From: jjj0923 on 27 Apr 2010 17:29 I hate to resurrect this thread but it seems like to right place to ask this question: I just put together a new network - dns servers, domain controllers (2003 ad) and an isa firewall to accomodate a new verizon fios business line that will replace our existing T1 line. I have a lot of user and computers defined in my existing domain controllers. Basically what I want to do is to get a copy of the all of the users and computers off my existing DC to the new dc that will eventually be put in service, but I have to keep the old dc running as I migrate web servers and dns over to the new network. so here's what I did. I created a dc controller and made it an additional dc in my network. I see that everything is now copied over. I am getting ready to use the instructions here to transfer the roles over to the new DC : http://support.microsoft.com/kb/324801 BUT i do not want to cripple the old DC because my goal is to get the information on the new dc and then move it to my new network (as the primary dc) so that I can start to bring the new network live and gradually move users over the the new network. will following the steps listed on the microsoft site cripple the old DC I am transferring from? and if so, how can I get what I need over the new DC and then promote it so that's the primary DC on the new network without crippling the old DC. thanks in advance Jeff -- jjj0923 ------------------------------------------------------------------------ jjj0923's Profile: http://forums.techarena.in/members/213984.htm View this thread: http://forums.techarena.in/windows-server-help/774222.htm http://forums.techarena.in
From: Meinolf Weber [MVP-DS] on 28 Apr 2010 02:28 Hello jjj0923, "BUT i do not want to cripple the old DC because my goal is to get the information on the new dc and then move it to my new network (as the primary dc) so that I can start to bring the new network live and gradually move users over the the new network" What do you mean with this question exactly? If you have added an additional DC to the existing domain, make sure it is Global catalog and DNS server(use AD integrated zones) and move the FSMO roles to the new DC. You are also talking about a NEW domain, please clarify this, is there a NEW created forest/domain or do you still mean the existing one with the additional DC that should get the FSMO roles? You have to reconfigure the time service on the old and new PDCEmulator according to: http://technet.microsoft.com/en-us/library/cc738042(WS.10).aspx http://technet.microsoft.com/en-us/library/cc786897(WS.10).aspx BTW, forget the terms primary and secondary DC, since Windows 2000 this isn't the case any more, all DCs are the same, only FSMO roles must be configured to some rules. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > I hate to resurrect this thread but it seems like to right place to > ask this question: > > I just put together a new network - dns servers, domain controllers > (2003 ad) and an isa firewall to accomodate a new verizon fios > business line that will replace our existing T1 line. > > I have a lot of user and computers defined in my existing domain > controllers. > > Basically what I want to do is to get a copy of the all of the users > and computers off my existing DC to the new dc that will eventually be > put in service, but I have to keep the old dc running as I migrate web > servers and dns over to the new network. > > so here's what I did. I created a dc controller and made it an > additional dc in my network. I see that everything is now copied over. > > I am getting ready to use the instructions here to transfer the roles > over to the new DC : http://support.microsoft.com/kb/324801 > > BUT i do not want to cripple the old DC because my goal is to get the > information on the new dc and then move it to my new network (as the > primary dc) so that I can start to bring the new network live and > gradually move users over the the new network. > > will following the steps listed on the microsoft site cripple the old > DC I am transferring from? and if so, how can I get what I need over > the new DC and then promote it so that's the primary DC on the new > network without crippling the old DC. > > thanks in advance > > Jeff > > http://forums.techarena.in >
