Windows Server 2003 domain control migrated directly to the 2012[history of the most detailed]

Windows Server 2003 domain control migrated directly to the 2012[history of the most detailed]

If you have any questions, please contact qq:185426445, or add group Microsoft Unified Communications China (a), Group No.: 222630797, can also contact me, Mobile: 18666943750, non-sincere do not Disturb, thank you!

Environment Introduction:

First of all, my environment, the experimental environment is relatively simple. You already have domain control for Windows Server 2003 in your environment. Domain name is contoso.com

System	Service	Host Name	IP Address
Windows Server 2003 R2	Main Ad,fsmo Five role host and GC	Win2003	192.168.1.50
Windows Server X64	Upgrading the target server	Win2012	192.168.1.51

1. win2012 Plus domain contoso.com

650) this.width=650; "height=" 598 "title=" clip_image001 "style=" border:0px; "alt=" clip_image001 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090797rq80.png "border=" 0 "/>

2. After the win2012 is restarted, install the Ad Role management tool

650) this.width=650; "height=" 487 "title=" clip_image003 "style=" border:0px; "alt=" clip_image003 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090800lhfr.jpg "border=" 0 "/>

3, installation, after a brief few minutes, the installation is complete.

650) this.width=650; "height=" 449 "title=" clip_image005 "style=" border:0px; "alt=" clip_image005 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_13990908020yne.jpg "border=" 0 "/>

4, after the installation is complete, we are going to expand the ad, it is noted that Win2003 is a 32-bit system, can not use the 64-bit command to execute the domain extension command, so I loaded Windows Server 2012 CD-ROM to the Win2012 server, Use the command to navigate to the Adprep directory, move the command prompt to the Support/adprep directory on the D-Disk, and upgrade the 2003 AD schema forest schema;

Input Adprep.exe/forestprep

650) this.width=650; "height=" 419 "title=" clip_image007 "style=" border:0px; "alt=" clip_image007 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090804gpqm.jpg "border=" 0 "/>

5, we are prompted to ensure that the forest schema and domain schema for Windows Server 2003 or later, and then switch to the Win2003 server, the forest schema and domain schema promotion. In AD domains and trust relationships, right-click domain names, and raise the domain functional level to Windows Server 2003 mode.

650) this.width=650; "height=" 374 "title=" clip_image009 "style=" border:0px; "alt=" clip_image009 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090807vv9s.jpg "border=" 0 "/>

6. In the right-click Domain and trust relationship, select raise forest functional level for Windows Server 2003

650) this.width=650; "height=" 488 "title=" clip_image011 "style=" border:0px; "alt=" clip_image011 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090809uonc.jpg "border=" 0 "/>

7, return to win2012, continue the forest schema extension adprep.exe/forestprep, press C to continue, waiting for the extension to complete.

650) this.width=650; "height=" 426 "title=" clip_image013 "style=" border:0px; "alt=" clip_image013 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090813h4fa.jpg "border=" 0 "/>

8, Upgrade 2003 AD schema domain schema; adprep.exe/domainprep

650) this.width=650; "height=" 430 "title=" clip_image015 "style=" border:0px; "alt=" clip_image015 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_13990908167yzm.jpg "border=" 0 "/>

9. Update Group Policy object permissions; adprep.exe/domainprep/gpprep

650) this.width=650; "height=" 432 "title=" clip_image017 "style=" border:0px; "alt=" clip_image017 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090818ulvg.jpg "border=" 0 "/>

10, update the AD to the RODC read-only domain controller support; adprep.exe/rodcprep

650) this.width=650; "height=" 438 "title=" clip_image019 "style=" border:0px; "alt=" clip_image019 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090821hxq6.jpg "border=" 0 "/>

11, to the ad's forest and domain schema upgrade success, next to the Win2012 upgrade domain control, continue the previous steps, click on this server promoted to a domain controller.

650) this.width=650; "height=" 482 "title=" clip_image021 "style=" border:0px; "alt=" clip_image021 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090824fwh7.jpg "border=" 0 "/>

12, in the Deployment configuration page we can see the current server FQDN and current domain name and the current user. If you want to change it, click Make changes after the corresponding item. We remain here by default and click Next to continue.

650) this.width=650; "height=" 507 "title=" clip_image023 "style=" border:0px; "alt=" clip_image023 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090826vela.jpg "border=" 0 "/>

13, Next, we can see a warning message, click View Details, prompt if you need to deploy a read-only domain control requires Windows Server 2008, 2008R2, or 2012 domain control, because we are installing a secondary domain control is not a separate read-only domain control, so this warning can be ignored.

