New DC with the same IP Address

H

Hank Arnold

I'm in a position of having to replace a secondary DC (HOSPICEDC2) due
to hardware problems. I'm in the process of setting up a 3rd DC
(HOSPICEDC3) that will replace it.

My plan is to:

1) Get HOSPICEDC3 set up and working
2) Make HOSPICEDC3 a GC (single forest & domain)
2) DCPROMO HOSPICEDC2 to a member server
3) Remove HOSPICEDC2 from the domain
4) Turn HOSPICEDC2 off and scrap it
5) Change the IP address of HOSPICEDC3 to the one used by HOSPICEDC2

This will allow me to avoid having to update 125+ workstations, laptops
and servers for a new secondary DNS server.....

Anything I'm overlooking?
 
D

Dennis Chung [MVP]

You may want to note the following;

1. Where is your DNS running?
2. Is your DNS allowing dynamic update?
3. What are the FSMO roles held by the machine you are going to scrap?

--
Best Regards,
Dennis Chung

MCP, MCSA (2k3/Security), MCSE (2000/2003)
MCDBA, MCTS (SQL 2005), MCITP (SQL 2005 - DBA)
Microsoft Certified Trainer, Microsoft MVP - Windows

Microsoft Windows & SQL Server Advisory Panel Member
MS IT Academy - Mentor (APAC)
MS Vista & Office12 Influencer Lead (APAC)
Founder: Singapore Windows User Group (http://sgWindowsGroup.org)
 
H

Hank Arnold

1) DNS is being served by both HOSPICEDC and HOSPICEDC2. all workstations,
laptops and servers reference the HOSPICEDC2 IP address (192.168.1.112).
2) Dynamic Updates are allowed
3) HOSPICEDC2 only has a role as a GC. All other FSMOS are on HOSPICEDC.

Dennis Chung said:
You may want to note the following;

1. Where is your DNS running?
2. Is your DNS allowing dynamic update?
3. What are the FSMO roles held by the machine you are going to scrap?

--
Best Regards,
Dennis Chung

MCP, MCSA (2k3/Security), MCSE (2000/2003)
MCDBA, MCTS (SQL 2005), MCITP (SQL 2005 - DBA)
Microsoft Certified Trainer, Microsoft MVP - Windows

Microsoft Windows & SQL Server Advisory Panel Member
MS IT Academy - Mentor (APAC)
MS Vista & Office12 Influencer Lead (APAC)
Founder: Singapore Windows User Group (http://sgWindowsGroup.org)
 
D

Dennis Chung [MVP]

Hi Hank,

are u upgrading from Win2k to Win2k3? If yes, you need to adprep the
schema of your AD.

Other than that, you're all set. Remember to backup your domain
controller. In worst case, you can restore the main DC.

Next, you may want to consider putting DNS into your new machine so that
you can a standby DNS. ;-)

--
Best Regards,
Dennis Chung

MCP, MCSA (2k3/Security), MCSE (2000/2003)
MCDBA, MCTS (SQL 2005), MCITP (SQL 2005 - DBA)
Microsoft Certified Trainer, Microsoft MVP - Windows

Microsoft Windows & SQL Server Advisory Panel Member
MS IT Academy - Mentor (APAC)
MS Vista & Office12 Influencer Lead (APAC)
Founder: Singapore Windows User Group (http://sgWindowsGroup.org)
Hank Arnold said:
1) DNS is being served by both HOSPICEDC and HOSPICEDC2. all
workstations, laptops and servers reference the HOSPICEDC2 IP address
(192.168.1.112).
2) Dynamic Updates are allowed
3) HOSPICEDC2 only has a role as a GC. All other FSMOS are on HOSPICEDC.
 
H

Hank Arnold

Dennis,

Thanks for taking the time. Just to clarify:

- All servers are running W2K Server
- Currently DC1/2/3 are all running
- DC1 has all FSMOs & DHCP
- DC1/2/3 have DNS installed & working
- DC1/2/3 are GCs
- All workstations & servers point to DNS servers:
192.168.1.111
192.168.1.112

Current IP addresses are:

DC1 192.168.1.111
DC2 192.168.1.112
DC3 192.168.1.113

I want to:

1) DCPROMO DC2 to a member server
2) Remove DC2 from the domain and scrap it
3) Change IP addresses:

FROM TO
DC1 192.168.1.111 192.168.1.111
DC3 192.168.1.113 192.168.1.112

Can I interpret your posting as saying that this will not cause a problem?


Regards,
Hank Arnold
 
J

John N Mraz

I just wanted to say that your Certs are very impressive. I'm just starting
out and have been told that A+ is a good starter. What do you think? Thank
you and have a great weekend.

John
 
D

Dennis Chung [MVP]

Hi Hank,

i'll summarize yours into 3 main stages.

Stage 1:
Since you are upgrading your Win2k DC to include DCs that run Win2k3, you
need to extend your ad schema.
http://technet2.microsoft.com/Windo...a8d7-4761-b38a-e207baa734191033.mspx?mfr=true
Follow the above link to learn about ADPREP. Remember to backup entirely
your domain controllers. Yours should be pretty simple since you don't have
external domains/forests to think about.

