Preparation for Migration testing

Dear all,

I want to copy the production DC to an separate network for migration
testing ( from Windows 2000 to Windows 2008 R2)
Our existing DC is an windows 2000 Server, we don't have Exchange server.

Is it the step like this

1) add a windows 2000 server as the secondary domain controller.
2) create a new global catalog on the second domain controller
3) move the testing 2nd domain controller to separate network
4) change FSMO role the testing domain.
5) Add the windows 2008 R2 server as domain control
6) change FSMO role to the new windows 2008 R2

Questions
1) Is the above step correct?
2) What should be prepared in the Windows 200 server before we join the
windows 2008 machine as a domain controller?
3) One of our vendor suggested that we 1st add a windows 2003 r2 server as
domain controller and then upgrade it to windows 2008 R2. Is it necessary?

Thanks for your help.

Hello TC,

You can do it that way. On the test DC you have to seize the FSMO roles and
then NEVER connet it back with the production domain.
http://support.microsoft.com/kb/255504

On the production domain you have to remove the test DC also from AD database
as you can NEVER connect it back to demote correct, FSMO of course leave
untouched here:
http://support.microsoft.com/kb/555846/en-us

For adding the Windows server 2008 machine see my blog:
http://msmvps.com/blogs/mweber/archi...r-2008-r2.aspx

There is no need to add a Windows server 2003 DC to the domain before.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Dear all,
>
> I want to copy the production DC to an separate network for migration
> testing ( from Windows 2000 to Windows 2008 R2)
> Our existing DC is an windows 2000 Server, we don't have Exchange
> server.
> Is it the step like this
>
> 1) add a windows 2000 server as the secondary domain controller.
> 2) create a new global catalog on the second domain controller
> 3) move the testing 2nd domain controller to separate network
> 4) change FSMO role the testing domain.
> 5) Add the windows 2008 R2 server as domain control
> 6) change FSMO role to the new windows 2008 R2
> Questions
> 1) Is the above step correct?
> 2) What should be prepared in the Windows 200 server before we join
> the
> windows 2008 machine as a domain controller?
> 3) One of our vendor suggested that we 1st add a windows 2003 r2
> server as
> domain controller and then upgrade it to windows 2008 R2. Is it
> necessary?
> Thanks for your help.
>

Thanks a lot for your suggestion.

Our company's client are still main windows XP and windows 2000. May I know
any known issue find already for Windows 2008 R2 and Windows XP (32bit
client).

"Meinolf Weber [MVP-DS]" wrote:

> Hello TC,
>
> You can do it that way. On the test DC you have to seize the FSMO roles and
> then NEVER connet it back with the production domain.
> http://support.microsoft.com/kb/255504
>
> On the production domain you have to remove the test DC also from AD database
> as you can NEVER connect it back to demote correct, FSMO of course leave
> untouched here:
> http://support.microsoft.com/kb/555846/en-us
>
> For adding the Windows server 2008 machine see my blog:
> http://msmvps.com/blogs/mweber/archi...r-2008-r2.aspx
>
> There is no need to add a Windows server 2003 DC to the domain before.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Dear all,
> >
> > I want to copy the production DC to an separate network for migration
> > testing ( from Windows 2000 to Windows 2008 R2)
> > Our existing DC is an windows 2000 Server, we don't have Exchange
> > server.
> > Is it the step like this
> >
> > 1) add a windows 2000 server as the secondary domain controller.
> > 2) create a new global catalog on the second domain controller
> > 3) move the testing 2nd domain controller to separate network
> > 4) change FSMO role the testing domain.
> > 5) Add the windows 2008 R2 server as domain control
> > 6) change FSMO role to the new windows 2008 R2
> > Questions
> > 1) Is the above step correct?
> > 2) What should be prepared in the Windows 200 server before we join
> > the
> > windows 2008 machine as a domain controller?
> > 3) One of our vendor suggested that we 1st add a windows 2003 r2
> > server as
> > domain controller and then upgrade it to windows 2008 R2. Is it
> > necessary?
> > Thanks for your help.
> >
>
>
> .
>

I find in the dcdiag output when I setup prepare the 2nd domain in production
to replicate the DC for testing.

the Kccevent test failed, what wrong? Thanks for help.

