Re: Migrating Active Directory fom Win2000Srv to Win2003Srv standard

Hi Mike,

To transfer Schema Master:

Register Schmmgmt.dll
1. Click Start, and then click Run.
2. Type regsvr32 schmmgmt.dll in the Open box, and then click OK.
3. Click OK when you receive the message that the operation succeeded.

Transfer the Schema Master Role
1. Click Start, click Run, type mmc in the Open box, and then click OK.
2. On the File, menu click Add/Remove Snap-in.
3. Click Add.
4. Click Active Directory Schema, click Add, click Close, and then click
OK.
5. In the console tree, right-click Active Directory Schema, and then click
Change Domain Controller.
6. Click Specify Name, type the name of the domain controller that will be
the new role holder, and then click OK.
7. In the console tree, right-click Active Directory Schema, and then click
Operations Master.
8. Click Change.
9. Click OK to confirm that you want to transfer the role, and then click
Close.


To transfer RID:

1. Click Start, point to Administrative Tools, and then click Active
Directory Users and Computers.
2. Right-click Active Directory Users and Computers, and then click Connect
to Domain Controller.

NOTE: You must perform this step if you are not on the domain controller to
which you want to transfer the role. You do not have to perform this step
if you are already connected to the domain controller whose role you want
to transfer.
3. Do one of the following: ? In the Enter the name of another domain
controller box, type the name of the domain controller that will be the new
role holder, and then click OK.

-or-
? In the Or, select an available domain controller list, click the domain
controller that will be the new role holder, and then click OK.

4. In the console tree, right-click Active Directory Users and Computers,
point to All Tasks, and then click Operations Master.
5. Click the appropriate tab for the role that you want to transfer (RID,
PDC, or Infrastructure), and then click Change.
6. Click OK to confirm that you want to transfer the role, and then click
Close.

Actually, you may refer to :

How to view and transfer FSMO roles in Windows Server 2003
http://support.microsoft.com/kb/324801/en-us

Have a good day~

Best regards,

Vincent Xu
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

This posting is provided "AS IS" with no warranties, and confers no rights.


