Announcement

Collapse
No announcement yet.

Moving all FSMO roles to Another DC

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Moving all FSMO roles to Another DC

    Hi All,
    How can I move all FSMO roles from old DC to new DC?
    After moving these roles, I want to remove old DC from my organization.

    Thanks in Advance.
    Thuya

  • #2
    Re: Moving all FSMO roles to Another DC

    Originally posted by winthura View Post
    Hi All,
    How can I move all FSMO roles from old DC to new DC?
    After moving these roles, I want to remove old DC from my organization.

    Thanks in Advance.
    Thuya
    Join the new DC to the domain and then 'transfer the roles'. Ensure you make it a GC and DNS as well. If DNS is AD inegrated, it will be a case of just installing DNS and it will populate itself without further intervention. I would also leave it a week after transferring roles and then demote the old DC.

    GUI way.

    http://support.microsoft.com/kb/255690

    Command line way.

    http://support.microsoft.com/kb/255504

    You will be transferring not seizing.

    Comment


    • #3
      Re: Moving all FSMO roles to Another DC

      Hi All,
      I fount it.

      1. On the old server open DNS management console and check that you are running Active directory integrated zone (easier for replication, if you have more than one DNS server).

      2. run replmon, dcdiag and netdiag on the old machine to check for errors, if you have some post the complete output from the command here or solve them first.

      3. Install the new machine as a member server in your existing domain.

      4. configure a fixed ip and set the preferred DNS server to the old DNS server only.

      5. run dcpromo and follow the wizard to add the new 2003 server to an existing domain.

      6. if you are prompted for DNS configuration choose Yes (also possible that no DNS preparation occur), then install DNS after the reboot.

      7. for DNS give the server time for replication, at least 15 minutes. Because you use Active directory integrated zones it will automatically replicate the zones to the new server. Open DNS management console to check that they appear.

      8. if the new machine is domain controller and DNS server run again replmon, dcdiag and netdiag on both domain controllers.

      9. if you have no errors, make the new server Global catalog server. Open Active directory Sites and Services and then double-click sitename, double-click Servers, click your domain controller, right-click NTDS Settings, and then click Properties, on the General tab, click to select the Global catalog check box. (http://support.microsoft.com/?id=313994)


      10. Transfer, 5 FSMO roles to the new Domain controller (http://support.microsoft.com/kb/324801)

      11. you can see in the event viewer (Directrory service) that the roles are transferred, also give it some time.

      12. reconfigure the DNS configuration on your NIC of the 2003 server, preferred DNS itself, secondary the old one.

      13. if you use DHCP do not forget to reconfigure the scope settings to point to the new installed DNS server.

      14. export and import of DHCP database (if needed).

      15. install WINS according to this http://support.microsoft.com/default.aspx?scid=kb;en-us;875419


      Demoting the old one

      1. reconfigure your clients/servers that they not longer point to the old DC/DNS server on the NIC

      2. to be sure that everything runs fine, disconnect the old DC from the network (some days) and check with clients and servers the connectivity, logon and also with one client a restart to see that everything is ok

      3. then run dcpromo to demote the old DC, if it works fine the machine will move from the DC's OU to the computers container, where you can delete it by hand. Can be that you got an error during demoting at the beginning, then uncheck the Global catalog on that DC and try again.

      4. check the DNS management console, that all entries from the machine are disappeared or delete them by hand if the machine is off the network for ever


      How to view and transfer FSMO roles in the graphical user interface
      http://support.microsoft.com/kb/255690

      Using Ntdsutil.exe to transfer or seize FSMO roles to a domain controller
      http://support.microsoft.com/kb/255504

      Comment


      • #4
        Re: Moving all FSMO roles to Another DC

        Thanks for the post back. Your original post only mentioned transferring the FSMO roles and demoting the existing DC from the domain. If you had let us know the other services or wanted more detail, we could have provided this to you.

        Glad you got it sorted.

        Comment

        Working...
        X