Starting test: frssysvol
* The File Replication Service Event log test
The SYSVOL has been shared, and the AD is no longer
prevented from starting by the File Replication Service.
There are errors after the SYSVOL has been shared.
The SYSVOL can prevent the AD from starting.
An Warning Event occured. EventID: 0x800034C4
Time Generated: 04/29/2010 18:12:46
Event String: The File Replication Service is having trouble

enabling replication from adcAD to adcPC06 for

c:\winnt\sysvol\domain using the DNS name

adcAD.masked.loc. FRS will keep retrying.

Following are some of the reasons you would see

this warning.



[1] FRS can not correctly resolve the DNS name

adcAD.masked.loc from this computer.

[2] FRS is not running on

adcAD.masked.loc.

[3] The topology information in the Active

Directory for this replica has not yet replicated

to all the Domain Controllers.



This event log message will appear once per

connection, After the problem is fixed you will

see another event log message indicating that the

connection has been established.
An Warning Event occured. EventID: 0x800034C5
Time Generated: 04/29/2010 18:16:50
Event String: The File Replication Service has enabled

replication from adcAD to adcPC06 for

c:\winnt\sysvol\domain after repeated retries.
......................... adcPC06 passed test frssysvol
Starting test: kccevent
* The KCC Event log test
An Information Event occured. EventID: 0x40000456
Time Generated: 04/29/2010 18:30:37
(Event String could not be retrieved)
......................... adcPC06 failed test kccevent

Hello TC,

They can still operate in a Windows server 2008 domain.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Thanks a lot for your suggestion.
>
> Our company's client are still main windows XP and windows 2000. May I
> know any known issue find already for Windows 2008 R2 and Windows XP
> (32bit client).
>
> "Meinolf Weber [MVP-DS]" wrote:
>
>> Hello TC,
>>
>> You can do it that way. On the test DC you have to seize the FSMO
>> roles and then NEVER connet it back with the production domain.
>> http://support.microsoft.com/kb/255504
>>
>> On the production domain you have to remove the test DC also from AD
>> database
>> as you can NEVER connect it back to demote correct, FSMO of course
>> leave
>> untouched here:
>> http://support.microsoft.com/kb/555846/en-us
>> For adding the Windows server 2008 machine see my blog:
>>
>> http://msmvps.com/blogs/mweber/archi...ding-an-active
>> -directory-domain-from-windows-server-2000-to-windows-server-2008-or-
>> windows-server-2008-r2.aspx
>>
>> There is no need to add a Windows server 2003 DC to the domain
>> before.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Dear all,
>>>
>>> I want to copy the production DC to an separate network for
>>> migration
>>> testing ( from Windows 2000 to Windows 2008 R2)
>>> Our existing DC is an windows 2000 Server, we don't have Exchange
>>> server.
>>> Is it the step like this
>>> 1) add a windows 2000 server as the secondary domain controller.
>>> 2) create a new global catalog on the second domain controller
>>> 3) move the testing 2nd domain controller to separate network
>>> 4) change FSMO role the testing domain.
>>> 5) Add the windows 2008 R2 server as domain control
>>> 6) change FSMO role to the new windows 2008 R2
>>> Questions
>>> 1) Is the above step correct?
>>> 2) What should be prepared in the Windows 200 server before we join
>>> the
>>> windows 2008 machine as a domain controller?
>>> 3) One of our vendor suggested that we 1st add a windows 2003 r2
>>> server as
>>> domain controller and then upgrade it to windows 2008 R2. Is it
>>> necessary?
>>> Thanks for your help.
>> .
>>

