Migrating Active Directory Domain
Content
Migrating Active Directory Domain Controller from Windows Server 2003 to Windows S... Page 1 of 6
Home
ISA Server/Forefront TMG
Windows Server 2008
Windows 7
About Tarek
Tarek Majdalani Migrating Active Directory Domain Controller from Windows Server 2003 to Windows Server 2008 Published Last Updated Introduction Most people are running their Active Directory Domains now on Windows Server 2003 or Windows Server 2003 R2, and want to upgrade their domain controllers to Windows Server 2008 to benefit from the new features that Windows 2008 AD offers. In a previous article, I have shown you how to perform an In-Place Upgrade from W2K3 DC to Windows Server 2008 , in today's article, I will be showing how to migrate your Active Directory Domain Controller from Windows Server 2003 to Windows Server 2008 on a new hardware server. : September 05, 2009 : September 05, 2009
Twitter
Visitors
In my lab, I have the following: MACHINE NAME ELMAJ-DC DESCRIPTION A Windows Server 2003 Standard Edition with Service Pack 2. This is the domain controller in my lab that I intend to migrate. SERVICE PACK LEVEL SP2 IP Address 192.168.1.2 Architecture X86
ELMAJ-DC2k8
A Windows Server 2008 Enterprise Edition. This is the machine I intend to setup as my new domain controller that will replace ELMAJ-DC
SP1
192.168.1.3
X64
In a nutshell, we will perform the following: 1. Raise Domain Functional Level 2. Prepare your current Windows 2003 Active Directory for Windows Server 2008 domain controllers. 3. Then, we will need to setup the server ELMAJ-DC2K8 as an additional domain controller, read my previous article Setting Up an Additional Domain Controller With Windows Server 2008 to know the steps required to setup an additional domain controller. 4. Transfer FSMO roles to the Windows Server 2008 Domain Controller
So lets starts : 1. Raise Domain Functional Level We need to configure the domain to run in native mode, this is done by:
On the Windows Server 2003 Domain Controller, run Active Directory User and Computers snap-in by clicking on Start > Administrative Tools > Active Directory User and Computers
http://www.elmajdal.net/Win2k8/Migrating_Active_Directory_Domain_Controller_from_... 5/30/2011
Migrating Active Directory Domain Controller from Windows Server 2003 to Windows S... Page 2 of 6
Right Click the Domain Name node, then click on Raise Domain Functional Level
If you have Windows 2000 Active Directory domain controllers then choose Windows 2000 native, if you do not have any Windows 2000 Active Directory domain controllers and all of your domain controllers are Windows Server 2003, then choose Windows Server 20003. I don't have any Windows 2000 Active Directory domain controllers, so using the drop down list, I will select Windows Server 2003 and then click the Raise button.
A warning message will be displayed, informing you that the changes cannot be reversed. Click OK
A confirmation message will be displayed stating that the functional level was raised successfully. Click OK
http://www.elmajdal.net/Win2k8/Migrating_Active_Directory_Domain_Controller_from_... 5/30/2011
Migrating Active Directory Domain Controller from Windows Server 2003 to Windows S... Page 3 of 6
Close Active Directory User and Computers snap-in
2. Prepare current Windows 2003 Active Directory
Before you can have a 2008 server domain controller in your existing 2003 domain, we will need to prepare both the Forest Level and the Domain level, this is done by running the following commands on the Windows Server 2003 Domain Controller. Insert the Windows Server 2008 DVD inside the Windows Server 2003 DVD Drive Open Command Prompt, this is done by Clicking on Start > Run > type CMD > click OK
Type D:\sources\adprep\adprep /forestprep (Where D: is the drive of your Windows 2008 DVD)
Click Enter
Read the warning message, in my lab I don't have any Windows 2000 Active Directory Domain Controllers, so I can simply skip this by typing C and then press Enter, else quite the Forest Preparation step and upgrade Windows 2000 Active Directory Domain Controller(s) to SP4, then run forestperp again.
http://www.elmajdal.net/Win2k8/Migrating_Active_Directory_Domain_Controller_from_... 5/30/2011
Migrating Active Directory Domain Controller from Windows Server 2003 to Windows S... Page 4 of 6
After Forest preparation is completed successfully, run the Domain preparation command Inside CMD, type D:\sources\adprep\adprep /domainprep (Where D: is the drive of your Windows 2008 DVD) If you have not Raised the Domain Functional Level from Windows 2000 Mixed to Windows 2000 Native or Windows 2003 as was illustrated earlier in step # 1, then you will receive the following error message after you run domainprep command:
If you did raise the domain functional level, adprep will successfully update the domain-wide information
http://www.elmajdal.net/Win2k8/Migrating_Active_Directory_Domain_Controller_from_... 5/30/2011
Migrating Active Directory Domain Controller from Windows Server 2003 to Windows S... Page 5 of 6
Although adprep /domainprep will update the domain-wide information, you can still run the last command adprep /domainprep /gpprep Inside CMD, type D:\sources\adprep\adprep /domainprep /gpprep (Where D: is the drive of your Windows 2008 DVD)
As you can see, Domain-wide information has already been updated when we ran the domainprep command, as no Group Policy Object (GPO) updates needed, or GPO information has already been updated.
