Preparation for Migration testing

Output for repadmin /showreps ABCPC06, is it look ok? Can I start separate
the network for migration testing?

Default-First-Site-Name\ABCPC06
DSA Options : IS_GC
objectGuid : 3b171f2e-dd8c-418c-9a11-9079f8553424
invocationID: 3088dbba-324e-4597-9d35-46db53198055

==== INBOUND NEIGHBORS ======================================

CN=Schema,CN=Configuration,DC=masked,DC=loc
Default-First-Site-Name\ABCAD via RPC
objectGuid: 2e122413-24e7-4b70-8619-0d6bceac6357
Address: 2e122413-24e7-4b70-8619-0d6bceac6357._msdcs.masked.loc
ntdsDsa invocationId: a4649009-ad70-4559-aff6-583cf5ab0a1b
WRITEABLE SYNC_ON_STARTUP DO_SCHEDULED_SYNCS
USNs: 485984/OU, 485984/PU
Last attempt @ 2010-05-06 12:56.09 was successful.

CN=Configuration,DC=masked,DC=loc
Default-First-Site-Name\ABCAD via RPC
objectGuid: 2e122413-24e7-4b70-8619-0d6bceac6357
Address: 2e122413-24e7-4b70-8619-0d6bceac6357._msdcs.masked.loc
ntdsDsa invocationId: a4649009-ad70-4559-aff6-583cf5ab0a1b
WRITEABLE SYNC_ON_STARTUP DO_SCHEDULED_SYNCS
USNs: 486046/OU, 486046/PU
Last attempt @ 2010-05-06 13:32.22 was successful.

DC=masked,DC=loc
Default-First-Site-Name\ABCAD via RPC
objectGuid: 2e122413-24e7-4b70-8619-0d6bceac6357
Address: 2e122413-24e7-4b70-8619-0d6bceac6357._msdcs.masked.loc
ntdsDsa invocationId: a4649009-ad70-4559-aff6-583cf5ab0a1b
WRITEABLE SYNC_ON_STARTUP DO_SCHEDULED_SYNCS
USNs: 486070/OU, 486070/PU
Last attempt @ 2010-05-06 13:41.20 was successful.

==== OUTBOUND NEIGHBORS FOR CHANGE NOTIFICATIONS ============

CN=Schema,CN=Configuration,DC=masked,DC=loc
Default-First-Site-Name\ABCAD via RPC
objectGuid: 2e122413-24e7-4b70-8619-0d6bceac6357
Address: 2e122413-24e7-4b70-8619-0d6bceac6357._msdcs.masked.loc
WRITEABLE
Added @ 2010-04-29 18:11.56.

CN=Configuration,DC=masked,DC=loc
Default-First-Site-Name\ABCAD via RPC
objectGuid: 2e122413-24e7-4b70-8619-0d6bceac6357
Address: 2e122413-24e7-4b70-8619-0d6bceac6357._msdcs.masked.loc
WRITEABLE
Added @ 2010-04-29 18:11.56.

DC=masked,DC=loc
Default-First-Site-Name\ABCAD via RPC
objectGuid: 2e122413-24e7-4b70-8619-0d6bceac6357
Address: 2e122413-24e7-4b70-8619-0d6bceac6357._msdcs.masked.loc
WRITEABLE
Added @ 2010-04-29 18:11.55.



"TC" wrote:

> Hello,
>
> Syntax for repadmin for windows 2000 is difference fromyour example.
>
> http://support.microsoft.com/kb/229896
>
> How could I do the same thing.
>
> >
> > .
> >
>
> "Meinolf Weber [MVP-DS]" wrote:
>
> > Hello TC,
> >
> > Run also "repadmin /showrepl dc* /verbose /all /intersite" without the quotes
> > to control replication.
> >
> > Best regards
> >
> > Meinolf Weber
> > Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> > no rights.
> > ** Please do NOT email, only reply to Newsgroups
> > ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >
> >
> > > Dear Meinolf Weber,
> > >
> > > I can finally run the dcdiag and netdiag without error. Any thing else
> > > I should be tested before I separate the testing domain controller?
> > >
> > > Regards,
> > > TC.
> >
>