Hello TC,

Please post an unedited ipconfig /all from the problem DC and the exisiting
DC/DNS server.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I find in the dcdiag output when I setup prepare the 2nd domain in
> production to replicate the DC for testing.
>
> the Kccevent test failed, what wrong? Thanks for help.
>
> Starting test: frssysvol
> * The File Replication Service Event log test
> The SYSVOL has been shared, and the AD is no longer
> prevented from starting by the File Replication Service.
> There are errors after the SYSVOL has been shared.
> The SYSVOL can prevent the AD from starting.
> An Warning Event occured. EventID: 0x800034C4
> Time Generated: 04/29/2010 18:12:46
> Event String: The File Replication Service is having
> trouble
> enabling replication from adcAD to adcPC06 for
>
> c:\winnt\sysvol\domain using the DNS name
>
> adcAD.masked.loc. FRS will keep retrying.
>
> Following are some of the reasons you would see
>
> this warning.
>
> [1] FRS can not correctly resolve the DNS name
>
> adcAD.masked.loc from this computer.
>
> [2] FRS is not running on
>
> adcAD.masked.loc.
>
> [3] The topology information in the Active
>
> Directory for this replica has not yet replicated
>
> to all the Domain Controllers.
>
> This event log message will appear once per
>
> connection, After the problem is fixed you will
>
> see another event log message indicating that the
>
> connection has been established.
> An Warning Event occured. EventID: 0x800034C5
> Time Generated: 04/29/2010 18:16:50
> Event String: The File Replication Service has enabled
> replication from adcAD to adcPC06 for
>
> c:\winnt\sysvol\domain after repeated retries.
> ......................... adcPC06 passed test frssysvol
> Starting test: kccevent
> * The KCC Event log test
> An Information Event occured. EventID: 0x40000456
> Time Generated: 04/29/2010 18:30:37
> (Event String could not be retrieved)
> ......................... adcPC06 failed test kccevent

from the DC with problem.


Windows 2000 IP Configuration



Host Name . . . . . . . . . . . . : abcpc06
Primary DNS Suffix . . . . . . . : masked.loc
Node Type . . . . . . . . . . . . : Hybrid

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

DNS Suffix Search List. . . . . . : masked.loc

Ethernet adapter Local Area Connection:



Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/100 VM Network Connection
Physical Address. . . . . . . . . : 00-08-02-5A-C2-1D

DHCP Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 192.168.10.67

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.10.2

DNS Servers . . . . . . . . . . . : 192.168.10.67
192.168.10.20
Primary WINS Server . . . . . . . : 192.168.10.20


from the DC/DNS

Windows 2000 IP Configuration



Host Name . . . . . . . . . . . . : abcAD
Primary DNS Suffix . . . . . . . : masked.loc
Node Type . . . . . . . . . . . . : Hybrid

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

DNS Suffix Search List. . . . . . : masked.loc

Ethernet adapter Local Area Connection 2:



Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP NC373i Multifunction Gigabit Server
Adapter #2
Physical Address. . . . . . . . . : 00-1E-0B-D9-C9-C8

DHCP Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 192.168.10.20

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.10.2

DNS Servers . . . . . . . . . . . : 192.168.10.20
Primary WINS Server . . . . . . . : 192.168.10.20






"Meinolf Weber [MVP-DS]" wrote:

> Hello TC,
>
> Please post an unedited ipconfig /all from the problem DC and the exisiting
> DC/DNS server.
>

Dear Meinolf Weber,

I can finally run the dcdiag and netdiag without error. Any thing else I
should be tested before I separate the testing domain controller?

Regards,
TC.

Hello TC,

Run also "repadmin /showrepl dc* /verbose /all /intersite" without the quotes
to control replication.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Dear Meinolf Weber,
>
> I can finally run the dcdiag and netdiag without error. Any thing else
> I should be tested before I separate the testing domain controller?
>
> Regards,
> TC

Hello,

Syntax for repadmin for windows 2000 is difference fromyour example.

http://support.microsoft.com/kb/229896

How could I do the same thing.

>
> .
>

"Meinolf Weber [MVP-DS]" wrote:

> Hello TC,
>
> Run also "repadmin /showrepl dc* /verbose /all /intersite" without the quotes
> to control replication.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Dear Meinolf Weber,
> >
> > I can finally run the dcdiag and netdiag without error. Any thing else
> > I should be tested before I separate the testing domain controller?
> >
> > Regards,
> > TC.
>