Need to decommission first DC in windows 2000 domain

[Diggs123456]

I recently had to do a rush NT4 to W2k migration in order to rebuild our email system on Exchange 2000. In order to upgrade from NT4, I was forced to use an adequate desktop build it as a NT4 BDC, promote to PDC, synchronised Domain, then upgrade to W2K AD. From here I was then able to build my new Dell Poweredge server into the new domain, ready to host Exchange 2000. Once done, I transfered the 5 FSMO roles, ticked the box to make it a GC sever, resolved all DNS problems, and ensured replication with original DC in the new AD. Now as my first DC is only a desktop running W2K AD, with disk errors, I need to clarify the process of decommissioning it, and ensuring that my newly added DC becomes the first DC in the site. I am assuming all I have to do now is run dcpromo on the first server to demote it to a member server.

Can anyone tell me if I have missed an important step out?

Is there anything else I need to do to the new DC to make it responsible for the GC info?

Can anyone foresee any nasty problems by decommissioning my first DC in my new Active Directoty?

Any help on these issues will be appreciated.

Regards

Diggs

 

[Seaspray0]

Looks like you have covered all the bases. You've got the FSMO's transfered and global catalog set on your new DC. You've got DNS rolled over to it. Double check DNS, make sure the control is delegated to the new DC for your zones, i.e. the root zone if you still have it. Have your DHCP ready and waiting on the new controller (all the settings and awaiting authorization) so you can transfer that before bringing the old computer offline for good. I don't see any problems with global catalog. I suggest a full backup of both before attempting dcpromo to decommission the old DC. If you have problems, you can try dropping the old one offline and using the ad administration tools (support tools on server cd) to clear up entries in ad referencing your old server.

 

[Diggs123456]

My DHCP is being serviced by a seperate Member server and is authorised in my AD. I am little unsure of what you mean by deligating control of the zone to the new DC. All I have done on DNS is join the new server as an AD intergrated DNS and I have ensured replication is set, and DDNS is working. Therefore how do I ensure the new DC has full control of the DNS? Is there a wizard to run, or do I have to create some kind of deligation record.

As for backups, I have full tape backups of all servers, and in addition I have a ghost image of the server I am going to decommission. If the dcpromo failed, could the image be re-joined back to provide the first DC, or is this just wishful thinking.

Thanks for your help so far,
Regards
Diggs

 

[jstevens]

I also have a question about this procedure.

The first domain controller in the forest is the "root" or forest root domain controller? A while ago, it was my understanding that this could not be changed or moved. However, is it possible during dcpromo when uninstalling, answering no to "is this the last server in the domain" and it will allow AD to be removed and the "rootness" be transfered or assumed by the next domain controller?

For some reason, I tried doing this awhile ago, moving the 5 roles and gc, dns to another server, and it wouldn't allow me. This was about the time of SP1 I think.

Has this operation worked sucessfully for you?

Jason Stevens

 

[Diggs123456]

Everything I read, and everyone I have spoken to indicates this process is possible, however I haven’t yet tried it, as I want to be absolutely sure it will work. I have manually transferred the 5 FSMO roles, GC and DNS to my new server, and tried to make the old root server as obsolete as possible. I have also left the server disconnected at times to test my networks ability to function without it. So far besides the obvious replication problems, this seems to work. Next I am going to promote a 2k member to a DC, and setup an additional GC for fault tolerance. At this point when all replication has been done, I will then run this DCPROMO, and hope it can demote and transfer any outstanding functions to my new DC's. If anyone can see any potential problems, please continue to let me know.

Jason, in answer to your question, it’s a no, but please watch this space.

Regards
Diggs

Chris