Hello TC,

The output looks ok for me. So it seems that you can go on.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Output for repadmin /showreps ABCPC06, is it look ok? Can I start
> separate the network for migration testing?
>
> Default-First-Site-Name\ABCPC06
> DSA Options : IS_GC
> objectGuid : 3b171f2e-dd8c-418c-9a11-9079f8553424
> invocationID: 3088dbba-324e-4597-9d35-46db53198055
> ==== INBOUND NEIGHBORS ======================================
>
> CN=Schema,CN=Configuration,DC=masked,DC=loc
> Default-First-Site-Name\ABCAD via RPC
> objectGuid: 2e122413-24e7-4b70-8619-0d6bceac6357
> Address:
> 2e122413-24e7-4b70-8619-0d6bceac6357._msdcs.masked.loc
> ntdsDsa invocationId: a4649009-ad70-4559-aff6-583cf5ab0a1b
> WRITEABLE SYNC_ON_STARTUP DO_SCHEDULED_SYNCS
> USNs: 485984/OU, 485984/PU
> Last attempt @ 2010-05-06 12:56.09 was successful.
> CN=Configuration,DC=masked,DC=loc
> Default-First-Site-Name\ABCAD via RPC
> objectGuid: 2e122413-24e7-4b70-8619-0d6bceac6357
> Address:
> 2e122413-24e7-4b70-8619-0d6bceac6357._msdcs.masked.loc
> ntdsDsa invocationId: a4649009-ad70-4559-aff6-583cf5ab0a1b
> WRITEABLE SYNC_ON_STARTUP DO_SCHEDULED_SYNCS
> USNs: 486046/OU, 486046/PU
> Last attempt @ 2010-05-06 13:32.22 was successful.
> DC=masked,DC=loc
> Default-First-Site-Name\ABCAD via RPC
> objectGuid: 2e122413-24e7-4b70-8619-0d6bceac6357
> Address:
> 2e122413-24e7-4b70-8619-0d6bceac6357._msdcs.masked.loc
> ntdsDsa invocationId: a4649009-ad70-4559-aff6-583cf5ab0a1b
> WRITEABLE SYNC_ON_STARTUP DO_SCHEDULED_SYNCS
> USNs: 486070/OU, 486070/PU
> Last attempt @ 2010-05-06 13:41.20 was successful.
> ==== OUTBOUND NEIGHBORS FOR CHANGE NOTIFICATIONS ============
>
> CN=Schema,CN=Configuration,DC=masked,DC=loc
> Default-First-Site-Name\ABCAD via RPC
> objectGuid: 2e122413-24e7-4b70-8619-0d6bceac6357
> Address:
> 2e122413-24e7-4b70-8619-0d6bceac6357._msdcs.masked.loc
> WRITEABLE
> Added @ 2010-04-29 18:11.56.
> CN=Configuration,DC=masked,DC=loc
> Default-First-Site-Name\ABCAD via RPC
> objectGuid: 2e122413-24e7-4b70-8619-0d6bceac6357
> Address:
> 2e122413-24e7-4b70-8619-0d6bceac6357._msdcs.masked.loc
> WRITEABLE
> Added @ 2010-04-29 18:11.56.
> DC=masked,DC=loc
> Default-First-Site-Name\ABCAD via RPC
> objectGuid: 2e122413-24e7-4b70-8619-0d6bceac6357
> Address:
> 2e122413-24e7-4b70-8619-0d6bceac6357._msdcs.masked.loc
> WRITEABLE
> Added @ 2010-04-29 18:11.55.
> "TC" wrote:
>
>> Hello,
>>
>> Syntax for repadmin for windows 2000 is difference fromyour example.
>>
>> http://support.microsoft.com/kb/229896
>>
>> How could I do the same thing.
>>
>>> .
>>>
>> "Meinolf Weber [MVP-DS]" wrote:
>>
>>> Hello TC,
>>>
>>> Run also "repadmin /showrepl dc* /verbose /all /intersite" without
>>> the quotes to control replication.
>>>
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers
>>> no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>> Dear Meinolf Weber,
>>>>
>>>> I can finally run the dcdiag and netdiag without error. Any thing
>>>> else I should be tested before I separate the testing domain
>>>> controller?
>>>>
>>>> Regards,
>>>> TC.

