November 2008
M T W T F S S
  1 2
3 4 5 6 7 8 9
10 11 12 13 14 15 16
17 18 19 20 21 22 23
24 25 26 27 28 29 30

Replace First Domain Controller in Forest

This is the first in some posts that will be from the wiki I use at work. I’ll remove the work-specific details but leave the general info for others to use. Many of it is compiled from different MS Knowledge Base articles.

Add NewServer to the domain

Either join the server to the domain during setup or after

Promote NewServer to a Domain Controller

Click Start->Run and type dcpromo.exe

Follow the prompts to add a Domain Controller to an existing domain

Make NewServer a Global Catalog Server

Having at least one Global Catalog server in the domain is critical. If you already have more than one GC in the domain you may choose to skip this step.

Open Active Directory Sites and Services, expand Sites->”Site Containing NewServer”->Servers->NewServer, right-click NTDS Settings, check the box next to Global Catalog.

The process of replicating the GC to NewServer may take a while depending on the network setup and size. Look for EventID 1119 under Event Viewer->Directory Services to confirm that the server is now a GC.

Transfer FSMO roles from OldServer to NewServer

Before you can transfer the schema master role to the new server you must register a dll file. To do this, open a command prompt and type regsvr32 schmmgmt.dll then wait for the command to finish.

Transfer the Schema Master Role
1. Click Start, click Run, type mmc in the Open box, and then click OK.
2. On the File, menu click Add/Remove Snap-in.
3. Click Add.
4. Click Active Directory Schema, click Add, click Close, and then click OK.
5. In the console tree, right-click Active Directory Schema, and then click Change Domain Controller.
6. Click Specify Name, type the name of the domain controller that will be the new role holder, and then click OK.
7. In the console tree, right-click Active Directory Schema, and then click Operations Master.
8. Click Change.
9. Click OK to confirm that you want to transfer the role, and then click Close.

Transfer the Domain Naming Master Role
1. Click Start, point to Administrative Tools, and then click Active Directory Domains and Trusts.
2. Right-click Active Directory Domains and Trusts, and then click Connect to Domain Controller.

NOTE: You must perform this step if you are not on the domain controller to which you want to transfer the role. You do not have to perform this step if you are already connected to the domain controller whose role you want to transfer.
3. Do one of the following:
• In the Enter the name of another domain controller box, type the name of the domain controller that will be the new role holder, and then click OK.

-or-
• In the Or, select an available domain controller list, click the domain controller that will be the new role holder, and then click OK.

4. In the console tree, right-click Active Directory Domains and Trusts, and then click Operations Master.
5. Click Change.
6. Click OK to confirm that you want to transfer the role, and then click Close.

Transfer the RID Master, PDC Emulator, and Infrastructure Master Roles
1. Click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
2. Right-click Active Directory Users and Computers, and then click Connect to Domain Controller.

NOTE: You must perform this step if you are not on the domain controller to which you want to transfer the role. You do not have to perform this step if you are already connected to the domain controller whose role you want to transfer.
3. Do one of the following:
• In the Enter the name of another domain controller box, type the name of the domain controller that will be the new role holder, and then click OK.

-or-
• In the Or, select an available domain controller list, click the domain controller that will be the new role holder, and then click OK.

4. In the console tree, right-click Active Directory Users and Computers, point to All Tasks, and then click Operations Master.
5. Click the appropriate tab for the role that you want to transfer (RID, PDC, or Infrastructure – Must do all 3), and then click Change.
6. Click OK to confirm that you want to transfer the role, and then click Close.

Note: When configuring a forest with multiple domains and every domain controller is not a GC server you must not place the Infrastructure Master role on the same server holding the GC role. If configuring a server in a single domain forest, the GC and infrastructure master roles can both be on the same server. From http://support.microsoft.com/kb/223346/

Demote Old Server

Dcpromo.exe

Before running dcpromo.exe, ensure that the DNS settings for the Domain Controller’s network adapters are pointing to another DNS server. If it is pointing to it’s own IP address then it will not be able to continue once the AD DNS records are removed. This is only if the DC is running the DNS service.


Source: http://support.microsoft.com/kb/324801

Comments are closed.