locked
Windows Server 2019 Domain Controller Migration Preparation RRS feed

  • Question

  • What should be the Forest and Domain Exchange Schema version to prepare for Windows Server 2019 Domain Controller migration?


    Lonzel Green IT Professional

    Friday, July 17, 2020 7:41 PM

Answers

  • Hello da3rd,

    Thank you for posting here.

    Here are the answers for your reference.

    Q1: What should be the Forest and Domain Exchange Schema version to prepare for Windows Server 2019 Domain Controller migration?
    A1: 
    1.Before we add 2019 DC into existing domain, we should ensure: The minimum requirement to add a Windows Server 2019 Domain Controller is a Windows Server 2008 functional level. The domain also has to use DFS-R as the engine to replicate SYSVOL. 

    2.Before we do any change in existing AD domain environment, we had better do:
    1)Check if AD environment is healthy. Check all DCs in this domain is working fine by running Dcdiag /v. Check if AD replication works properly by running repadmin /showrepl and repadmin /replsum.
    2)Back up all domain controllers.

    3.For migrating DC from lower version to Windows server 2019, the steps below are for your reference:
    1)Add the new Window server 2019 to this existing domain.
    2)Add AD DS and DNS roles and promote this Windows server 2019 as a DC (also as a GC).
    3)Check if AD environment is healthy again.
    4)If AD environment is running fine, we can transfer FSMO roles to new 2019 DC if needed.
    5)Demote old DC if needed after transferring FSMO roles. Before we demote 2012 R2 DC, we should also check:
    If the removed DC was a DNS server, update the DNS client configuration on all member workstations, member servers, and other DCs that might have used this DNS server for name resolution. If it is required, modify the DHCP scope to reflect the removal of the DNS server.
    If the removed DC was a DNS server, update the Forwarder settings and the Delegation settings on any other DNS servers that might have pointed to the removed DC for name resolution.

    Meanwhile, for forest and domain functional level and Exchange version, we can refer to the link “Exchange Server supportability matrix” Dave provided.

    Q2: What would be the ideal method in using the same Server Name for a domain controller that you are replacing?
    A2: Usually, if we have more than two DCs in our domain, if we want to use same hostname and IP for new 2019 DC , as the old DC that we need migrate (such as DC1)  during DC migration.
    1) Check AD health and transfer fsmo roles from one DC that we need migrate (such as DC1) to another DC.
    2) Demote DC1 and shutdown.
    3) Delete the computer object from AD.
    4) Change the hostname and IP address of 2019 , same as DC1 and join to domain.
    5) Promote the win2019 server as DC (DNS server and GC server) and monitor health status.
    6) Transfer fsmo roles to new win2019 DC if needed.

    Q3: What is the ideal method to do this and yet use the same server name without having to demote the new one, change the name, and re-promote it again?
    A3: We can rename domain controller, we must use this renaming method (Netdom command) only if the Domain Controller that you want to rename is your only Domain Controller. If you have multiple domain controllers in your network you should introduce a new Domain Controller, demote the old domain controller and rename it and promote another new domain controller with the old hostname. It is the better way to demote and promote in a more complex situation. Though we can perform a rename of a domain controller (in the situation where there are more than one domain controllers), but it is not recommend.

    We suggest we have at least two DCs in one domain.

    After we rename domain controller, we should update the FRS or DFS replication member object manually.

    For renaming domain controller, we can refer to the following link.
    Rename a Domain Controller Using Netdom
    https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc816601(v=ws.10)?redirectedfrom=MSDN

    For update the FRS or DFS replication member object, we can refer to link below.
    Update the FRS or DFS Replication Member Object
    https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc794759%28v%3dws.10%29

    If we must rename domain controller, we must have a full backup of our domain controller before you perform this procedure and you must know how to perform a disaster recovery if things fail.

    Hope the information above is helpful. If anything is unclear, please feel free to let us know.


    This "Migration" Forum will be migrating to a new home on Microsoft Q&A, please refer to this sticky post for more details. 


    Best Regards,
    Daisy Zhou

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.


    "Migration" forum will be migrating to a new home on Microsoft Q&A!

    We invite you to post new questions in the "Migration"  forum's new home on Microsoft Q&A!

    For more information, please refer to the sticky post.

    Monday, July 20, 2020 9:46 AM

All replies

  • 2016 is the highest level currently.

    https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/active-directory-functional-levels#windows-server-2019

    Adprep runs automatically and schema is updated when you add the roles to the first 2019 domain controller.

    The two prerequisites to introducing the first 2019 domain controller are that domain functional level needs to be 2008 or higher and older sysvol FRS replication needs to have been migrated to DFSR
    https://techcommunity.microsoft.com/t5/Storage-at-Microsoft/Streamlined-Migration-of-FRS-to-DFSR-SYSVOL/ba-p/425405

    I'd use dcdiag / repadmin tools to verify health correcting all errors found before starting. Then stand up the new 2019, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over (optional), transfer pdc emulator role (optional), use dcdiag / repadmin tools to again verify health, when all is good you can decommission / demote old one.

    Exchange compatibility matrix can be found here.

    https://docs.microsoft.com/en-us/exchange/plan-and-deploy/supportability-matrix?view=exchserver-2019

     

    (please don't forget to mark helpful replies as answer)

     

     



    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows Server] Datacenter Management

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.


    Friday, July 17, 2020 8:05 PM
  • Thank you for your response Dave.

    One quick question along with this: What would be the ideal method in using the same Server Name for a domain controller that you are replacing?

