Removing DC fonction on the Exch2k3 server 2

[LaforcE]

Hi all.

I know running Exchange on a Domain Controller is not a good practice. So mine is.

I got (let's say) DC1, and DC2Exch. All running Windows 2003.

DC1 = Dedicated domain controler
DC2Exch = Domain controler (backup) and Exchange 2003 server.

Now, I want to remove the Domain Controller fonctions on DC2Exch, so I can follow the "MS Best Practices". I want DC2Exch to become only a Exchange server.

I want to install another server (let's say DC3) that will be a domain controler NOT running exchange ...

Anyone ever done that before ? Any advice or any suggestions ?

Thanks ...

- Security is a never ending job.

 

[markdmac]

Hate to tell you this but you are stuck. Once Exchange is installed on a server you can not run DCPROMO to add or remove the DC attributes. You will need to remove Exchange first to be able to do it.

I hope you find this post helpful.

Regards,

Mark

 

[LaforcE]

Yeah thx ... gonna reinstall the whole thing ... damn

Hehe

- Security is a never ending job.

 

[adcfaq]

i never tried that, but u may want to do this have a shot to avoid rebuild:

1. backup everything
2. dcpromo /forceremval on dc2
3. metadata cleanup on dc1
4. dcpromo your dc3

if it works. let us know.

 

[LaforcE]

Yeah gonna try that.

But it case it doesn't work, anyone have the steps or a link to explain how to transfert exchange with active directory on another machine without active directory ...

Cuz restoring a backup will work, but will also restore AD !

- Security is a never ending job.

 

[markdmac]

Your best bet is to simply add a new Exchange server into your environment and them move all mailboxes to that server. Then you can safely remove Exchange from the old server, run a regular DCPROMO and then reinstall Exchange to move back your mailboxes.

I would avoid using the /FORCEREMOVAL switch as this will NOT remove references from your AD to that server and you will need to then also clean up DNS and the AD Metabase. Furthermore your system will then be left in an unsupportable state from the perspective of using Microsoft PSS in the event of total disaster.

I hope you find this post helpful.

Regards,

Mark

 

[LaforcE]

First thanks all for your help. It's pretty cool.

Your suggestion seems pretty goodl Mark. But I would like to keep the same hardware machine for the old and the news one!!

---------------------
Do you think I can add another exchange server and move everything there. After reinstall the same server and re-move everything on the same server but without AD ?

Or it's too much manipulation and I better "backup" everything, reinstall and re-importe data on the same machine.

Or I should really push hard and ask the have another machine here ? (It's bad cuz that machien was just perfect for the needs)

Thanks again !

- Security is a never ending job.

 

[PScottC]

I'm inclined to agree with Mark... If you don't have HW available, then use your new DC for the Exchange swing.

1) Install Exchange on DC3
2) Move mailboxes and PF's to DC3
3) Remove Exchange / AD from DC2Exch
4) Rebuild DC2Exch as ExchOnly
5) Install Exchange on ExchOnly
6) Move mailboxes and PF's to ExchOnly
7) Remove Exchange from DC3
8) Rebuild DC3
9) Promote DC3 as DC

This will take longer, but will be cleaner in the end. It's always better to cleanly uninstall if you can.

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers

 

[markdmac]

I'm mostly in agreement with the steps outlined by PScottC. My ammended steps (to minimize effort) would be:

1) Install Exchange on DC3
2) Move mailboxes and PF's to DC3
3) Remove Exchange from DC2Exch
4) Run DCPROMO to remove AD from DC2Exch
5) Rename server if desired (ExchOnly)
6) Install Exchange on ExchOnly
7) Move mailboxes and PF's back to ExchOnly
8) Remove Exchange from DC3 (keep the Exchange tools)

Basically there is no real reason to have to reload the OS on either server. All of the Exchange schema modification will remain in AD and removal of AD via DCPROMO only requires a reboot and not an OS reload. You will want to leave the Exchange tools installed so you can manage Exchange attributes in AD Users & Computers.


I hope you find this post helpful.

Regards,

Mark

 

[LaforcE]

Yes guyz.

VERY usefull thx again for your precious help.

Questions :

1 - Does to DC3 have to have the same name as the Exchange serveur to migrate all mailboxes and PF's on it ? (Any link of HowTos?)

2 - How can I verify that all the mailboxes from AD/Exch has been migrated sucessfully to DC3 ? Just to make sure before unninstalling everything ...

Ill do my ggogleing on those for sure, but if you have any good link dont hesitate!

Thanks again guyz!

- Security is a never ending job.

 

[LaforcE]

And how would you guyz move the mailboxes and PF's ?

By using the move option into the Exchange interface ?

- Security is a never ending job.

 

[PScottC]

Follow this KB article and you should be fine...

[URL unfurl="true"]http://support.microsoft.com/default.aspx?scid=kb;en-us;822931[/url]

You will need to go through it for each move.

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers

 

[markdmac]

Moving mailboxes is a simple task. right click a user in AD Users & Computers. Choose Exchange Tasks. Choose Move Mailbox. Only one choice will be available since you will just have the 2 servers (it knows if you want to move to go to the second one).

Your public folders is a bit more work. Read up (the online help should do it) on how to replicate public folders. You will want to first replicate the folders, then break the replica and set the primary source as the new server. Another option for public folders is PFMIGRATE, but that is rather ugly and won't preserve permissions. Third method would be to manually copy them to PST files and then recreate and import from PST.

I hope you find this post helpful.

Regards,

Mark

 

[LaforcE]

Guyz thx a lot for your help, again!!

I wonder one thing.

Can't I just copy the exchange folder on another drive.
Remove Exchange and AD from the machine.
Reinstall exchange atsame place and recopy the folders ?

lol

Seems to simple ... hehe.

- Security is a never ending job.

 

[markdmac]

No, you would not be able to do that. You would want to look up disaster recovery options to see all that would be required for that.

I hope you find this post helpful.

Regards,

Mark