Replacing 2000 Domain Controller

reaser · Post by **reaser** » Thu Feb 10, 2011 2:37 am

We have an old 2000 Server as a DC as well as a 2003 Server as a DC. We are replacing the 2000 Server with a 2008 server. I understand you can not move from 2000 to 2008.

I guess my question is how do I determine which is the primary DC, I believe the 2000 Server is but in AD it doesn't say, it just lists both 2000 and the 2003 server a domain controllers.

I've never had to do something like this and this was a pre existing network so i'm not sure if I can just use the 2003 server to add the 2008 as DC and then just remove the 2000 server.

I'm still reading documentation but thought I'd post here and see if anyone else has done a changeover from 2000 to 2008.

Post by **YeOldeStonecat** » Thu Feb 10, 2011 6:11 am

Th direct upgrade is not supported...and support for 2000 ended last year.
Hopefully you're going to be using new bare metal for the 2008 box?
What you'll want to do is ensure that the 2003 server is the main DC that holds the FSMO roles and catalog.
http://www.google.com/search?sourceid=c ... +the+roles

And you'll want to ensure that the 2003 server is the global catalog holder
http://www.google.com/search?sourceid=c ... f8ff10eaf9

Those are easily transferred.

I'd also want domain functionality level to be at 2003....and can't raise this until the 2k box is removed.

What is the 2000 server actually doing, besides being a DC?

reaser · Post by **reaser** » Sat Feb 12, 2011 4:28 pm

Looks like the 2000 Server holds all the FSMO roles. Both servers though have a check for global catalog server. So i'm guessing just using the change option will simplify moving the roles to the 2003 box. Then i can remove the 2000 box and add the 2008 server into place and move the roles from 2003?

Post by **YeOldeStonecat** » Sun Feb 13, 2011 7:30 am

What I meant when I asked "what is the 2000 server actually doing"....I meant besides being a DC and any roles it's holding, what other services is it providing for the network?
Is it the DHCP server?
For DHCP properties...is it the only DNS server being handed out to clients, or is the 2k3 servers IP also being handed out?
Any file sharing?
Any print sharing?
Other infrastructure services like WINS? IIS?
Backup? Antivirus management?

A migration like this is often something that can take from several days or a month or more to fully segway over to a new server. You don't want to rush through the steps too quickly...do a step at a time..and then see how the network is running for a day or so..and then proceed some more.

Shinobi · Post by **Shinobi** » Mon Feb 14, 2011 10:11 pm

Keep this link handy, you may want to go thru it before the migration.

Review the following known issues before you install Active Directory Domain Services (AD DS):

http://technet.microsoft.com/en-us/libr ... 10%29.aspx

reaser · Post by **reaser** » Sun Feb 20, 2011 1:34 pm

The only items the DC handles you've listed is DHCP and DNS. Another server is in place that also handles DHCP and DNS so I believe i'm good there. I will review the link provided. Thanks for the input. The equipment is in and I hope to start the process this week. A little nervous as this will be a learning experience in a live environment but unfortunately I have no other choice.

reaser · Post by **reaser** » Mon Mar 21, 2011 3:31 am

I should have mentioned this before and I'm not sure if this will be a problem. The 2003 machine we are trying to transfer the roles to is also hosting Exchange 2003. Will this be a problem? This is only temporary until the 2008 DC is in place.

And yes, we are running an HP DL 160 G6 for the DC running 2008 Standard. The old 2000 box will be decommissioned.

Post by **YeOldeStonecat** » Mon Mar 21, 2011 6:27 pm

Not a problem.....it's against best practice for larger organizations...but it can be done.
I just got a contract today to upgrade an eye doctors office...going from an old 2K server with a first generation Pentium 4 server with a single 36 gig drive...no RAID...lol. Actually the server..and all 8 workstations..are 8 years old! All bought at once. Ugh...it's all so slow.

reaser · Post by **reaser** » Tue Mar 22, 2011 12:16 am

That is really slow! LOL!

This is a bit confusing, so much information. So if I understand correctly before I transfer roles to the 2003 DC. Should I run adprep to get the network ready for the 2008 DC or can i transfer the roles to 2003 DC then run adprep on the 2003 DC?