This is an old revision of the document!
1. Verify the new server's TCP/IP configuration has been pointed to the current DNS server. 2. Make the new server become a member server of the current Windows Server 2003 domain. 3. Upgrade the Windows Server 2003 forest schema to Windows Server 2008 schema with the “adprep /forestprep” command on old server. 4. Upgrade the Windows 2003 domain schema with the “adprep /domainprep” command on old server. 7. Run “dcpromo” on new server to promote it as an additional domain controller in existing Windows 2003 domain, afterwards you may verify the installation of Active Directory. 8. Enable Global Catalog on new server and manually Check Replication Topology and afterwards manually trigger replication (Replicate Now) to synchronize Active Directory database between 2 replicas. 9. Disable Global Catalog on the old DC. 10. Transfer all the FSMO roles from the old DC to the new DC. 11. Verify that the old DNS Server Zone type is Active Directory-Integrated. 12. Install DNS component on new server and configure it as a new DNS Server (Active Directory Integrated-Zone is preferred). All the DNS configuration should be replicated to the new DNS server with Active Directory Replication.
Run dcdiag and netdiag from the command prompt on the old machine to check for errors. If you have some, solve them first. For these tools you have to install the support\tools\suptools.msi from the 2003 installation disk.
Add the new 2008 R2 server to the domain as a member server.
Prepare the current Active Directory forest to accept a Server 2008 R2 DC. You do this by running
Adprep.exe /forestPrep (Adprep32.exe /forestPrep on x86 server)
on the current DC. Adprep is found on the Server 2008 R2 installation DVD in the Support\adprep folder. Some Antivirus software can sometimes interfere with this command. You may want to temporarily disable the antivirus service from running on the Schema Master until the process has been completed.
http://technet.microsoft.com/en-us/library/cc731728%28WS.10%29.aspx
The next step is to run Adprep.exe in each domain, while logged on to the domain controller holding the Operations Master FSMO role. This command is only run on that server. You do not run this command on each domain controller. You must be logged into that server as a Domain Admin. One of these two commands should be run.
Adprep.exe /domainPrep Adprep.exe /domainPrep /gpPrep
If you already ran the /gpPrep parameter for Windows Server 2003, you do not need to run it again for Windows Server 2008 or Windows Server 2008 R2. This command adds only the inheritable access control entries (ACEs) on Group Policy objects (GPOs) in the SYSVOL shared folder. The additional ACEs give enterprise domain controllers read access permissions on GPOs. These permissions are required to support Resultant Set of Policy (RSOP) functionality for site-based policy.
Insert Windows Server 2008 Installation Disc in the new server. Run “dcpromo” (drive:\support\adprep\) on new server to promote it as an additional domain controller in existing Windows 2003 domain, afterwards you may verify the installation of Active Directory.
Enable Global Catalog on new server and manually Check Replication Topology and afterwards manually trigger replication (Replicate Now) to synchronize Active Directory database between 2 replicas.
http://technet.microsoft.com/en-us/library/cc755257.aspx
To add or remove the global catalog
1. Open Active Directory Sites and Services. To open Active Directory Sites and Services, click Start , click Administrative Tools , and then click Active Directory Sites and Services .
To open Active Directory Sites and Services in Windows Server® 2012, click Start , type dssite.msc .
2. In the console tree, click the server object to which you want to add the global catalog or from which you want to remove the global catalog.
Where? Active Directory Sites and Services\Sites\SiteName\Servers
3. In the details pane, right-click NTDS Settings of the selected server object, and then click Properties .
4. Select the Global Catalog check box to add the global catalog, or clear the check box to remove the global catalog.
Check that replication has completed. At a command prompt on the the new DC
nltest /server:<servername> /dsgetdc:<domainname>
Verify that the isGlobalCatalogReady attribute has a value of TRUE.
After replication is completed disable Global Catalog on the old DC.
Transfer FSMO roles from old server to new server.
http://support.microsoft.com/kb/324801
Verify that the old DNS Server Zone type is Active Directory-Integrated.
http://support.microsoft.com/kb/816101
Install DNS component on new server and configure it as a new DNS Server (Active Directory Integrated-Zone is preferred). All the DNS configuration should be replicated to the new DNS server with Active Directory Replication.
Move DHCP server from old 2003 to new 2008 R2
To move a DHCP database and configuration from a server that is running Windows Server 2003 or Windows Server 2008 to another server that is running Windows Server 2008:
1. Log on to the source DHCP server by using an account that is a member of the local Administrators group.
2. Click Start, click Run, type cmd in the Open box, and then click OK.
3. Type netsh dhcp server export C:\dhcp.txt all , and then press ENTER.
Note: You must have local administrator permissions to export the data. Configure the DHCP server service on the server that is running Windows Server 2008
1. Click Start, click Administrative Tools, click Server Manager. If needed acknowledge User Account Control.
2. In Roles Summary click Add Roles, click Next, check DHCP server, and then click Next. Import the DHCP database
1. Log on as a user who is an explicit member of the local Administrators group. A user account in a group that is a member of the local Administrators group will not work. If a local Administrators account does not exist for the domain controller, restart the computer in Directory Services Restore Mode, and use the administrator account to import the database as described later in this section.
2. Copy the exported DHCP database file to the local hard disk of the Windows Server 2008-based computer.
3. Verify that the DHCP service is started on the Windows Server 2008-based computer.
4. Click Start, click Run, type cmd in the Open box, and then click OK.
5. At the command prompt, type netsh dhcp server import c:\dhcpdatabase.txt all , and then press ENTER, where c:\dhcpdatabase.txt is the full path and file name of the database file that you copied to the server.
Note When you try to export a DHCP database from a Windows 2000/2003 domain controller to a Windows Server 2008 member server of the domain, you may receive the following error message:
Error initializing and reading the service configuration - Access Denied
Note You must have local administrator permissions to import the data.
6. To resolve this issue, add the Windows Server 2008 DHCP server computer to the DHCP Admins group at the Enterprise level and redo steps 4 & 5.
7. If the “access is denied” error message occurs after you add the Windows Server 2008 DCHP server computer to the DHCP Admins group at the Enterprise level that is mentioned in step 6, verify that the user account that is currently used to import belongs to the local Administrators group. If the account does not belong to this group, add the account to that group, or log on as a local administrator to complete the import and redo steps 4 & 5. Authorize the DHCP server
1. Click Start, point to All Programs, point to Administrative Tools, and then click DHCP.
Note You must be logged on to the server by using an account that is a member of the Administrators group. In an Active Directory domain, you must be logged on to the server by using an account that is a member of the Enterprise Administrators group.
2. In the console tree of the DHCP snap-in, expand the new DHCP server. If there is a red arrow in the lower-right corner of the server object, the server has not yet been authorized.
3. Right-click the server object, and then click Authorize.
4. After several moments, right-click the server again, and then click Refresh. A green arrow indicates that the DHCP server is authorized.