the moment, what the easiest way to restore that is going to be. PS: ITKB - can you email me please, I have a personal request to you. --> Mike, don't take this the wrong way, but I really do not engage outside of this forum. I will be more than happy to help using this forum. I stopped teaching and charging people for my time a while ago. This is the most that anyone is going to get from my currently. thanks for understanding. You should be able to get someone else, much smarter than me to help you with your personal request. OK, I undestand and thank you for that ! ;)) If you have server 2003 and you go via network... you will see all shared folders (probably you know that but I note that this is the easiest way...) Thank you one more time ! ;) Mike

Can you tell me what are default shared folders in 2003 server ? I disable all shared folders in 2003 server, and now 2008 R2 server have problem access to AD/DC scripts/files etc. and I get some errors like: Event ID: 1925, 1307. Anyone ? Please ;) can put the names of folders that should be shared. Thank you ;) Mike

Mike, By default, the Windows system will have the Admin$, driveletter$, IPC$. The only other shares that you would expect on the 2003 DC is going to be NetLogon and Sysvol. If you have modified those AD shares, I think the best approach is to DCPROMO the server down, allow for AD replication, and DCPROMO it back up so that you allow the system to recreate the shares properly. Visit: anITKB.com, an IT Knowledge Base.

OK, Thank you. I tried dcpromo but it is not working. I couldn't setup dcpromo - lots of error communications show up. The servers doesn't want to talk each other. I reinstalled one more time server 2003 (good for me). But this time, just after installation (clean system) I do not allow to "RUN SETUP" server (last time when I did it, it tooks me 2 hours and I was using 3 other Windows 2003 Server instalation CDs). I just changed a network setting and added server to my domain. Then I run dcpromo and went by a setup wizard - second DC. It is looking very good. I have a question about adding other roles and futures ? What do you recomended to add to my Backup Server. Should I add a DNS ? I know that it is hard to answer for this question, because it depend what I need for my company. But just for standard, recommended setting, what you recommended (what is good to install) for small company like mine. Thank you very much for helping. I learned because of you many new things... Mike

Hello Mike, Typically in Active Directory implementations, it is very common to have the DNS role installed on every DC. Having the DNS role on two AD servers is a very good design as it will provide your clients with a highly available DNS solution. You would configure your DHCP scope(s) to configure your clients with both DNS servers. Aside from DNS, some also install the DHCP service on the DCs. Personally, I like to separate the roles as much as possible. However, you do have to take costs into consideration. Aside from that, I do not recommend other roles such as Exchange, SQL, File and Print for DCs. Visit: anITKB.com, an IT Knowledge Base.

Thanks for answer. That is what I want :) Thank you.

Awesome. Glad I was able to help.Visit: anITKB.com, an IT Knowledge Base.