Small Business Server 2003 to 2012 R2 Migration and Virtualized Domain Controller Questions
-
Let me back up to the first screen in this wizard:
Which option do I choose here for my situation, which is this new server will eventually be the new domain controller once the other one is demoted. So, I want to make sure the domain name remains the same when the new DC takes over...
Add a domain controller to an existing domain
Add new domain to an existing forest
Add a new forestWhich one of the above options are correct? I assumed the first one, right?
-
Yes, the first one.
-
@scottalanmiller said:
Yes, the first one.
OK, I realized that message was a warning so I put in my admin password and moved on...now, LOL, I get this:
-
You need to make sure the new server is pointing to the old server for DNS.
Presumably that is the case if you already joined that domain.
-
@garak0410 said:
@scottalanmiller said:
Yes, the first one.
OK, I realized that message was a warning so I put in my admin password and moved on...now, LOL, I get this:
LOL to the first bit.
Is your 2003 box not authoritative for its zone?
-
In reading the last few posts - I'm wondering if you can go from 2003 directly to 2012 R2? I did a 2003 R2 (non SBS) to 2012 R2 last week with no problems.
Is your license for Server 2012 R2 a Volume License? If so, you can download a copy of Server 2008 R2, upgrade from 2003 first, remove ADDS from 2003, then transition to the 2012 R2.
I'll see if I can find anything to confirm going from 2003 directly to 2012 R2.
-
@scottalanmiller said:
@garak0410 said:
@scottalanmiller said:
Yes, the first one.
OK, I realized that message was a warning so I put in my admin password and moved on...now, LOL, I get this:
LOL to the first bit.
Is your 2003 box not authoritative for its zone?
This is just like parenting. No real manual on how to do it. LOL
Well, I got to this screen (covered up the domain name but I do see my current domain in REPLICATE FROM. OK to hit next?
-
when you click Next the wizard should do the forest prep needed to allow you to install a windows 2012 server as a DC.
-
Will BRB...got a heavily used printer down.
-
OK, the paths looked good, so hitting next (masking out my actual domain and PC names)
Review Options show this:
Configure this server as an additional Active Directory domain controller for the domain "mydomain.local".
Site Name: Default-First-Site-Name
Additional Options:
Read-only domain controller: No
Global catalog: Yes
DNS Server: Yes
Update DNS Delegation: No
Source DC: domainPC.mydomain.local
Database folder: C:\Windows\NTDS
Log file folder: C:\Windows\NTDS
SYSVOL folder: C:\Windows\SYSVOL
The DNS Server service will be configured on this computer.
This computer will be configured to use this DNS server as its preferred DNS server.
So, looking good here to continue to proceed?
-
Looks good to me.
-
-
Ready to click FINISH
First part of results not in screen shot:
Windows Server 2012 R2 domain controllers have a default for the security setting named "Allow cryptography algorithms compatible with Windows NT 4.0" that prevents weaker cryptography algorithms when establishing security channel sessions.
For more information about this setting, see Knowledge Base article 942564 (http://go.microsoft.com/fwlink/?LinkId=104751).
-
As long as you don't have any NT servers or workstations connecting you should be good.
I was concerned that maybe my XP machines might have an issue, but there hasn't been one!
Click install.
FYI, you might want to edit your photo, your domain name is listed there.
-
@Dashrender said:
As long as you don't have any NT servers or workstations connecting you should be good.
I was concerned that maybe my XP machines might have an issue, but there hasn't been one!
Click install.
Clicking on INSTALL. I will not be demoting the old one until Friday evening...
-
Why demote so soon? I would wait a bit longer than that.
-
You have at least 15 days if not longer before this server will start shutting down on it's own. Give yourself plenty of time to make sure all things work.
Did you setup DHCP for the client computers?
-
Definitely wait a little while. My rule of thumb is no less than a week, even in really small environments. Gives me enough time to verify that there are no replication issues going on.
Garak is giving me some 70-410 practice over on another forum
-
It's looking good y'all! I'm gonna buy everyone pizza or coffee when this is done!
The next step on my list is this:
•Transfer FSMO Roles to new Server 2012 R2 Domain Controller
Transfer all 5 or one at a time and start demoting your old Server 2003 DC's in the next step. But the key to remember is to NOT demote any of the current domain controllers that have any of your FSMO roles on them. Be sure to transfer them off first before proceeding to DC demotion.
http://blogs.technet.com/b/canitpro/archive/2013/05/27/step-by-step-active-directory-migration-from-windows-server-2003-to-windows-server-2012.aspxStick with this?
-
@Dashrender said:
You have at least 15 days if not longer before this server will start shutting down on it's own. Give yourself plenty of time to make sure all things work.
90 days I think. Need to look that up.
