DCPROMO and FSMO roles "Jim" <jim[ at ]camden.lib.nj.u$> 29.06.2007 14:37:52 Hello, I have a W2000S running with the FSMO roles of PDC, RID, Infrastructure, etcetera. All my other DC's are W2003S. I want to decommission this last W2000S DC and only have W2003S DC's. My question is this: Should I move the FSMO roles manually off the W2000S to a W2003S DC or will the DCPROMO down to a domain member server of the W2000S prompt me to move the roles to another DC? Which would be the safest/best way to do this. Thanks, Jim M.

Re: DCPROMO and FSMO roles "kj" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> 29.06.2007 15:30:23 Jim wrote: [Quoted Text] > Hello, > > I have a W2000S running with the FSMO roles of PDC, RID, > Infrastructure, etcetera. All my other DC's are W2003S. I want to > decommission this last W2000S DC and only have W2003S DC's. > > My question is this: Should I move the FSMO roles manually off the > W2000S to a W2003S DC or will the DCPROMO down to a domain member > server of the W2000S prompt me to move the roles to another DC? Which > would be the safest/best way to do this. > > Thanks, > > Jim M. DCPromo will attempt to move the roles for you. I don't think it'll make your new DC a GC though. For as little trouble as it is, I'd do it manually and be statisfied (dcdiag) that all was well before I demoted the 2K DC. -- /kj

Re: DCPROMO and FSMO roles "Jorge de Almeida Pinto [MVP - DS]" <SubstituteThisWithMyFullNameSeparatedByDots[ at ]gmail.com> 29.06.2007 20:47:46 when demoting a DC, the process moves the roles to another DC. Which DC is chosen depends on the environment. However it is better to transfer the roles manually so that you know where the roles are hosted and everything is OK -- Cheers, (HOPEFULLY THIS INFORMATION HELPS YOU!) # Jorge de Almeida Pinto # MVP Windows Server - Directory Services BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx ------------------------------------------------------------------------------------------ * How to ask a question --> http://support.microsoft.com/?id=555375 ------------------------------------------------------------------------------------------ * This posting is provided "AS IS" with no warranties and confers no rights! * Always test before implementing! ------------------------------------------------------------------------------------------ ################################################# ################################################# ------------------------------------------------------------------------------------------ "Jim" <jim[ at ]camden.lib.nj.u$> wrote in message news:eWblTsluHHA.4412[ at ]TK2MSFTNGP02.phx.gbl... [Quoted Text] > Hello, > > I have a W2000S running with the FSMO roles of PDC, RID, Infrastructure, > etcetera. All my other DC's are W2003S. I want to decommission this last > W2000S DC and only have W2003S DC's. > > My question is this: Should I move the FSMO roles manually off the W2000S > to a W2003S DC or will the DCPROMO down to a domain member server of the > W2000S prompt me to move the roles to another DC? Which would be the > safest/best way to do this. > > Thanks, > > Jim M. > >

Re: DCPROMO and FSMO roles "kj" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> 30.06.2007 03:41:53 kj wrote: [Quoted Text] > Jim wrote: >> Hello, >> >> I have a W2000S running with the FSMO roles of PDC, RID, >> Infrastructure, etcetera. All my other DC's are W2003S. I want to >> decommission this last W2000S DC and only have W2003S DC's. >> >> My question is this: Should I move the FSMO roles manually off the >> W2000S to a W2003S DC or will the DCPROMO down to a domain member >> server of the W2000S prompt me to move the roles to another DC? Which >> would be the safest/best way to do this. >> >> Thanks, >> >> Jim M. > > DCPromo will attempt to move the roles for you. I don't think it'll > make your new DC a GC though. For as little trouble as it is, I'd do > it manually and be statisfied (dcdiag) that all was well before I > demoted the 2K DC. (details) When a domain controller is demoted, the operational attribute "GiveAwayAllFsmoRoles" is written, which triggers the domain controller to locate other domain controllers to offload any roles it currently owns. Windows 2000 determines which roles the domain controller being demoted currently owns and locates a suitable domain controller by following these rules: 1. Locate a server in the same site. 2. Locate a server to which there is RPC connectivity. 3. Use a server over an asynchronous transport (such as SMTP). In all transfers, if the role is a domain-specific role, the role can be moved only to another domain controller in the same domain. Otherwise, any domain controller in the enterprise is a candidate. -- /kj

