Migrating DC from 2003 to 2008
Hi,
I have made a backup of System State from one DC Server (Old Server) to distribute it on another DC Server (New Server). but I faced a problem of missing hal.dll file but I find a way to solve it by using Recovery console.
But I couldn't enter recovery console where it tells me that the password is incorrect...
May 5th, 2011 8:38pm
Hello,
why are you proceeding like that?
What you to do is to perform a metadata cleanup, resize FSMO roles that the old server was older and promote the new server as a DC.
You said that you were able to solve DLL problem using Recovery Console and that you can not enter recovery Console. How could this be possible.
Please detail what you want to do. Do you have an additional DC with a GC?
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Microsoft
Student Partner
Microsoft Certified Professional
Microsoft Certified Systems Administrator: Security
Microsoft Certified Systems Engineer: Security
Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
Microsoft
Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
Free Windows Admin Tool Kit Click here and download it now
May 5th, 2011 8:51pm
Hi,
the case is:
I need to migrate from Windows Server 2003 sp1 (DC) to Windows Server 2008 R2. but I need to make the new one has
the same machine name the same IP and make it the primary and only
so I have installed Windows Server R2 on the new server and restored the system state backup from old server and I find that errors:
hal.dll is missed I can't access Recovery Console, it can't accept my Password after restoring process.
Kindly recommend me the best way to migrate/update domain (with the same details) from 2003 to 2008
May 5th, 2011 10:50pm
Don't proceed like that.
Proceed like the following:
Rename your 2003 DC with another name: http://www.petri.co.il/windows_2003_domain_controller_rename.htm
Prepare your forest and domain for the add of the 2008 server: http://technet.microsoft.com/en-us/library/cc731188(WS.10).aspx
Promote the 2008 server with the wanted name as an additional DC and make it a DNS and GC server
Demote the 2003 DC using dcpromo
Note that it is recommended to have at least two DC/DNS/GC servers per domain.
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Microsoft
Student Partner
Microsoft Certified Professional
Microsoft Certified Systems Administrator: Security
Microsoft Certified Systems Engineer: Security
Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
Microsoft
Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
Free Windows Admin Tool Kit Click here and download it now
May 5th, 2011 10:57pm
it is OK but what about the users in the old Active Directory, how can I add them to the new DC server
May 5th, 2011 11:08pm
The approach depends on whether you have another DC in the same AD site. If you have, here's what I would do.
2003 DC to be rename = DC1
Other existing DC in site = DC2
1. Transfer any FSMO roles to DC2
2. Ensure DC2 is a GC and DNS server
3. Demote DC1, unjoin from domain and remove from network
4. Wait for replication to complete to all other DCs in the forest
5. Prepare forest and domain(s) for 2008 R2
6. Promote new 2008 R2 machine as DC1 with same IP address
As Mr X indicates, the approach you outlined using System State restore will not work.Tony www.activedir.org blog:www.open-a-socket.com
Free Windows Admin Tool Kit Click here and download it now
May 5th, 2011 11:13pm
You have nothing to add. All will be replicated.
Just check that AD replication was made without problems.
Salam Basiouny (From Egypt I think :) )
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Microsoft
Student Partner
Microsoft Certified Professional
Microsoft Certified Systems Administrator: Security
Microsoft Certified Systems Engineer: Security
Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
Microsoft
Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
May 5th, 2011 11:14pm
Thanks a lot Mr. X,
I will try the solution. so, I will install a secondary Domain with DNS server.
Yes, I am from Egypt :-)
Free Windows Admin Tool Kit Click here and download it now
May 6th, 2011 2:55am
Hi all,
If I make the 2008 as secondary domain controller and then transfer roles to it as a master then change its IP address and machine name, is that cause a problem???
here is the case:
I want to left the 2003 DC as it is tell I make sure that 2008 is working OK then change 2008 details to be as 2003 (Machine name and IP)
Also, What about DHCP? I have to create it from scratch or I can create DHCP with any scope then perform Backup and Restore
May 8th, 2011 5:35pm
Hello Ahmed,
there is no primary and secondary DC. All DCs are RW except RODCs.