3. Setting Up an Additional Domain Controller with Windows Server 2008 Now that Windows Server 2003 Active Directory has been prepared for Windows Server 2008 Domain Controllers, its time to Set Up an Additional Domain Controller With Windows Server 2008 and set it as a Global Catalog. If you already have an additional Windows Server 2008 domain controller and you want to check if it is a Global Catalog or not, then check my article Setting a Windows Server 2008 Domain Controller as a Global Catalog
4. Transfer FSMO roles to the Windows Server 2008 Domain Controller The last step in migrating a domain controller, is transferring the FSMO roles to the new domain controller. I have covered this part in a detailed step by step article, check it here : Transferring FSMO Roles in Windows Server 2008
With all the previous four major steps, you will successfully be able to migrate your old Windows Server 2003 Domain controller to Windows Server 2008.
Summary Upgrading Windows Server 2003 domain controller to a Windows Server 2008 domain controller is an easy process if you follow the required steps carefully. The process consist of four major steps and they are : raising the domain level, preparing active directory for Windows Server 2008 domain controllers, setting a Windows Server 2008 as an additional global catalog domain controller and then transferring the FSMO Roles. Now, you can simply demote the Windows Server 2003 domain controller, if you no longer need it.
http://www.elmajdal.net/Win2k8/Migrating_Active_Directory_Domain_Controller_from_... 5/30/2011
Migrating Active Directory Domain Controller from Windows Server 2003 to Windows S... Page 6 of 6
Related Articles Setting Up an Additional Domain Controller With Windows Server 2008 Transferring FSMO Roles in Windows Server 2008 Setting a Windows Server 2008 Domain Controller as a Global Catalog In-Place Upgrade from Windows Server 2003 Domain Controller to Windows Server 2008 Back to top
© ElMajdal.Net 2007-2011
http://www.elmajdal.net/Win2k8/Migrating_Active_Directory_Domain_Controller_from_... 5/30/2011
Home
ISA Server/Forefront TMG
Windows Server 2008
Windows 7
About Tarek
Tarek Majdalani Migrating Active Directory Domain Controller from Windows Server 2003 to Windows Server 2008 Published Last Updated Introduction Most people are running their Active Directory Domains now on Windows Server 2003 or Windows Server 2003 R2, and want to upgrade their domain controllers to Windows Server 2008 to benefit from the new features that Windows 2008 AD offers. In a previous article, I have shown you how to perform an In-Place Upgrade from W2K3 DC to Windows Server 2008 , in today's article, I will be showing how to migrate your Active Directory Domain Controller from Windows Server 2003 to Windows Server 2008 on a new hardware server. : September 05, 2009 : September 05, 2009
Visitors
In my lab, I have the following: MACHINE NAME ELMAJ-DC DESCRIPTION A Windows Server 2003 Standard Edition with Service Pack 2. This is the domain controller in my lab that I intend to migrate. SERVICE PACK LEVEL SP2 IP Address 192.168.1.2 Architecture X86
ELMAJ-DC2k8
A Windows Server 2008 Enterprise Edition. This is the machine I intend to setup as my new domain controller that will replace ELMAJ-DC
SP1
192.168.1.3
X64
In a nutshell, we will perform the following: 1. Raise Domain Functional Level 2. Prepare your current Windows 2003 Active Directory for Windows Server 2008 domain controllers. 3. Then, we will need to setup the server ELMAJ-DC2K8 as an additional domain controller, read my previous article Setting Up an Additional Domain Controller With Windows Server 2008 to know the steps required to setup an additional domain controller. 4. Transfer FSMO roles to the Windows Server 2008 Domain Controller
So lets starts : 1. Raise Domain Functional Level We need to configure the domain to run in native mode, this is done by:
On the Windows Server 2003 Domain Controller, run Active Directory User and Computers snap-in by clicking on Start > Administrative Tools > Active Directory User and Computers
http://www.elmajdal.net/Win2k8/Migrating_Active_Directory_Domain_Controller_from_... 5/30/2011
Migrating Active Directory Domain Controller from Windows Server 2003 to Windows S... Page 2 of 6
Right Click the Domain Name node, then click on Raise Domain Functional Level
If you have Windows 2000 Active Directory domain controllers then choose Windows 2000 native, if you do not have any Windows 2000 Active Directory domain controllers and all of your domain controllers are Windows Server 2003, then choose Windows Server 20003. I don't have any Windows 2000 Active Directory domain controllers, so using the drop down list, I will select Windows Server 2003 and then click the Raise button.
