replacing w2k ad server with w2k3 ad server

[Manuel Oetiker]

I have a w2k ad server with (ris, printing, roaming profs, ad, ...) serving
clients. I like to replace this server with a w2k3 server. I have problems
with moving group pols and fsmo roles. I'm interested in links with step by
step instructions what I have to do fore this move.

thanks Manuel

 

[Laura E. Hunter \(MVP\)]

Are you adding a new 2K3 controller to an existing 2000 domain? If that is
the case, then any Group Policy Objects (GPOs) should replicate
automatically as a part of normal Active Directory replication. If for some
reason this doesn't function properly, you can use the Group Policy
Management Console (GPMC) to export GPOs from the 2K server and re-import
them into the 2K3 server.

Transferring FSMO roles is done using the ntdsutil command-line utility:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;324801

 

[Cary Shultz [A.D. MVP]]

Manuel,

Also, in addition to what Laura stated, if you are going to simply add an
additional Domain Controller ( in this case, a WIN2003 DC to a WIN2000 AD )
then please do not forget to extend the schema by running adprep /forestprep
on the WIN2000 DC that holds the FSMO Role of Schema Master as well as
running adprep / domainprep on the WIN2000 DC that holds the FSMO Role of
PDC Emulator prior to actually adding the WIN2003 DC. Be aware of the
'mangled attributes' problem that this can cause. There is a quick and easy
fix for it, though.

mfg,

Cary

 

[Manuel Oetiker]

Hi thanks

In the end I like to replace the server. I add the w2k3 server
to the domain as second controller. I did first run the schema
scrips on the w2k server. then I changed the fsmo roles like described.

The problem was:

did not work as domain controller anymore. there where just error in the
master role gui.

w2k3 server had no pol files.

Manuel

 

[Manuel Oetiker]

Hi Cary

think for your hints.

So what I like to do is:

WIN2003 DC to a WIN2000 AD works
move AD from WIN2000 AD to WIN2003 AD and remove WIN2000
was not possible.

There could be a problem that the roaming profile of the administrator
account is on WIN2000 AD. I have to change the folder redirection path

cheers Manuel