How to: Migrate a domain controller from Windows 2003 to Windows 2008

Today I had to do a upgrade from my existing Domain Controller, a Windows 2003 R2 Server to a Windows 2008 Server. 

   

The Windows 2003 Domain Controller is configured with a domain upgrade.local, forest functional level is Windows Server 2003 and the domain functional level is Windows Server 2003. This server is also the DNS server for this domain. There’s is one forward lookup zone and I’ve created a reverse lookup zone for the 172.16.10.x Subnet. We’re going to migrate to Windows 2008 Server.

First of all, I’ve installed a second virtual server with Windows 2008 Server and give it a static IP address, a subnet mask and a DNS server.

Now you have to prepare the forest and the domain with the new schema extensions.

D:\sources\adprep\adprep/forestprep and D:\sources\adprep\adprep /domainprep.
(Note: if you want to add a RODC, Read Only Domain Controller, you’ve to run also the following command: adprep /rodcprep.
There must be already a Windows 2008 Domain Controller present in the domain before you can add a RODC.)

Now you can run a DCPROMO on the Windows 2008 Server.

       

       

       

       

       

The new Windows 2008 Domain Controller is succelfully promoted in the existing domain upgrade.local.

The next step is to move all the FSMO roles to the new Domain Controller. The following settings must be made.

Change the Domain Naming Master Active Directory Domains and Trusts, Operations Master, Change

   

Change the Schema Master run the following command regsvr32 schmmgmt.dll , now you’re able to add the Schema Snap-in in your Management Console.
Active Directory Schema, Operations Master, Change

   

Change the RID Master, PDC Emulator and the Infrastructure Master Active Directory Users and Computer, Your domain, Operations Masters, Change

       

       

Now all the FSMO roles are transfered to the new Server 2008 Domain Controller. Now we can demote the Windows 2003 Domain Controller by running the DCPROMO command.

       

After this steps and a copple of reboots, the migration is done! You now have a Windows 2008 Domain Controller.

158 Responses to “How to: Migrate a domain controller from Windows 2003 to Windows 2008”

  1. hadish says:

    I find it very helpfull. thanks
    I follow you instruction and i have done without any problem.
    the only thing is thd dns. if i use ipconfig /all
    the i see the dns of the server 2003.
    Can you help me how i can change.

  2. admin says:

    Hello Hadish,

    are you using DHCP to set your DNS servers? If so, you’ve to change the DNS settings in your DHCP scopes. Can you check this, hopefully this is the solution for you!

  3. hadish says:

    Thank you for the help. yes i install the dchp in the server 2008 and i gave that time the server 2003 ip as dns server. how can i change this. thank you
    in advance

  4. hadish says:

    I changed the the dns server in dhcp options and worked perfect
    I will demote the server 2003 today.
    thanks

  5. Anthony says:

    Hello Mark, I am very impressed with this tutorial, this is a fantastic opportunity!

    I would really like to use it and go ahead but I would have a few questions beforehands, if you will :-)

    1 – I currently have 2 DC/DNS servers both running with Windows 2000 : Can we replace those 2 with a single/unique DC/DNS 2008 Server ?

    2 – Does this tutorial apply to a 2000 domain ?

    3 – Anything you may find useful :-)

    Many thanks!!

    Anthony

  6. admin says:

    Hello Anthony,

    thanks for your reply! You can use this tutorial also with Windows 2000 DC’s. All the steps are the same!

    Kind Regards,
    Mark

  7. Dan says:

    Hi, thanks for the article!

    Everything seems to work great, except that when I try to demote the old 2003 server I get a message saying that it is the last domain controller, no other AD DC’s can be contacted. Any suggestions?

  8. Paul says:

    VERY IMPORTANT!

    If you are migrating to a 2008 R2 server (x64 only), the proper adprep commands are:

    [drive]:\support\adprep32 /forestprep
    [drive]:\support\adprep32 /domainprep

    These are found on and run from the 2008 R2 disk.

  9. Martin says:

    well, to be more exactly you should add that adprep/adprep32 should be startet on the old server.

    and furthermore you should say that in the beginning the dns server on the new servers network connection should point to the old dns server.
    but when is the best time in your accurate steps to switch the pointed dns server in the network connection to the new dns server? because that’s a problem and if i read through all that posts it is exactly what is missing: how to set dns in nw connection and when to change.

    @dan: that’s exactly the problem which causes your problem i think/know.

    otherwise very good, accurate explanation! thanx!

  10. Club Penguin says:

    Nice post. Have u heard about the iPad hack? Kinda random but lol why not.

  11. Nice post. have you heard about the new ipad jailbreak? random but I was just thinking about it.

  12. I really like your post. Always been very informational. I hope you’ll keep up the good work and maintain the standard. Best of luck.

  13. I love your site.

  14. Karri List says:

    This is a interesting post.

  15. Jana Ashwell says:

    I found this information usefull.

  16. Brock Wenman says:

    Thanks for this usefull information.

  17. Thanks for this interesting information.

  18. Jerald Rodea says:

    This is a good post.

  19. I love your site.

  20. Riley Ryles says:

    Thanks for this usefull information.

  21. Ariana Goss says:

    This is a usefull post.

  22. Darrin Flum says:

    Thanks for this usefull information.

  23. Karyn Biemer says:

    I found this information interesting.

  24. Oscar Hampel says:

    I found this information interesting.

  25. I found this information usefull.

  26. Spring Cerni says:

    I love your site.

  27. This is a interesting post.

  28. Thanks for this interesting information.

  29. Dusty Osmun says:

    I love your site.

  30. Ray Feltham says:

    Thanks for this usefull information.

  31. This is a interesting post.

  32. I like your site.

  33. This is a great post.

  34. This is a good post.

  35. Thanks for this usefull information.

  36. I love your site.

  37. Thanks for this usefull information.

  38. I found this information usefull.

  39. Paul Rataj says:

    Thanks for this interesting information.

  40. Hugh Mealey says:

    This is a usefull post.

  41. This is a great post.

  42. Thanks for this usefull information.

  43. free points says:

    This site seriously keeps looking better every time I show up. You should honestly be happy.

  44. Vernos says:

    Great work on this, a suggestion – You should probably put some post/pre checks in your doc. ie like checking whats already installed, checking if zones are ad integrated. Running Dcdiag afterwards and checking the logs etc etc.

  45. I found this information interesting.

  46. Very creative content. I just found your blog site and wished to tell you i have actually loved reading your blogs. Any way I will be opting-in to your feed and also I’m guessing you’ll publish again soon.

  47. It’s always pleasant to stumble onto a new website this good I will be back here for sure

Leave a Reply