--------------------
>>From: "Michael D. Ober" <obermd.@.alum.mit.edu.nospam>
>>References: <1136356555.834916.182060@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
<1136797142.766025.175410@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
<Imh#NmcFGHA.3696@xxxxxxxxxxxxxxxxxxxxx>
>>Subject: Re: Migrating Active Directory fom Win2000Srv to Win2003Srv
standard
>>Date: Tue, 10 Jan 2006 07:28:01 -0700
>>Lines: 142
>>X-Priority: 3
>>X-MSMail-Priority: Normal
>>X-Newsreader: Microsoft Outlook Express 6.00.2800.1506
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506
>>Message-ID: <OJtURIfFGHA.3000@xxxxxxxxxxxxxxxxxxxx>
>>Newsgroups: microsoft.public.windows.server.migration
>>NNTP-Posting-Host: mail.wakeassoc.com 63.229.239.153
>>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP14.phx.gbl
>>Xref: TK2MSFTNGXA02.phx.gbl
microsoft.public.windows.server.migration:21969
>>X-Tomcat-NG: microsoft.public.windows.server.migration
>>
>>Update - it took about 30 minutes last Friday morning to upgrade our
domain
>>from Windows 2000 AD to Windows 2003 AD. Here are the steps I used.
>>
>>Log in to any W2K AD controller as Administrator and open a command prompt
>>and type the following:
>>
>>ntdsutil <prompt will be "ntdsutil:>>
>>roles <prompt will be "fsmo maintenance:">
>>connections <prompt will be "server connections:">
>>connect to server <the server name you're on>
>>quit <prompt will be "fsmo maintenance:">
>>transfer domain naming master <answer yes to all of these transfers>
>>transfer infrastructure master
>>transfer PDC
>>transfer RID master
>>transfer schema master
>>quit
>>quit
>>
>>Shut down your other server.
>>
>>Insert your Windows 2003 Server CD - don't let autorun upgrade (you do
have
>>autorun turned off on your servers, don't you. If not, get TweakUI from
the
>>Windows PowerToys and install it and turn off AutoRun). Assuming your CD
>>ROM is drive D
>>
>>d:
>>cd \i386
>>adprep /forestprep <this took about 25 minutes on my Dual PII 450
>>server>
>>adprep /domainprep <this took about 5 seconds on the same server>
>>exit
>>
>>Mike Ober.
>>
>>PS - Vincent or any other MS expert, can the RID and Schema masters be
>>transferred in any other method? The Domain Naming, Infrastructure, and
PDC
>>emulator masters can be transferred through the various GUI interfaces,
but
>>I have been unable to find RID and Schema transfer options in the GUI.
>>
>>
>>"Vincent Xu [MSFT]" <v-xuwen@xxxxxxxxxxxxxxxxxxxx> wrote in message
>>news:Imh%23NmcFGHA.3696@xxxxxxxxxxxxxxxxxxxxxxxx
>>> Hi,
>>>
>>> I'd like to suggest you refer to Michael's reply as above. I paste his
>>> reply here:
>>>
>>> ==============
>>> It sounds like you didn't do the forest and domain prep steps at the
>>> beginning of the upgrade. (I'm not sure of the actual commands - you'll
>>> need to look them up.)
>>>
>>> If you have more than one server, do the following first
>>> Transfer all your FSMO roles to a single server.
>>> On a secondary DC, mark it as a Global Catalog server (you should have
at
>>> least two GC servers in a domain anyway for redundancy)
>>> Wait for the GC database to update - it's usually pretty quick.
>>> Shutdown the secondary server.
>>>
>>> On the server with the FSMO roles, run the adprep utility twice. The
>>first
>>> time use the forestprep options. The second time, use the domain prep
>>> options. The adprep utility is on the Windows Server 2003 CD.
>>>
>>> Install your Windows Server 2003 system and promote it to a DC.
>>>
>>> At this point, if everything is good to go, restart the secondary server
>>you
>>> shut down and demote it if you don't want to keep it around.
>>>
>>> There is no "trust" establishment required in this scenario.
>>>
>>> Mike Ober.
>>>
>>> ===============
>>>
>>>
>>> Best regards,
>>>
>>> Vincent Xu
>>> Microsoft Online Partner Support
>>>
>>> Get Secure! - www.microsoft.com/security
>>>
>>> When responding to posts, please "Reply to Group" via your newsreader so
>>> that others may learn and benefit from your issue.
>>>
>>> This posting is provided "AS IS" with no warranties, and confers no
>>rights.
>>>
>>>
>>> --------------------
>>> >>From: "muyass" <muyass@xxxxxxx>
>>> >>Newsgroups: microsoft.public.windows.server.migration
>>> >>Subject: Re: Migrating Active Directory fom Win2000Srv to Win2003Srv
>>> standard
>>> >>Date: 9 Jan 2006 00:59:02 -0800
>>> >>Organization: http://groups.google.com
>>> >>Lines: 9
>>> >>Message-ID: <1136797142.766025.175410@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
>>> >>References: <1136356555.834916.182060@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
>>> >> <OKRVnsTEGHA.1584@xxxxxxxxxxxxxxxxxxxx>
>>> >>NNTP-Posting-Host: 212.114.0.154
>>> >>Mime-Version: 1.0
>>> >>Content-Type: text/plain; charset="iso-8859-1"
>>> >>X-Trace: posting.google.com 1136799405 17704 127.0.0.1 (9 Jan 2006
>>> 09:36:45 GMT)
>>> >>X-Complaints-To: groups-abuse@xxxxxxxxxx
>>> >>NNTP-Posting-Date: Mon, 9 Jan 2006 09:36:45 +0000 (UTC)
>>> >>In-Reply-To: <OKRVnsTEGHA.1584@xxxxxxxxxxxxxxxxxxxx>
>>> >>User-Agent: G2/0.2
>>> >>X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2;
>>> Crazy Browser 1.0.5; .NET CLR 1.1.4322),gzip(gfe),gzip(gfe)
>>> >>X-HTTP-Via: 1.1 akdn.tajnet.com:3128 (Squid/2.4.STABLE3)
>>> >>Complaints-To: groups-abuse@xxxxxxxxxx
>>> >>Injection-Info: z14g2000cwz.googlegroups.com;
>>posting-host=212.114.0.154;
>>> >> posting-account=tI797w0AAABkVhUPwjeYSEncRqW0S6Co
>>> >>Path:
>>>
>>TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-on
li
>>>
>>ne.de!news.glorb.com!postnews.google.com!z14g2000cwz.googlegroups.com!not-
fo
>>> r-mail
>>> >>Xref: TK2MSFTNGXA02.phx.gbl
>>> microsoft.public.windows.server.migration:21946
>>> >>X-Tomcat-NG: microsoft.public.windows.server.migration
>>> >>
>>> >>Dear Vincent
>>> >>
>>> >>My Windows 2000 server Domain Mode on "Mixed mode" - is it OK.
>>> >>and My Windows 2003 server Fuctional Level is Windows 2000 Native. And
>>> >>on both Domains in Domain Trust Windows Transitive is "No".
>>> >>
>>> >>Regards
>>> >>Muyassar
>>> >>
>>> >>
>>>
>>
>>
>>

.

Relevant Pages

  • RE: Name server
    ... You need to migrate ALL FSMO (Flexible Single Master Operations) Roles to ... Secondary DNS Server to your current DNS Server. ... then demote your original Domain controller by running DCPROMO on it - ...
    (microsoft.public.windows.server.general)
  • RE: Provide feedback to DC promotion/replacement
    ... step as a single domain controller in a domain. ... I have looked at the WINS property on that server and nothing is pointing to ... A global catalog server is a domain controller that, ... the infrastructure master is also a global catalog it won't ever see any ...
    (microsoft.public.windows.server.active_directory)
  • RE: Provide feedback to DC promotion/replacement
    ... When I promote my dc3 to a domain controller, the first step is to enable GC ... the infrastructure master is also a global catalog it won't ever see any ... -the Infrastructure Master is not allowed to run on a Global Catalog Server ...
    (microsoft.public.windows.server.active_directory)
  • Re: Time server to sync issue?
    ... sync gets out - this is also where the forest roles are helf on one of the ... You should not need a dedicated Time Server. ... Forest-wide Roles - Schema Master and Domain Naming Master ... The "time clock" is the Domain Controller from each Domain that holds the ...
    (microsoft.public.windows.server.active_directory)
  • RE: 2000 to 2003 domain controller upgrade
    ... Hi Joe! ... I originally ran the tool from the domain controller to ... which I would like the schema master role transferred. ... >|attempting to connect to the server in question. ...
    (microsoft.public.windows.server.migration)