From: jjj0923 on

I hate to resurrect this thread but it seems like to right place to ask
this question:

I just put together a new network - dns servers, domain controllers
(2003 ad) and an isa firewall to accomodate a new verizon fios business
line that will replace our existing T1 line.

I have a lot of user and computers defined in my existing domain
controllers.

Basically what I want to do is to get a copy of the all of the users and
computers off my existing DC to the new dc that will eventually be put
in service, but I have to keep the old dc running as I migrate web
servers and dns over to the new network.

so here's what I did. I created a dc controller and made it an
additional dc in my network. I see that everything is now copied over.

I am getting ready to use the instructions here to transfer the roles
over to the new DC : http://support.microsoft.com/kb/324801

BUT i do not want to cripple the old DC because my goal is to get the
information on the new dc and then move it to my new network (as the
primary dc) so that I can start to bring the new network live and
gradually move users over the the new network.

will following the steps listed on the microsoft site cripple the old DC
I am transferring from? and if so, how can I get what I need over the
new DC and then promote it so that's the primary DC on the new network
without crippling the old DC.

thanks in advance

Jeff


--
jjj0923
------------------------------------------------------------------------
jjj0923's Profile: http://forums.techarena.in/members/213984.htm
View this thread: http://forums.techarena.in/windows-server-help/774222.htm

http://forums.techarena.in

From: Meinolf Weber [MVP-DS] on
Hello jjj0923,

"BUT i do not want to cripple the old DC because my goal is to get the information
on the new dc and then move it to my new network (as the primary dc) so that
I can start to bring the new network live and gradually move users over the
the new network"

What do you mean with this question exactly? If you have added an additional
DC to the existing domain, make sure it is Global catalog and DNS server(use
AD integrated zones) and move the FSMO roles to the new DC.

You are also talking about a NEW domain, please clarify this, is there a
NEW created forest/domain or do you still mean the existing one with the
additional DC that should get the FSMO roles?

You have to reconfigure the time service on the old and new PDCEmulator according
to:
http://technet.microsoft.com/en-us/library/cc738042(WS.10).aspx

http://technet.microsoft.com/en-us/library/cc786897(WS.10).aspx

BTW, forget the terms primary and secondary DC, since Windows 2000 this isn't
the case any more, all DCs are the same, only FSMO roles must be configured
to some rules.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I hate to resurrect this thread but it seems like to right place to
> ask this question:
>
> I just put together a new network - dns servers, domain controllers
> (2003 ad) and an isa firewall to accomodate a new verizon fios
> business line that will replace our existing T1 line.
>
> I have a lot of user and computers defined in my existing domain
> controllers.
>
> Basically what I want to do is to get a copy of the all of the users
> and computers off my existing DC to the new dc that will eventually be
> put in service, but I have to keep the old dc running as I migrate web
> servers and dns over to the new network.
>
> so here's what I did. I created a dc controller and made it an
> additional dc in my network. I see that everything is now copied over.
>
> I am getting ready to use the instructions here to transfer the roles
> over to the new DC : http://support.microsoft.com/kb/324801
>
> BUT i do not want to cripple the old DC because my goal is to get the
> information on the new dc and then move it to my new network (as the
> primary dc) so that I can start to bring the new network live and
> gradually move users over the the new network.
>
> will following the steps listed on the microsoft site cripple the old
> DC I am transferring from? and if so, how can I get what I need over
> the new DC and then promote it so that's the primary DC on the new
> network without crippling the old DC.
>
> thanks in advance
>
> Jeff
>
> http://forums.techarena.in
>


From: Phillip Windell on
"jjj0923" <jjj0923.4a3kdb(a)DoNotSpam.com> wrote in message
news:jjj0923.4a3kdb(a)DoNotSpam.com...

> Basically what I want to do is to get a copy of the all of the users and
> computers off my existing DC to the new dc that will eventually be put
> in service, but I have to keep the old dc running as I migrate web
> servers and dns over to the new network.
>
> so here's what I did. I created a dc controller and made it an
> additional dc in my network. I see that everything is now copied over.

Ok,...so that was wrong. Undo that. Run DCPromo on this DC to demote it
back to a member server and then move it from a member to a workgroup
machine.