Stage 2:
Bring in the DC running W2k3. You install the new machine. Load in W2k3 (not
a DC yet). Join the new machine as part of the domain. Then do a dcpromo.
After the DC Promo, you'll have 1 DC running W2k3. After this step, let it
run for about 30 mins (assuming your AD is all in one AD Site, if more than
1 AD Sites, wait for 1 day before the next stage). Remember to install DNS
to go along with it. (I assume your DNS is ADI and allowing secure dynamic
update).

Stage 3:
On the DC that you want to remove, do a DCPromo. Remember during the whole
process of demoting, you need to ensure you can talk to DNS from your
machine, the DNS should be 1.111. After removal, wait for about 30 mins (to
be super safe). Then change the IP of win2k3 DC to take over that of DC2.
After the change of IP, you have 2 choice. Either way updates the SRV
records in the DNS pointed by the w2k3 DC. You either reboot or you restart
the netlogon service.

After this, you are done !! Remember to make sure you have full backups
before doing anything. Best is if you image the entire AD DCs using things
like Acronis or Ghost. ;-) Of course, not necessary, but recommended. Think
about using Virtual PC (undo disk capability) to help you do the Stage 1.
;-)

Cheers, Good Luck and Have fun..
Dennis
- All servers are running W2K Server
- Currently DC1/2/3 are all running
- DC1 has all FSMOs & DHCP
- DC1/2/3 have DNS installed & working
- DC1/2/3 are GCs
- All workstations & servers point to DNS servers:
192.168.1.111
192.168.1.112

Current IP addresses are:

DC1 192.168.1.111
DC2 192.168.1.112
DC3 192.168.1.113

I want to:

1) DCPROMO DC2 to a member server
2) Remove DC2 from the domain and scrap it
3) Change IP addresses:

FROM TO
DC1 192.168.1.111 192.168.1.111
DC3 192.168.1.113 192.168.1.112

Can I interpret your posting as saying that this will not cause a problem?


--
Best Regards,
Dennis Chung

MCP, MCSA (2k3/Security), MCSE (2000/2003)
MCDBA, MCTS (SQL 2005), MCITP (SQL 2005 - DBA)
Microsoft Certified Trainer, Microsoft MVP - Windows

Microsoft Windows & SQL Server Advisory Panel Member
MS IT Academy - Mentor (APAC)
MS Vista & Office12 Influencer Lead (APAC)
Founder: Singapore Windows User Group (http://sgWindowsGroup.org)
 
D

Dennis Chung [MVP]

Gee, think nothing of it. I guess its interest and passion for me that made
it easy. ;-)
A+ ? Hmm, i heard it allows you to skip a paper and use A+ as a substitute.

Seriously, i can't comment much about A+ in the capacity of whether its good
or not. But i guess the more important thing is do you want to be vendor
centric. In my case, i'm going full blown on Microsoft. So if you want to
be non-vendor centric, perhaps A+ is a good start, otherwise, forget about
it.

The last time i remember was that A+ was more like PC kind of thing. Correct
me if i'm wrong. Don't think it prepares you in anyway that helps u with
Microsoft certifications.

--
Best Regards,
Dennis Chung

MCP, MCSA (2k3/Security), MCSE (2000/2003)
MCDBA, MCTS (SQL 2005), MCITP (SQL 2005 - DBA)
Microsoft Certified Trainer, Microsoft MVP - Windows

Microsoft Windows & SQL Server Advisory Panel Member
MS IT Academy - Mentor (APAC)
MS Vista & Office12 Influencer Lead (APAC)
Founder: Singapore Windows User Group (http://sgWindowsGroup.org)
 
H

Hank Arnold

Thanks again for taking the time to respond. However, I think that I'm
perhaps not saying thins clearly enough....

All my servers run W2K Server. None run or will run W2K3. There is no
plan to upgrade any server to W2K3. I am *adding* a W2K server and
removing an existing one.

Currently I'm running all 3 DCs. They all have integrated DNS with
dynamic updates. Everything seems to be running OK right now.

Based on this, it looks to me like I can follow Stages 2 & 3 to
accomplish what I want........

Thanks for being so patient...

Regards,
Hank Arnold
 
D

Dennis Chung [MVP]

Oopss. Sorry. Then u simply skip stage 1. ;-)
Perhaps, you should consider going to W2k3 because i remember its going to
be end of support cycle soon.

Else, might want to hang on and go to Longhorn instead. ;-)
Have Fun. !!

--
Best Regards,
Dennis Chung

MCP, MCSA (2k3/Security), MCSE (2000/2003)
MCDBA, MCTS (SQL 2005), MCITP (SQL 2005 - DBA)
Microsoft Certified Trainer, Microsoft MVP - Windows

Microsoft Windows & SQL Server Advisory Panel Member
MS IT Academy - Mentor (APAC)
MS Vista & Office12 Influencer Lead (APAC)
Founder: Singapore Windows User Group (http://sgWindowsGroup.org)
 
H

Hank Arnold

Thanks again... W2K3 is not an option at this time ($$), unfortunately....

Regards,
Hank Arnold
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top