    So if I have a Server 2016 Domain Controller called DC01 and I am going to introduce a new Server 2019 Domain Controller to replace this one and use the same name as DC01. What is the ideal method to do this and yet use the same server name without having to demote the new one, change the name, and re-promote it again? I hope this makes sense.


    Lonzel Green IT Professional

    Saturday, July 18, 2020 5:20 PM
  • Its always recommended to have at least two domain controllers to maintain high availability and for disaster mitigation. If this were the case then moving roles, decommission, demote, remove from network, stand up new one following above steps is the simpler / safer method.

    Renaming a domain controller is possible to do but is very risky move especially for a single DC setup.

    https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/cc835082(v=ws.11)

     

    (please don't forget to mark helpful replies as answer)

     

     



    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows Server] Datacenter Management

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.

    Saturday, July 18, 2020 5:57 PM
  • Hello da3rd,

    Thank you for posting here.

    Here are the answers for your reference.

    Q1: What should be the Forest and Domain Exchange Schema version to prepare for Windows Server 2019 Domain Controller migration?
    A1: 
    1.Before we add 2019 DC into existing domain, we should ensure: The minimum requirement to add a Windows Server 2019 Domain Controller is a Windows Server 2008 functional level. The domain also has to use DFS-R as the engine to replicate SYSVOL. 

    2.Before we do any change in existing AD domain environment, we had better do:
    1)Check if AD environment is healthy. Check all DCs in this domain is working fine by running Dcdiag /v. Check if AD replication works properly by running repadmin /showrepl and repadmin /replsum.
    2)Back up all domain controllers.

    3.For migrating DC from lower version to Windows server 2019, the steps below are for your reference:
    1)Add the new Window server 2019 to this existing domain.
    2)Add AD DS and DNS roles and promote this Windows server 2019 as a DC (also as a GC).
    3)Check if AD environment is healthy again.
    4)If AD environment is running fine, we can transfer FSMO roles to new 2019 DC if needed.
    5)Demote old DC if needed after transferring FSMO roles. Before we demote 2012 R2 DC, we should also check:
    If the removed DC was a DNS server, update the DNS client configuration on all member workstations, member servers, and other DCs that might have used this DNS server for name resolution. If it is required, modify the DHCP scope to reflect the removal of the DNS server.
    If the removed DC was a DNS server, update the Forwarder settings and the Delegation settings on any other DNS servers that might have pointed to the removed DC for name resolution.

    Meanwhile, for forest and domain functional level and Exchange version, we can refer to the link “Exchange Server supportability matrix” Dave provided.

    Q2: What would be the ideal method in using the same Server Name for a domain controller that you are replacing?
    A2: Usually, if we have more than two DCs in our domain, if we want to use same hostname and IP for new 2019 DC , as the old DC that we need migrate (such as DC1)  during DC migration.
    1) Check AD health and transfer fsmo roles from one DC that we need migrate (such as DC1) to another DC.
    2) Demote DC1 and shutdown.
    3) Delete the computer object from AD.
    4) Change the hostname and IP address of 2019 , same as DC1 and join to domain.
    5) Promote the win2019 server as DC (DNS server and GC server) and monitor health status.
    6) Transfer fsmo roles to new win2019 DC if needed.

    Q3: What is the ideal method to do this and yet use the same server name without having to demote the new one, change the name, and re-promote it again?
    A3: We can rename domain controller, we must use this renaming method (Netdom command) only if the Domain Controller that you want to rename is your only Domain Controller. If you have multiple domain controllers in your network you should introduce a new Domain Controller, demote the old domain controller and rename it and promote another new domain controller with the old hostname. It is the better way to demote and promote in a more complex situation. Though we can perform a rename of a domain controller (in the situation where there are more than one domain controllers), but it is not recommend.

    We suggest we have at least two DCs in one domain.

    After we rename domain controller, we should update the FRS or DFS replication member object manually.

    For renaming domain controller, we can refer to the following link.
    Rename a Domain Controller Using Netdom
    https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc816601(v=ws.10)?redirectedfrom=MSDN

    For update the FRS or DFS replication member object, we can refer to link below.
    Update the FRS or DFS Replication Member Object
    https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc794759%28v%3dws.10%29

    If we must rename domain controller, we must have a full backup of our domain controller before you perform this procedure and you must know how to perform a disaster recovery if things fail.

    Hope the information above is helpful. If anything is unclear, please feel free to let us know.


    This "Migration" Forum will be migrating to a new home on Microsoft Q&A, please refer to this sticky post for more details. 


    Best Regards,
    Daisy Zhou

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.


    "Migration" forum will be migrating to a new home on Microsoft Q&A!

    We invite you to post new questions in the "Migration"  forum's new home on Microsoft Q&A!

    For more information, please refer to the sticky post.

    Monday, July 20, 2020 9:46 AM
  • Thank you for a very detailed answer to my question. This was most helpful and the type of answer I was looking for. 

    Lonzel Green IT Professional


    • Edited by da3rd Tuesday, July 21, 2020 11:30 AM
    Tuesday, July 21, 2020 11:29 AM
  • Hello,
    Thank you for your update and marking my reply as answer. I’m very glad that the information is helpful.

    As always, if there is any question in future, we warmly welcome you to post in this forum again. We are happy to assist you!

    Best Regards,
    Daisy Zhou

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.


    "Migration" forum will be migrating to a new home on Microsoft Q&A!

    We invite you to post new questions in the "Migration"  forum's new home on Microsoft Q&A!

    For more information, please refer to the sticky post.
    Wednesday, July 22, 2020 1:17 AM