A warning message will be displayed, informing you that the changes cannot be reversed. Click OK
A confirmation message will be displayed stating that the functional level was raised successfully. Click OK
http://www.elmajdal.net/Win2k8/Migrating_Active_Directory_Domain_Controller_from_... 5/30/2011
Migrating Active Directory Domain Controller from Windows Server 2003 to Windows S... Page 3 of 6
Close Active Directory User and Computers snap-in
2. Prepare current Windows 2003 Active Directory
Before you can have a 2008 server domain controller in your existing 2003 domain, we will need to prepare both the Forest Level and the Domain level, this is done by running the following commands on the Windows Server 2003 Domain Controller. Insert the Windows Server 2008 DVD inside the Windows Server 2003 DVD Drive Open Command Prompt, this is done by Clicking on Start > Run > type CMD > click OK
Type D:\sources\adprep\adprep /forestprep (Where D: is the drive of your Windows 2008 DVD)
Click Enter
Read the warning message, in my lab I don't have any Windows 2000 Active Directory Domain Controllers, so I can simply skip this by typing C and then press Enter, else quite the Forest Preparation step and upgrade Windows 2000 Active Directory Domain Controller(s) to SP4, then run forestperp again.
http://www.elmajdal.net/Win2k8/Migrating_Active_Directory_Domain_Controller_from_... 5/30/2011
Migrating Active Directory Domain Controller from Windows Server 2003 to Windows S... Page 4 of 6
After Forest preparation is completed successfully, run the Domain preparation command Inside CMD, type D:\sources\adprep\adprep /domainprep (Where D: is the drive of your Windows 2008 DVD) If you have not Raised the Domain Functional Level from Windows 2000 Mixed to Windows 2000 Native or Windows 2003 as was illustrated earlier in step # 1, then you will receive the following error message after you run domainprep command:
If you did raise the domain functional level, adprep will successfully update the domain-wide information
http://www.elmajdal.net/Win2k8/Migrating_Active_Directory_Domain_Controller_from_... 5/30/2011
Migrating Active Directory Domain Controller from Windows Server 2003 to Windows S... Page 5 of 6
Although adprep /domainprep will update the domain-wide information, you can still run the last command adprep /domainprep /gpprep Inside CMD, type D:\sources\adprep\adprep /domainprep /gpprep (Where D: is the drive of your Windows 2008 DVD)
As you can see, Domain-wide information has already been updated when we ran the domainprep command, as no Group Policy Object (GPO) updates needed, or GPO information has already been updated.
3. Setting Up an Additional Domain Controller with Windows Server 2008 Now that Windows Server 2003 Active Directory has been prepared for Windows Server 2008 Domain Controllers, its time to Set Up an Additional Domain Controller With Windows Server 2008 and set it as a Global Catalog. If you already have an additional Windows Server 2008 domain controller and you want to check if it is a Global Catalog or not, then check my article Setting a Windows Server 2008 Domain Controller as a Global Catalog
4. Transfer FSMO roles to the Windows Server 2008 Domain Controller The last step in migrating a domain controller, is transferring the FSMO roles to the new domain controller. I have covered this part in a detailed step by step article, check it here : Transferring FSMO Roles in Windows Server 2008
With all the previous four major steps, you will successfully be able to migrate your old Windows Server 2003 Domain controller to Windows Server 2008.
Summary Upgrading Windows Server 2003 domain controller to a Windows Server 2008 domain controller is an easy process if you follow the required steps carefully. The process consist of four major steps and they are : raising the domain level, preparing active directory for Windows Server 2008 domain controllers, setting a Windows Server 2008 as an additional global catalog domain controller and then transferring the FSMO Roles. Now, you can simply demote the Windows Server 2003 domain controller, if you no longer need it.
http://www.elmajdal.net/Win2k8/Migrating_Active_Directory_Domain_Controller_from_... 5/30/2011
Migrating Active Directory Domain Controller from Windows Server 2003 to Windows S... Page 6 of 6
Related Articles Setting Up an Additional Domain Controller With Windows Server 2008 Transferring FSMO Roles in Windows Server 2008 Setting a Windows Server 2008 Domain Controller as a Global Catalog In-Place Upgrade from Windows Server 2003 Domain Controller to Windows Server 2008 Back to top
© ElMajdal.Net 2007-2011
http://www.elmajdal.net/Win2k8/Migrating_Active_Directory_Domain_Controller_from_... 5/30/2011