650) this.width=650; "height=" 513 "title=" clip_image025 "style=" border:0px; "alt=" clip_image025 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090828kcda.jpg "border=" 0 "/>

14, Next, there is a warning message, unable to create a DNS server delegation, because the current server is not installed DNS caused by the subsequent check automatically installed, continue to the next step.

650) this.width=650; "height=" 517 "title=" clip_image027 "style=" border:0px; "alt=" clip_image027 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090830my51.jpg "border=" 0 "/>

15. Specify the domain from which to copy the information. The current environment has only one Win2003 domain controller, you can choose Win2003, or you can keep the default----installed from any domain controller, here I keep the default, next, continue.

650) this.width=650; "height=" 521 "title=" clip_image029 "style=" border:0px; "alt=" clip_image029 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090832pt6w.jpg "border=" 0 "/>

16, database and other folder save location, default, next.

650) this.width=650; "height=" 523 "title=" clip_image031 "style=" border:0px; "alt=" clip_image031 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090834eipp.jpg "border=" 0 "/>

17. Display all of your options settings, make sure to click Next to continue without error.

650) this.width=650; "height=" 531 "title=" clip_image033 "style=" border:0px; "alt=" clip_image033 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090836tcuu.jpg "border=" 0 "/>

18. All inspection conditions have been passed, click Install.

650) this.width=650; "height=" 529 "title=" clip_image035 "style=" border:0px; "alt=" clip_image035 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090839r8ro.jpg "border=" 0 "/>

19, after installation, automatically restart the computer.

650) this.width=650; "height=" 448 "title=" clip_image037 "style=" border:0px; "alt=" clip_image037 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_13990908427gyx.jpg "border=" 0 "/>

20, after re-win2012, open AD Users and computers, right--contoso.com, operation of the host.

650) this.width=650; "height=" 517 "title=" clip_image039 "style=" border:0px; "alt=" clip_image039 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090844cg9f.jpg "border=" 0 "/>

21. Change the RID, PDC, and infrastructure in turn.

650) this.width=650; "height=" 619 "title=" clip_image041 "style=" border:0px; "alt=" clip_image041 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_13990908476jup.jpg "border=" 0 "/>

22. Open the domain and trust relationship and right----the operations master.

650) this.width=650; "height=" 539 "title=" clip_image043 "style=" border:0px; "alt=" clip_image043 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_13990908486bd8.jpg "border=" 0 "/>

23, make changes to the domain naming master, click Change, the domain naming master has switched smoothly from Win2003 to the win2012 server.

650) this.width=650; "height=" 543 "title=" clip_image045 "style=" border:0px; "alt=" clip_image045 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090851hvhn.jpg "border=" 0 "/>

24, in the WIN2012 server, click to start Running, (note: I here to win2012 Server installed a Start menu plugin) or directly bring up the command line tool, input: regsvr32 schmmgmt.dll.

650) this.width=650; "height=" 490 "title=" clip_image046 "style=" border:0px; "alt=" clip_image046 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090854d1sw.png "border=" 0 "/>

25, in the Run window input MMC, bring up the console management tool, click on the file---Add Delete snap-in, add AD schema.

650) this.width=650; "height=" 524 "title=" clip_image048 "style=" border:0px; "alt=" clip_image048 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090856hljd.jpg "border=" 0 "/>

26. Right-click----AD schema and select Change AD domain controller.

650) this.width=650; "height=" 528 "title=" clip_image050 "style=" border:0px; "alt=" clip_image050 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090858oocr.jpg "border=" 0 "/>

27, select win2012 Server, click OK, make changes to the current connected directory server Win2003.

650) this.width=650; "height=" 526 "title=" clip_image052 "style=" border:0px; "alt=" clip_image052 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090860ihms.jpg "border=" 0 "/>

28, continue to select the AD schema, we note that it is now connected to the WIN2012 server, click on the operation of the host.

650) this.width=650; "height=" 530 "title=" clip_image054 "style=" border:0px; "alt=" clip_image054 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_13990908639v58.jpg "border=" 0 "/>

29. Click Change so that the schema master is transferred from Win2003 to the win2012 server.

650) this.width=650; "height=" 530 "title=" clip_image056 "style=" border:0px; "alt=" clip_image056 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090865mftm.jpg "border=" 0 "/>

30, open the ad Site and services, select Win2003, cancel the WIN2003 Server global catalog functionality, because our ultimate goal is to take the Win2003 server back to the domain, so do not assume any role.

650) this.width=650; "height=" 671 "title=" clip_image058 "style=" border:0px; "alt=" clip_image058 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090868xbsh.jpg "border=" 0 "/>

31. After the change, refresh the status and see that our win2003 role has changed from GC to DC.

650) this.width=650; "height=" 527 "title=" clip_image060 "style=" border:0px; "alt=" clip_image060 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090870i1c0.jpg "border=" 0 "/>

32. In the Command Line window, we enter NETDOM query FSMO to see that our roles have been changed in order to win2012.contoso.com.