RE: DCPROMO and FSMO roles v-kzhao[ at ]online.microsoft.com ("Ken Zhao [MSFT]") 02.07.2007 03:29:11 Hello Jim, Thank you for using newsgroup! From your post, I'd like to thanks for other peoples great information sharing. Generally, you may use Dcdiag.exe from the support tools to verify that all the domain controllers have shared Netlogon and Sysvol shares. To do so, type the following command at a command prompt: DCDIAG.EXE /e /test:frssysvol The schema and infrastructure operations masters are used to introduce forest and domain-wide schema changes to the forest and its domains that are made by the Windows Server 2003 adprep utility. Verify that the domain controller that hosts the schema role and infrastructure role for each domain in the forest reside on live domain controllers and that each role owner has performed inbound replication over all partitions since they were last restarted. The DCDIAG /test:FSMOCHECK command can be used to view forest-wide and domain-wide operational roles. Operations master roles that reside on non-existent domain controllers should be seized to a healthy domain controller by using NTDSUTIL. Roles that reside on unhealthy domain controllers should be transferred if possible. Otherwise, they should be seized. The NETDOM QUERY FSMO command does not identify FSMO roles that reside on deleted domain controllers. Verify that the schema master and each infrastructure master has performed inbound replication of Active Directory since last booted. Inbound replication can be verified by using the REPADMIN /SHOWREPS DCNAME command, where DCNAME is the NetBIOS computer name or the fully qualified computer name of a domain controller. For more information about operations masters and their placement, click the following article numbers to view the articles in the Microsoft Knowledge Base: 197132: Windows 2000 Active Directory FSMO roles http://support.microsoft.com/kb/197132/ 223346: FSMO placement and optimization on Active Directory domain controllers http://support.microsoft.com/kb/223346/ For more information and considerations, please refer to: 325379: How to upgrade Windows 2000 domain controllers to Windows Server 2003 http://support.microsoft.com/kb/325379/en-us Thanks & Regards, Ken Zhao Microsoft Online Support Microsoft Global Technical Support Center Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security> ==================================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue. ==================================================== This posting is provided "AS IS" with no warranties, and confers no rights. -------------------- | From: "Jim" <jim[ at ]camden.lib.nj.u$> | Subject: DCPROMO and FSMO roles | Date: Fri, 29 Jun 2007 10:37:52 -0400 | Lines: 16 | X-Priority: 3 | X-MSMail-Priority: Normal | X-Newsreader: Microsoft Outlook Express 6.00.2900.3028 | X-RFC2646: Format=Flowed; Original | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028 | Message-ID: <eWblTsluHHA.4412[ at ]TK2MSFTNGP02.phx.gbl> | Newsgroups: microsoft.public.windows.server.migration | NNTP-Posting-Host: 209.212.1.162 | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.migration:1553 | X-Tomcat-NG: microsoft.public.windows.server.migration | | Hello, | | I have a W2000S running with the FSMO roles of PDC, RID, Infrastructure, | etcetera. All my other DC's are W2003S. I want to decommission this last | W2000S DC and only have W2003S DC's. | | My question is this: Should I move the FSMO roles manually off the W2000S to | a W2003S DC or will the DCPROMO down to a domain member server of the W2000S | prompt me to move the roles to another DC? Which would be the safest/best | way to do this. | | Thanks, | | Jim M. | | |

