Developer Forum

So I have a windows 2000 domain controller with a single label domain
name.
Nobody uses it as a domain controller, just to access shares stored on
it.
but now we need to migrate it to windows 2008 and make it work like a
domain controller without loosing the user passwords and share
permissions. (all users have accounts on it, they just type their
passwords when accessing shares).

I tried to add a secondary domain controller with windows 2008 to it
and wanted to rename it later. but even after transfering all the roles
to it it didn't work.
Tried to follow this article:
http://www.yqcomputer.com/ ;en-us;300684
about working with single domains. But that broke my DNS server, it
won't start anymore. and doesn't start after reverting the changes
also.

dcdiag says that Global Catalog, PDC, and KDC could not be found. The
DNS zone was active directory integrated.

I do have backups, so I could try to do this again if I can find out
where did I go wrong an what precautions should I take next time.

THenks.


--
zux
------------------------------------------------------------------------
zux's Profile: http://www.yqcomputer.com/
View this thread: http://www.yqcomputer.com/

http://www.yqcomputer.com/

Hello zux,

Please describe in detail what you have done when adding the new 2008 DC
to the domain. additional post an unedited ipconfig /all from both machines.
Run dcdiag /v, netdiag /v, repadmin /showrepl and post the results here.
If you have not installed the support tools do it form the 2000 install disk
support\tools\suptools.msi on the 2000 DC. For the 2008 except the netdiag
command are builtin. You can just copy the netdia.exe to the 2008 DC, will
also work there.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.yqcomputer.com/

Since I have taken the backup up so that users can access their shares.
I can't run those commands on the win 2000 box. gonna try that later.
I managed to fix the DNS server not starting by reinstalling that role.
AD is my win 2008 box and server1 is the old win2000

I downloaded netdiag from microsoft but couldn't run it
it ended with error:
procedure entry point DnsGetPrimaryDomainName_UTF8 could not be located
in DNSAPI.dll

also is it ok that I cannot nslookup the domain name just by the name?
it's a single label name. I can find any hosts in it but not the domain
name itself.


***
edit:
server1 is down right now. should I remove it from AD? I will only be
able to boot it in the evening


+-------------------------------------------------------------------+
|Filename: dcdiag.txt |
|Download: http://www.yqcomputer.com/ |
+-------------------------------------------------------------------+

--
zux
------------------------------------------------------------------------
zux's Profile: http://www.yqcomputer.com/
View this thread: http://www.yqcomputer.com/

http://www.yqcomputer.com/

Hello zux,

For the tools i told you where you can find them.

Please post an unedited ipconfig /all from both machines.

I would not remove the old server from the domain, FIRST you have to fix
the errors. After all errors fixed remove the 2008 DC again and create a
new domain with the correct name PATAB.COM for example. Then you have to
use ADMTv3.1 to migrate the users/groups/computers to the new correct domain.

Another way is to rename a domain, but this requires to remove the 2000 DC.

Again please describe all steps you have done, so that we can fix FIRST your
errors and get the domain with now both DC's up and running.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.yqcomputer.com/

well first i added the win 2008 computer tu the domain and then promoted
it to be DC with dcpromo
Installed dns
enabled global catalog on the win 2008 box
manually triggered replication and disabled global catalog on the old
DC
then moved the roles (infrastructure, pdc, rid, schema, naming) to the
new computer.
that's when I started getting these errors.


+-------------------------------------------------------------------+
|Filename: ipconfig.txt |
|Download: http://www.yqcomputer.com/ |
+-------------------------------------------------------------------+

--
zux
------------------------------------------------------------------------
zux's Profile: http://www.yqcomputer.com/
View this thread: http://www.yqcomputer.com/

http://www.yqcomputer.com/

Hello zux,

See inline.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.yqcomputer.com/


Did you point during this step to the 2000 DNS as preferred DNS on the NIC
only?


What kind of DNS zones are you using?

Did you point during this step to the 2000 DNS as preferred DNS on the NIC
only?


How long did you wait for disabling the GC? Replication normally starts automatically
after promoting the new DC.


Please post also the ipconfig /all from the other machine.

yes. is there any other place to do that?
and after enabling dns on this machine I changed that to his own
address




well, not very long, I was looking at the properties of the DC and when
it didn't say nothing about how long it would take to replicate I
demoted the old DC.
At first is said somthing about how long it can take to replicate.

That machine is down now. But DNS server was pointing at itself.


--
zux
------------------------------------------------------------------------
zux's Profile: http://www.yqcomputer.com/
View this thread: http://www.yqcomputer.com/

http://www.yqcomputer.com/

Hello zux,

To get you correct. The old DC is demoted with running dcpromo on it?

Does the demotion run correctly and the old DC is removed from ADUC in the
DC's OU?

The 2008 has all FSMO roles and is DNS/GC.

What kind of zones can you see in DNS management console?

Are the zones AD integrated?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.yqcomputer.com/

no, it's offline, and I cannot switch it on now.


yes


one zone with the same name as domain, AD integrated.
strange thing that if I show that server as my DNS server on other
computers, it does resolv the domain name with a dot in the end, but not
without it. like "domain." but not "domain"


--
zux
------------------------------------------------------------------------
zux's Profile: http://www.yqcomputer.com/
View this thread: http://www.yqcomputer.com/

http://www.yqcomputer.com/

Hello zux,

Well, you can do it 2 ways now. Leave the old DC disconnected from the network
and just cleanup the metadata from AD, so that it is removed forever, that's
means NEVER connect it again to the domain without reinstalling. Or you bring
it online again and try to demote it with dcpromo and remove it that way.
Ofcourse you have to think about data that has to be copied to the 2008 server.
When the 2000 DC is removed from AD you can do a domain rename, which is
supported on 2003/2008 with the rendom command.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.yqcomputer.com/

I think I'll go for the Migration tool.
The reason I did'nt use it was 3.0 not working on 2008, but thanks to
you I found out about 3.1 wich does
Thanks for the help


--
zux
------------------------------------------------------------------------
zux's Profile: http://www.yqcomputer.com/
View this thread: http://www.yqcomputer.com/

http://www.yqcomputer.com/