650) this.width=650; "height=" 530 "title=" clip_image062 "style=" border:0px; "alt=" clip_image062 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090872e0vl.jpg "border=" 0 "/>

33, we try to prompt the next domain functional level to Windows Server 2012, the prompt domain has the Windows Server 2003 version of the domain control exists, next we put Win2003 domain control fallback domain.

650) this.width=650; "height=" 550 "title=" clip_image063 "style=" border:0px; "alt=" clip_image063 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090876xnej.png "border=" 0 "/>

34, Win2003 Retreat process, long waiting ...

650) this.width=650; "height=" 563 "title=" clip_image064 "style=" border:0px; "alt=" clip_image064 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090880venv.png "border=" 0 "/>

35, click Finish, so Win2003 downgrade in order to domain member server, according to prompts us to restart the Win2003 server.

650) this.width=650; "height=" 578 "title=" clip_image065 "style=" border:0px; "alt=" clip_image065 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090885px9d.png "border=" 0 "/>

36, the Win2003 and win2012 DNS server preferred address is changed to win2012 IP, this is our latest 2012 domain-controlled IP address. (Note: If the DNS address of the win2003 is not changed, we find that the process of login is very slow, this is due to the problem of the cache, we can find that the login process is very fast after we change the DNS point to the latest win2012)

650) this.width=650; "height=" 537 "title=" clip_image066 "style=" border:0px; "alt=" clip_image066 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_13990908896oo0.png "border=" 0 "/>

37, verify that we add the domain is normal, and whether the currently added computer logon is not affected. We restart the win2012 server first, and then rename the Win2003 computer back to test and re-add the domain, using the account ceshi1 normal login.

650) this.width=650; "height=" "title=" clip_image068 "style=" border:0px; "alt=" clip_image068 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090890059i.jpg "border=" 0 "/>

38, the basic steps have been completed, the client is also logged in normally, we check the latest Windows Server 2012 domain control information is accurate. Right button win2012, forwarder or the original 192.168.1.50 server, here we delete it, if you need to resolve to the external network, we can fill out our local DNS server address, I here to fill in the DNS of Guangdong, 202.96.128.166,202.96.134.133.

650) this.width=650; "height=" 455 "title=" clip_image070 "style=" border:0px; "alt=" clip_image070 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090893egnl.jpg "border=" 0 "/>

39, right-contoso.com, the starting authority shows the latest is the latest win2012, the name server option will Win2003 records to be deleted.

650) this.width=650; "height=" 617 "title=" clip_image072 "style=" border:0px; "alt=" clip_image072 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090896sdoc.jpg "border=" 0 "/>

40, right-_msdcs.contoso.com, the starting authority shows the latest is the latest win2012, the name server option will Win2003 records to be deleted.

650) this.width=650; "height=" 626 "title=" clip_image074 "style=" border:0px; "alt=" clip_image074 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090899vinl.jpg "border=" 0 "/>

41, right-click Reverse Lookup zone, the starting authority shows the latest is the latest win2012, the name server option will Win2003 records are deleted, and the location of the IP address is changed to correct.

650) this.width=650; "height=" 628 "title=" clip_image076 "style=" border:0px; "alt=" clip_image076 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090902n2ib.jpg "border=" 0 "/>

42. Restart the DNS server after the change.

650) this.width=650; "height=" 561 "title=" clip_image078 "style=" border:0px; "alt=" clip_image078 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090904lsrz.jpg "border=" 0 "/>

43, the ad site and service inside delete win2003 server.

650) this.width=650; "height=" 529 "title=" clip_image080 "style=" border:0px; "alt=" clip_image080 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_1399090906evia.jpg "border=" 0 "/>

44. At the same time, we also notice that the WIN2012 DNS server has a newly added test computer record.

650) this.width=650; "height=" 535 "title=" clip_image082 "style=" border:0px; "alt=" clip_image082 "src=" http:/ Img1.51cto.com/attachment/201405/3/1173839_13990909080ieh.jpg "border=" 0 "/>

At this point, win2003 to win2012 the domain upgrade step has been completed, thank you! If you have any questions, please contact qq:185426445, or add group Microsoft Unified Communications China (a), Group No.: 222630797, can also contact me, Mobile: 18666943750, non-sincere do not Disturb, thank you!

This article is from the "Zhou Ping Microsoft Unified Communications" blog, please be sure to keep this source http://1183839.blog.51cto.com/1173839/1405716