Thanks Meinolf,

I remove the ABCAD from the testing server ABCPC06 and seize the 5 FSMO roles

Remove ABCAD from domain controller

The below message apprear where I seize RID master. As I one have one DC, I
think I still need to seize it, is it?

The select server is not a direct replication partner of the previous RID
master. It is recommended that only direct replication partners be promoted
to be the RID master



1) run ntdsutil
2) ntdsutil: type "medadata cleanup"
3) metadata cleanup: type "connections"
4) server connections: type "connect to server ABCpc06"
display "Connected to ABCpc06 using credentials of locally logged on user"
5) server connections: type "quit"
6) metadata cleanup: type "select operation target"
7) select operation target: type "list domains"
display...
Found 1 domain(s)
0 - DC=masked,DC=loc
8) select operation target: type "select domain 0"
display...
No current site
Domain - DC=masked,DC=loc
No current server
No current Naming Context
9) select operation target: type "list sites"
Found 1 site(s)
0 - CN=Default-First-Site-Name,CN=sites,CN=Configuration,DC=masked,DC=loc
10) select operation target: type "select site 0"
display...
Found 1 site(s)
Site -
CN=Default-First-Site-Name,CN=sites,CN=Configuration,DC=masked,DC=loc
Domain - DC=masked,DC=loc
No current server
No current Naming Context
11) select operaton target: type "list servers in site"
display...
Found 2 server(s)
0 -
CN=ABCAD,CN=Servers,CN=Default-First-Site-Name,CN=sites,CN=Configuration,DC=masked,DC=loc
1 -
CN=ABCPC06,CN=Servers,CN=Default-First-Site-Name,CN=sites,CN=Configuration,DC=masked,DC=loc
12) select operation target: type "select server 0"
display...
Site -
CN=Default-First-Site-Name,CN=sites,CN=Configuration,DC=masked,DC=loc
Domain - DC=masked,DC=loc
Server -
CN=ABCAD,CN=Servers,CN=Default-First-Site-Name,CN=sites,CN=Configuration,DC=masked,DC=loc
DSA object - CN=NTDS
Settings,CN=ABCAD,CN=Servers,CN=Default-First-Site-Name,CN=sites,CN=Configuration,DC=masked,DC=loc
DNS host name - ABCAD.masked.loc
Computer object - CN=ABCAD, OU=Domain Controllers,DC=masked,DC=loc
NO current Naming Context
13) select operation target: type "quit"
14) metadata cleanup: type "remove selected server"
confirm the remove
15) type "quit" on each menu
display...
Disconnecting from ABCpc06 ...
16) Remove entry for ABCAD from _msdc from DNS
17) run adsiedit.msc
18) Expand Domain NC, Expand DC=masked,DC=loc
19) Expand OU=Domain Controllers
20) Select Property, select "userAccountControl" in "Select aproperty to view.
21) click "Clear", change value to 4096, click "set"
22) Right CN=ABCAD, click delete
23) Expand Domain NC, Expand DC=masked,DC=loc
24) Expand CN=System
25) Expand CN=File Replication Service
26) Expand CN=Domain System Volume (SYSVOL share)
27) Right click "delete"
28) in DNS, right click masked.loc, remove ABCad.masked.loc from Name Servers
29) delete the domain form Active Directory Sites and Services
30) expense sites, Default-First-Site-Name, Server
31) delete the ABCAD


SEIZE fSMO role
1) start cmd, run ntdsutil
2) ntdsutil: type "roles"
3) fsmo maintenance: type "connections"
4) server connections: type "connect to server abcpc06"
display..
Binding to abcpc06 ...
Connected to abcpc06 using credentials of locally logged on user
5) server connections: type "quit"
6) fsmo maintenance: "type "seize domain naming master"
7) fsmo maintenance: "type "seize infrastructure master"
8) fsmo maintenance: "type "seize PDC"
9) fsmo maintenance: "type "seize RID master"
10) fsmo maintenance: "type "seize schema master"





"Meinolf Weber [MVP-DS]" wrote:

> Hello TC,
>
> The output looks ok for me. So it seems that you can go on.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Also, I get the below error


WinMgmt event id 42:
WMI ADAP was unable to create object Win32_PerfRawData_DNS_DNS for
Performance Library DNS because no value was found for property index 2984 in
the 009 subkey

I find 2 issues in the testing server.