***Get back to where you were before you started,...before you did
anything,...because your whole premise is wrong***

Now run DCPromo again on the box to make it a *new* DC in a *new* Forest in
a *new* Domain. This has nothing to do with,...and is not related in any
way to,...the original Domain.

Do DNS Zone Transfers between this DC and the DC of the old Domain (doesn't
matter which DC, just pick one). Do this in both directions so that both
Domains are fully aware of the opposite Domain's Zone contents.

Create a Full Two-Way Trust between the two Domians

Add the Domain Admins Group to the Administrators Group of the opposite
Domain,...do this in both directions.

Add the Domain User Group to the Users Group of the opposite Domain,...do
this in both directions

Download and use the ADMT Tool to migrate Objects from one Domain to the
other. Do this *after* reading the Documentation for ADMT,...and only after
you really understand what you read. There are only a very few limited
ways to do it *right*,...and a whole bunch of ways to do it wrong.


--
Phillip Windell

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------


From: jjj0923 on

you wrote:

> Hello jjj0923,
>
> "BUT i do not want to cripple the old DC because my goal is to get the
> information
> on the new dc and then move it to my new network (as the primary dc) so
> that
> I can start to bring the new network live and gradually move users over
> the
> the new network"
>
> What do you mean with this question exactly? If you have added an
> additional
> DC to the existing domain, make sure it is Global catalog and DNS
> server(use
> AD integrated zones) and move the FSMO roles to the new DC.
>
> You are also talking about a NEW domain, please clarify this, is there
> a
> NEW created forest/domain or do you still mean the existing one with
> the
> additional DC that should get the FSMO roles?
>
> You have to reconfigure the time service on the old and new PDCEmulator
> according
> to:
> http://technet.microsoft.com/en-us/l...42(WS.10).aspx
>
> http://technet.microsoft.com/en-us/l...97(WS.10).aspx
>
> BTW, forget the terms primary and secondary DC, since Windows 2000 this
> isn't
> the case any more, all DCs are the same, only FSMO roles must be
> configured
> to some rules.
>
> Best regards

let me try to clarify.

Basically - all I want to do is CLONE the Domain Controller and put the
new DC on a new network (new forest - where it will be the first domain
controller)

what is the easiest way to do this?

Jeff


--
jjj0923
------------------------------------------------------------------------
jjj0923's Profile: http://forums.techarena.in/members/213984.htm
View this thread: http://forums.techarena.in/windows-server-help/774222.htm

http://forums.techarena.in

From: Meinolf Weber [MVP-DS] on
Hello jjj0923,

So that DC should be added to an existing forest as DC? This isn't possible
that way. Then you have to use ADMT to migrate the domain tio the new forest.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> you wrote:
>
>> Hello jjj0923,
>>
>> "BUT i do not want to cripple the old DC because my goal is to get
>> the
>> information
>> on the new dc and then move it to my new network (as the primary dc)
>> so
>> that
>> I can start to bring the new network live and gradually move users
>> over
>> the
>> the new network"
>> What do you mean with this question exactly? If you have added an
>> additional
>> DC to the existing domain, make sure it is Global catalog and DNS
>> server(use
>> AD integrated zones) and move the FSMO roles to the new DC.
>> You are also talking about a NEW domain, please clarify this, is
>> there
>> a
>> NEW created forest/domain or do you still mean the existing one with
>> the
>> additional DC that should get the FSMO roles?
>> You have to reconfigure the time service on the old and new
>> PDCEmulator
>> according
>> to:
>> http://technet.microsoft.com/en-us/l...42(WS.10).aspx
>> http://technet.microsoft.com/en-us/l...97(WS.10).aspx
>>
>> BTW, forget the terms primary and secondary DC, since Windows 2000
>> this
>> isn't
>> the case any more, all DCs are the same, only FSMO roles must be
>> configured
>> to some rules.
>> Best regards
>>
> let me try to clarify.
>
> Basically - all I want to do is CLONE the Domain Controller and put
> the new DC on a new network (new forest - where it will be the first
> domain controller)
>
> what is the easiest way to do this?
>
> Jeff
>
> http://forums.techarena.in
>