Adding a 2003 server to windows 2000 domain

  • Thread starter Thread starter joseph
  • Start date Start date
J

joseph

Greetings, I hope this is a quick question
If I need to add the first windows 2003 server to windows 2000 domain , I
understand that I have to run adprep command ..right now my 2003 is set as
workgroup , how would it know to which domain this Prep will point it ...or
it does not matter ... will I assume the adprep will work for any windows
2000 domain

Appreciate any reply
 
Hello Joseph,

Adprep command has to run on the 2000 DC which keeps the Schema master role
from the 2003 install disk with an account that is member of the schema admins
group.

Also see this for upgrading:
!!!NEVER START BEFORE HAVING CREATED AND TESTED A BACKUP OF YOU DATA/MACHINE!!!

One question first:
Is the old server also Exchange server and will it be taken out of the domain
forever, when the new server is running?

- On the old server open DNS management console and check that you are running
Active directory integrated zone (easier for replication, if you have more
then one DNS server)

- run replmon from the run line or repadmin /showrepl, dcdiag and netdiag
from the command prompt on the old machine to check for errors, if you have
some post the complete output from the command here or solve them first.
For this tools you have to install the support\tools\suptools.msi from the
2000 or 2003 installation disk.

- run adprep /forestprep and adprep /domainprep from the 2003 installation
disk against the 2000 server, with an account that is member of the Schema
admins, to upgrade the schema to the new version

- Install the new machine as a member server in your existing domain

- configure a fixed ip and set the preferred DNS server to the old DNS server
only

- run dcpromo and follow the wizard to add the 2003 server to an existing
domain

- if you are prompted for DNS configuration choose Yes (also possible that
no DNS preparation occur), then install DNS after the reboot

- for DNS give the server time for replication, at least 15 minutes. Because
you use Active directory integrated zones it will automatically replicate
the zones to the new server. Open DNS management console to check that they
appear

- if the new machine is domain controller and DNS server run again replmon,
dcdiag and netdiag on both domain controllers

- if you have no errors, make the new server Global catalog server, open
Active directory Sites and Services and then double-click sitename, double-click
Servers, click your domain controller, right-click NTDS Settings, and then
click Properties, on the General tab, click to select the Global catalog
check box (http://support.microsoft.com/?id=313994)

- Transfer, NOT seize the 5 FSMO roles to the new Domain controller (http://support.microsoft.com/kb/324801)

- you can see in the event viewer (Directory service) that the roles are
transferred, also give it some time

- reconfigure the DNS configuration on your NIC of the 2003 server, preferred
DNS itself, secondary the old one

- if you use DHCP do not forget to reconfigure the scope settings to point
to the new installed DNS server

- export and import of DHCP database (if needed) (http://support.microsoft.com/kb/325473)


Demoting the old DC (if needed)

- reconfigure your clients/servers that they not longer point to the old
DC/DNS server on the NIC

- to be sure that everything runs fine, disconnect the old DC from the network
and check with clients and servers the connectivity, logon and also with
one client a restart to see that everything is ok

- then run dcpromo to demote the old DC, if it works fine the machine will
move from the DC's OU to the computers container, where you can delete it
by hand. Can be that you got an error during demoting at the beginning, then
uncheck the Global catalog on that DC and try again

- check the DNS management console, that all entries from the machine are
disappeared or delete them by hand if the machine is off the network for ever

- also you have to start AD sites and services and delete the old servername
under the site, this will not be done during promotion

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
 
Thank you guys ...that's plenty of information !! let me go through them
....but initially I thought I had to run the adprep on thw windows 2003 ...but
thanks to the info I guess I have to run it on the windows 2000 ...I don't
have any exchange server
so that's should make it easy.... my plans are to gradually introduce 2003
servers make them DC and take over roles from windows 2000 and later
decommission the windows 2000

I will try as above and get back to you if I have any issues.
 
Joseph,
Thank you guys ...that's plenty of information !! let me go through them
....but initially I thought I had to run the adprep on thw windows 2003 ...but
thanks to the info I guess I have to run it on the windows 2000 ...I don't
have any exchange server
so that's should make it easy.... my plans are to gradually introduce 2003
servers make them DC and take over roles from windows 2000 and later
decommission the windows 2000

The guidance with get you through the process.
You basically prepare the existing 2000-domain for the first 2003-DC
(Schema, configuration,...). After that, you can promote the Server 2003
member server to be an additional DC.

cheers,

Florian
 
Thank you Marcin...

at the start I thought this exercise is straight forward ; however the more
I read about it the more I am hesitating to do this ....so far I read that I
need to ensure that all the FSMO roles should not be on one DC ; as well that
the schema should be in a state to allow schema changes... in truce we don't
spend a lot of time around our windows 2000 servers beside the basic
installation so I may need to get myself back into the understanding of the
FSMO roles and other stuff. ....however in a nutshell do you think running
adprep will harm anything
 
Joseph -
Do you have any custom schema extensions presently?
Make sure that you use the latest version of the ADPREP and keep in mind the
impact of SYSVOL replication following changes to permissions of its
Policies subfolders (schedule adprep /domainprep /gpprep to run when
additional replication traffic will have minimal impact to your production
environment). Verify that each stage completed successfully before you
proceed with the next.
Refer to http://technet.microsoft.com/en-us/library/cc783495.aspx for
additional info on the subject, including compatibility problems with
Exchange 2000 and SfU 2.0

hth
Marcin
 
Thank you Marcin

I don't believe I have any schema extension ....we don't have the expertise
to do this level...in any case is there a quick way to check and how..

I have however a one DC that was turned off in a D.C. due to power
conservation ..I guess it is better to bring it up since there will be some
kind of change propagation

Also ..one last question ...sine our environment is small 2 DCs and just 3
member servers... I have all the FSMO roles on one server .... I read
somewhere (I can't remember) that I may need to split these roles ....

Thank you very much for your help
 
Back
Top