1 No WINS server, 2 net time /setsntp is not set. The issue fixed, I can
proceed the migration test.

"TC" wrote:

> Also, I get the below error
>
>
> WinMgmt event id 42:
> WMI ADAP was unable to create object Win32_PerfRawData_DNS_DNS for
> Performance Library DNS because no value was found for property index 2984 in
> the 009 subkey

I get some error after the migration in new server


Event ID: 2092

This server is the owner of the following FSMO role, but does not consider
it valid. For the partition which contains the

FSMO, this server has not replicated successfully with any of its partners
since this server has been restarted. Replication

errors are preventing validation of this role.

Operations which require contacting a FSMO operation master will fail until
this condition is corrected.

FSMO Role: DC=ourdomain,DC=loc


Event ID: 1206
Active Directory Domain Services could not resolve the following DNS host
name of the source domain controller to an IP address. This error prevents
additions, deletions and changes in Active Directory Domain Services from
replicating between one or more domain controllers in the forest. Security
groups, group policy, users and computers and their passwords will be
inconsistent between domain controllers until this error is resolved,
potentially affecting logon authentication and access to network resources.

Source domain controller:
abcpc06 <- old server
Failing DNS host name:
GID._msdcs.ourdomain.loc



The DFS Replication service failed to contact domain controller to access
configuration information. Replication is stopped. The service will try again
during the next configuration polling cycle, which will occur in 60 minutes.
This event can be caused by TCP/IP connectivity, firewall, Active Directory
Domain Services, or DNS issues.


Event ID: 1400
Active Directory Web Services could not find a server certificate with the
specified certificate name. A certificate is

required to use SSL/TLS connections. To use SSL/TLS connections, verify that
a valid server authentication certificate from a

trusted Certificate Authority (CA) is installed on the machine.

Certificate name: sjrpc73.ourdomain.loc


Event ID: 14550

The DFS Namespace service could not initialize cross forest trust
information on this domain controller, but it will

periodically retry the operation. The return code is in the record data.

Make sure the DNS clients are using a common AD DNS server. Post
ipconfig/all if you need confirmation or believe you already have DNS
configured properly.

TC wrote:
> I get some error after the migration in new server
>
>
> Event ID: 2092
>
> This server is the owner of the following FSMO role, but does not
> consider it valid. For the partition which contains the
>
> FSMO, this server has not replicated successfully with any of its
> partners since this server has been restarted. Replication
>
> errors are preventing validation of this role.
>
> Operations which require contacting a FSMO operation master will fail
> until this condition is corrected.
>
> FSMO Role: DC=ourdomain,DC=loc
>
>
> Event ID: 1206
> Active Directory Domain Services could not resolve the following DNS
> host name of the source domain controller to an IP address. This
> error prevents additions, deletions and changes in Active Directory
> Domain Services from replicating between one or more domain
> controllers in the forest. Security groups, group policy, users and
> computers and their passwords will be inconsistent between domain
> controllers until this error is resolved, potentially affecting logon
> authentication and access to network resources.
>
> Source domain controller:
> abcpc06 <- old server
> Failing DNS host name:
> GID._msdcs.ourdomain.loc
>
>
>
> The DFS Replication service failed to contact domain controller to
> access configuration information. Replication is stopped. The service
> will try again during the next configuration polling cycle, which
> will occur in 60 minutes. This event can be caused by TCP/IP
> connectivity, firewall, Active Directory Domain Services, or DNS
> issues.
>
>
> Event ID: 1400
> Active Directory Web Services could not find a server certificate
> with the specified certificate name. A certificate is
>
> required to use SSL/TLS connections. To use SSL/TLS connections,
> verify that a valid server authentication certificate from a
>
> trusted Certificate Authority (CA) is installed on the machine.
>
> Certificate name: sjrpc73.ourdomain.loc
>
>
> Event ID: 14550
>
> The DFS Namespace service could not initialize cross forest trust
> information on this domain controller, but it will
>
> periodically retry the operation. The return code is in the record
> data.

--
/kj