Sunday, March 29, 2009

Migrate windows 2000 domain to windows 2003 domain

Here are some links about the windows 2003 domain/forest features and benefits.
http://www.petri.co.il/whats_new_in_windows_server_2003_active_directory.htm
http://www.petri.co.il/understanding_function_levels_in_windows_2003_ad.htm

I completed a migration ( not the in-place upgrade) last week smoothly, now let me review the steps I did, comparing with the steps that other people follows.

1. Background: Two server, Server1 is the windows 2000 domain controller, also the root domain of forest, and hold all FSMO role and GC role. AD integrated DNS is on server1 as well.
Server2 is a new Windows 2003 server, not join in the domain yet. DHCP is running on the local router, no DHCP /file server/WINS functioned and no need to migrate these features.
2. Since the forest is still windows 2000, I need to use ADprep tool to prepare the upgrade on Server1. Run ADprep /forestprep , and ADprep /domainprep on Server1, because it is the forest schema master and the infrastructure master of this domain. Run "dcdiag" to diagnostic the current AD environment including FRS and GPO replication
3. Run "dcpromo" on the server2. During the AD installation wizard, reconfigure the network DNS setting so that it will query Server1 DNS to locate biovail.local domain. Chose to install in a existing forest, and existing domain . The installation complete but DNS service is not install on this new server. This result confirms that "dcpromo" don't necessary install DNS on each new DC. It is because no every DC in a larger environment need to be a DNS server.
4. Since I will move every AD function off the server1 to server2. I need the DNS function on the new server. Install DNS on server2, using Add/Remove program.
5. Verify the DNS on the new server is working and change the preferred DNS on its network setting to 127.0.0.1, itself. Use SRV query to verify if the new server has registered the DC service.
6. reboot server2, and all the function missed become avaiable.
7. transfer all FSMO role, GC role to server2
8. run "dcpromo" on server1 to demote the AD on this windows2000, which will remove DNS service as well. Run a backup of system state first.
9. run SRV query again to verify the record has been unregistered.
10. Run a workstation to test if it start to logon to the new server instead of old DC. Use "set" command and look for "logon server " entry.


Review: no need to do DNS zone transfer; other steps put install DNS server first before promote the 2003 server, but my steps works fine. Note that DNS has many details , such as forwarder, event log detail, replication.

No comments:

Post a Comment