If I make the 2008 as secondary domain controller and then transfer roles to it as a master then change its IP address
and machine name, is that cause a problem???
There is no problem by changing IP address. If it is a DNS server then make sure that client computers / member servers / DCs point to its new IP address as DNS server to avoid DNS problems.
To rename a DC: http://technet.microsoft.com/en-us/library/cc782761(WS.10).aspx
For the rest of what you wrote I have not understood what you want to perform exactly.
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Microsoft
Student Partner
Microsoft Certified Professional
Microsoft Certified Systems Administrator: Security
Microsoft Certified Systems Engineer: Security
Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
Microsoft
Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
Free Windows Admin Tool Kit Click here and download it now
May 8th, 2011 5:47pm
Hi Mr. X,
It is just migration from 2003 to 2008 DC.
I get your steps and I make some steps as creating a domain on 2008 and replicate AD data from the old server but I can't find DHCP, so I will install the scope manually again.
and I will feed you back if there is any problem...
May 8th, 2011 7:26pm
I can't demote the Domain controller due to the following error
The operation failed because:
A domain controller could not be contacted for the domain ORCHTECH that contained an account for this computer.
Make the computer a member of a workgroup then rejoin the domain before retrying the promotion.
"The specified domain either does not exist or could not be contacted."
can I delete all entries manually as Domain Controller computer, DNS records and etc...
or I have to run dcpromo /forceremoval
then Rename and Change IP for the new DC
Note: is there a problem if new domain will be 2008 R2
Free Windows Admin Tool Kit Click here and download it now
May 10th, 2011 11:52am
Proceed like that to force demotion:
run dcpromo /forceremoval on the server perform a metadata cleanup Delete all remaining DNS records for the old DC
Once done you can rename the server and promote it again
You can upgrade to 2008 R2 AD DS without problems. Just have a look to this Microsoft article: http://technet.microsoft.com/en-us/library/cc731188(WS.10).aspx
Your brother from Tunisia :)
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Microsoft
Student Partner
Microsoft Certified Professional
Microsoft Certified Systems Administrator: Security
Microsoft Certified Systems Engineer: Security
Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
Microsoft
Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
May 10th, 2011 1:45pm
Hi,
I didn't run the
dcpromo /forceremoval, I have just turned it off.
I have some errors in Active Directory 2008 as:
1.
Active Directory Domain Services could not resolve the following DNS host name of the source domain controller to an IP address. This error
prevents additions, deletions and changes in Active Directory Domain Services from replicating between one or more domain controllers in the forest. Security groups, group policy, users and computers and their passwords will be inconsistent between domain
controllers until this error is resolved, potentially affecting logon authentication and access to network resources.
Source domain controller:
ot-main_OLD
Failing DNS host name:
9aa52ada-bb56-4985-8e37-04287b479f8c._msdcs.ORCHTECH
I think that error because I failed to demote the old server where ot-main_old is the old server name, I have renamed it from ot-main to that name before migration
2.
Active Directory Domain Services was unable to establish a connection with the global catalog.
Additional Data
Error value:
1355 The specified domain either does not exist or could not be contacted.
Internal ID:
3200e25
User Action:
Make sure a global catalog is available in the forest, and is reachable from this domain controller. You may use the nltest utility to diagnose this problem.
I found that new DC is GC in Active Directory Sites and Services
Have I to solve them or that is normal after te migration process…
And What about the clients/PCs that login to domain, have I disjoin them and join them again to new domain where I tried to login using a new user account, there is error message told
me that there in directory server… they can't connect to domain after disjoin and I can't add a new one ...
Free Windows Admin Tool Kit Click here and download it now
May 11th, 2011 11:48am