Replace First Domain Controller in 1st Domain/1st Forrest

[William]

I would really appreciate a little feedback on my plan.

I have a single forrest with a single domain containing
two DCs. The very first DC that I setup is aging, out of
warranty, and needs to be replaced with a new server.
Both DCs are DNS servers (AD integrated). Both DCs are
Global Catalog servers. Environment is pure TCP/IP &
pure DNS...there is no WINS, and NBT is disabled on all
servers and workstations.

Following is the steps that I intend to perform:

(1) Run full backup of this first DC.
(2) Move Operations Masters (which are all still running
on this server) to the second DC.
(3) Change the DNS settings in the DHCP scope to reflect
only one DNS server rather than two.
(4) Demote the first DC using dcpromo.
(5) Remove the first DC from the network.
(6) Install new server on the network.
(7) Install and configure DNS on new server.
(8) Promote new server to DC using dcpromo.
(9) Change the DNS settings in the DHCP scope to reflect
two DNS servers.
(10) Optionally, move Operations Masters back to new
server.

Any feedback to my plan would be appreciated. I'm sure
that there are a few gotchas that I haven't considered
yet.

Thanks!!

-William

 

[Jimmy Andersson]

It will work.

Regarding point 6 thru 8, install it as a member server then run dcpromo and
then install the DNS service. This will be easier/faster since you have AD
integrated zones. It's just a thought, your plan will work as it is.

Regards,
/Jimmy

 

[EveryoneAll]

I understand that there may be some stuff that the first
DC contains, besides the FSMO roles.

You probably need to export your Administrator certificate
on the first DC (under Certificate Manager) - required
when you implement Encrpyted File System.

Not sure if there's anything else, that's why I've been
procastinating on demoting my first DC.

Regards.

 

[William]

Thanks for the input folks!! It's nice to get some
opinions other than my own.

Take care,

-William