RE: DCPROMO and FSMO roles v-kzhao[ at ]online.microsoft.com ("Ken Zhao [MSFT]") 04.07.2007 06:59:43 Hi Jim, I am just writing to see how everything is going. If you have any updates or need any further assistance on this issue, please feel free to let me know. Thanks & Regards, Ken Zhao Microsoft Online Support Microsoft Global Technical Support Center Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security> ==================================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue. ==================================================== This posting is provided "AS IS" with no warranties, and confers no rights. -------------------- | X-Tomcat-ID: 33593591 | References: <eWblTsluHHA.4412[ at ]TK2MSFTNGP02.phx.gbl> | MIME-Version: 1.0 | Content-Type: text/plain | Content-Transfer-Encoding: 7bit | From: v-kzhao[ at ]online.microsoft.com ("Ken Zhao [MSFT]") | Organization: Microsoft | Date: Mon, 02 Jul 2007 03:29:11 GMT | Subject: RE: DCPROMO and FSMO roles | X-Tomcat-NG: microsoft.public.windows.server.migration | Message-ID: <LFkQxkFvHHA.2148[ at ]TK2MSFTNGHUB02.phx.gbl> | Newsgroups: microsoft.public.windows.server.migration | Lines: 99 | Path: TK2MSFTNGHUB02.phx.gbl | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.migration:1559 | NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182 | | Hello Jim, | | Thank you for using newsgroup! | | From your post, I'd like to thanks for other peoples great information | sharing. Generally, you may use Dcdiag.exe from the support tools to verify | that all the domain controllers have shared Netlogon and Sysvol shares. To | do so, type the following command at a command prompt: | DCDIAG.EXE /e /test:frssysvol | | The schema and infrastructure operations masters are used to introduce | forest and domain-wide schema changes to the forest and its domains that | are made by the Windows Server 2003 adprep utility. Verify that the domain | controller that hosts the schema role and infrastructure role for each | domain in the forest reside on live domain controllers and that each role | owner has performed inbound replication over all partitions since they were | last restarted. | | The DCDIAG /test:FSMOCHECK command can be used to view forest-wide and | domain-wide operational roles. Operations master roles that reside on | non-existent domain controllers should be seized to a healthy domain | controller by using NTDSUTIL. Roles that reside on unhealthy domain | controllers should be transferred if possible. Otherwise, they should be | seized. The NETDOM QUERY FSMO command does not identify FSMO roles that | reside on deleted domain controllers. | | Verify that the schema master and each infrastructure master has performed | inbound replication of Active Directory since last booted. Inbound | replication can be verified by using the REPADMIN /SHOWREPS DCNAME command, | where DCNAME is the NetBIOS computer name or the fully qualified computer | name of a domain controller. For more information about operations masters | and their placement, click the following article numbers to view the | articles in the Microsoft Knowledge Base: | 197132: Windows 2000 Active Directory FSMO roles | http://support.microsoft.com/kb/197132/ | | 223346: FSMO placement and optimization on Active Directory domain | controllers | http://support.microsoft.com/kb/223346/ | | For more information and considerations, please refer to: | 325379: How to upgrade Windows 2000 domain controllers to Windows Server | 2003 | http://support.microsoft.com/kb/325379/en-us | | Thanks & Regards, | | Ken Zhao | | Microsoft Online Support | Microsoft Global Technical Support Center | | Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security> | ==================================================== | When responding to posts, please "Reply to Group" via your newsreader so | that others may learn and benefit from your issue. | ==================================================== | This posting is provided "AS IS" with no warranties, and confers no rights. | | | | | -------------------- | | From: "Jim" <jim[ at ]camden.lib.nj.u$> | | Subject: DCPROMO and FSMO roles | | Date: Fri, 29 Jun 2007 10:37:52 -0400 | | Lines: 16 | | X-Priority: 3 | | X-MSMail-Priority: Normal | | X-Newsreader: Microsoft Outlook Express 6.00.2900.3028 | | X-RFC2646: Format=Flowed; Original | | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028 | | Message-ID: <eWblTsluHHA.4412[ at ]TK2MSFTNGP02.phx.gbl> | | Newsgroups: microsoft.public.windows.server.migration | | NNTP-Posting-Host: 209.212.1.162 | | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl | | Xref: TK2MSFTNGHUB02.phx.gbl | microsoft.public.windows.server.migration:1553 | | X-Tomcat-NG: microsoft.public.windows.server.migration | | | | Hello, | | | | I have a W2000S running with the FSMO roles of PDC, RID, Infrastructure, | | etcetera. All my other DC's are W2003S. I want to decommission this last | | W2000S DC and only have W2003S DC's. | | | | My question is this: Should I move the FSMO roles manually off the W2000S | to | | a W2003S DC or will the DCPROMO down to a domain member server of the | W2000S | | prompt me to move the roles to another DC? Which would be the safest/best | | way to do this. | | | | Thanks, | | | | Jim M. | | | | | | | |