From: Phillip Windell on 28 Apr 2010 09:37 "jjj0923" <jjj0923.4a3kdb(a)DoNotSpam.com> wrote in message news:jjj0923.4a3kdb(a)DoNotSpam.com... > Basically what I want to do is to get a copy of the all of the users and > computers off my existing DC to the new dc that will eventually be put > in service, but I have to keep the old dc running as I migrate web > servers and dns over to the new network. > > so here's what I did. I created a dc controller and made it an > additional dc in my network. I see that everything is now copied over. Ok,...so that was wrong. Undo that. Run DCPromo on this DC to demote it back to a member server and then move it from a member to a workgroup machine. ***Get back to where you were before you started,...before you did anything,...because your whole premise is wrong*** Now run DCPromo again on the box to make it a *new* DC in a *new* Forest in a *new* Domain. This has nothing to do with,...and is not related in any way to,...the original Domain. Do DNS Zone Transfers between this DC and the DC of the old Domain (doesn't matter which DC, just pick one). Do this in both directions so that both Domains are fully aware of the opposite Domain's Zone contents. Create a Full Two-Way Trust between the two Domians Add the Domain Admins Group to the Administrators Group of the opposite Domain,...do this in both directions. Add the Domain User Group to the Users Group of the opposite Domain,...do this in both directions Download and use the ADMT Tool to migrate Objects from one Domain to the other. Do this *after* reading the Documentation for ADMT,...and only after you really understand what you read. There are only a very few limited ways to do it *right*,...and a whole bunch of ways to do it wrong. -- Phillip Windell The views expressed, are my own and not those of my employer, or Microsoft, or anyone else associated with me, including my cats. -----------------------------------------------------
From: jjj0923 on 28 Apr 2010 09:11 you wrote: > Hello jjj0923, > > "BUT i do not want to cripple the old DC because my goal is to get the > information > on the new dc and then move it to my new network (as the primary dc) so > that > I can start to bring the new network live and gradually move users over > the > the new network" > > What do you mean with this question exactly? If you have added an > additional > DC to the existing domain, make sure it is Global catalog and DNS > server(use > AD integrated zones) and move the FSMO roles to the new DC. > > You are also talking about a NEW domain, please clarify this, is there > a > NEW created forest/domain or do you still mean the existing one with > the > additional DC that should get the FSMO roles? > > You have to reconfigure the time service on the old and new PDCEmulator > according > to: > http://technet.microsoft.com/en-us/l...42(WS.10).aspx > > http://technet.microsoft.com/en-us/l...97(WS.10).aspx > > BTW, forget the terms primary and secondary DC, since Windows 2000 this > isn't > the case any more, all DCs are the same, only FSMO roles must be > configured > to some rules. > > Best regards let me try to clarify. Basically - all I want to do is CLONE the Domain Controller and put the new DC on a new network (new forest - where it will be the first domain controller) what is the easiest way to do this? Jeff -- jjj0923 ------------------------------------------------------------------------ jjj0923's Profile: http://forums.techarena.in/members/213984.htm View this thread: http://forums.techarena.in/windows-server-help/774222.htm http://forums.techarena.in
From: Meinolf Weber [MVP-DS] on 28 Apr 2010 10:19 Hello jjj0923, So that DC should be added to an existing forest as DC? This isn't possible that way. Then you have to use ADMT to migrate the domain tio the new forest. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > you wrote: > >> Hello jjj0923, >> >> "BUT i do not want to cripple the old DC because my goal is to get >> the >> information >> on the new dc and then move it to my new network (as the primary dc) >> so >> that >> I can start to bring the new network live and gradually move users >> over >> the >> the new network" >> What do you mean with this question exactly? If you have added an >> additional >> DC to the existing domain, make sure it is Global catalog and DNS >> server(use >> AD integrated zones) and move the FSMO roles to the new DC. >> You are also talking about a NEW domain, please clarify this, is >> there >> a >> NEW created forest/domain or do you still mean the existing one with >> the >> additional DC that should get the FSMO roles? >> You have to reconfigure the time service on the old and new >> PDCEmulator >> according >> to: >> http://technet.microsoft.com/en-us/l...42(WS.10).aspx >> http://technet.microsoft.com/en-us/l...97(WS.10).aspx >> >> BTW, forget the terms primary and secondary DC, since Windows 2000 >> this >> isn't >> the case any more, all DCs are the same, only FSMO roles must be >> configured >> to some rules. >> Best regards >> > let me try to clarify. > > Basically - all I want to do is CLONE the Domain Controller and put > the new DC on a new network (new forest - where it will be the first > domain controller) > > what is the easiest way to do this? > > Jeff > > http://forums.techarena.in >
|
Next
|
Last
Pages: 1 2 Prev: Windows 2008 Disk Space Next: advise on smtp service (windows 2003 SP2) |