Upgrade Windows 2003 domain controllers to Windows R2

because Windows 2003 include R2 the extended support in this year 7 Month - Day will expire. If an expensive service agreement is not signed with Microsoft before the end of the expansion cycle, then no patches or technical support will be available for the system.

I have two test machines here for this experiment. One Windows 2003 R2and the other one is Windows R2. Both the old forest functional level and the domain functional level are Windows 2003.

First, we'll log in first. Windows 2003 machine to view the current schema version. Run adsiedit.msc expand to the schema partition to view the objectversion properties of the current domain . Here is the schema of 2003 R2 .

this article KB describes how to view and some of the values corresponding to the version.

http://support.microsoft.com/kb/558112

650) this.width=650; "title=" 1.jpg "src=" Http://s3.51cto.com/wyfs02/M01/5B/2D/wKioL1UBWw3SF_jlAAKO4zsCokw900.jpg " alt= "Wkiol1ubww3sf_jlaako4zscokw900.jpg"/>

in the Windows R2 installed on the server DNS and the Active Directory Domain Service these two roles. Install it later and then upgrade it to a domain controller in server management. I have added it to the domain before, in fact, plus or no can be promoted into a domain controller.

650) this.width=650; "title=" 2.jpg "src=" Http://s3.51cto.com/wyfs02/M02/5B/33/wKiom1UBWfqjnljyAADouzQKoPQ372.jpg " alt= "Wkiom1ubwfqjnljyaadouzqkopq372.jpg"/>

Select Add domain controller to an existing domain.

650) this.width=650; "title=" 3.jpg "src=" Http://s3.51cto.com/wyfs02/M02/5B/33/wKiom1UBWgmRA1yxAAIDxON9z44676.jpg " alt= "Wkiom1ubwgmra1yxaaidxon9z44676.jpg"/>

and then there was a hint that there was no discovery . - domain controller, you cannot install a read-only domain controller. However, we are not involved in the RODChere.

650) this.width=650; "title=" 4.jpg "src=" Http://s3.51cto.com/wyfs02/M01/5B/33/wKiom1UBWhfipQJCAAK8fh0msdA188.jpg " alt= "Wkiom1ubwhfipqjcaak8fh0msda188.jpg"/>

Next down DNS Zone creation has a delegation warning, which is described in detail in an article. But in the end, when we check the DNS zone, we can see that the DNS zone is also replicated and loaded properly.

https://technet.microsoft.com/en-us/library/cc754463 (v=ws.10). aspx

650) this.width=650; "title=" 5.jpg "src=" Http://s3.51cto.com/wyfs02/M00/5B/33/wKiom1UBWimxfwZyAALPj2xxPGA755.jpg " alt= "Wkiom1ubwimxfwzyaalpj2xxpga755.jpg"/>

you can choose which domain controller to copy from, or you can use the IFM . IFM is suitable for large environments and slow network conditions.

650) this.width=650; "title=" 6.jpg "src=" Http://s3.51cto.com/wyfs02/M01/5B/33/wKiom1UBWjijeVIuAAGvQFRzOQU357.jpg " alt= "Wkiom1ubwjijeviuaagvqfrzoqu357.jpg"/>

650) this.width=650; "title=" 7.jpg "src=" Http://s3.51cto.com/wyfs02/M02/5B/33/wKiom1UBWk6zcQ-YAAHE056X8n4785.jpg " alt= "Wkiom1ubwk6zcq-yaahe056x8n4785.jpg"/>

Then there are some steps to check and summarize.

650) this.width=650; "title=" 8.jpg "src=" Http://s3.51cto.com/wyfs02/M00/5B/2D/wKioL1UBW3qjio1vAAGSL7OnqEs234.jpg " alt= "Wkiol1ubw3qjio1vaagsl7onqes234.jpg"/>

you can see the information for raising the domain control here. You can save the content as a TXT document. Saved can be used in the future using the core installation of the system to upgrade domain control, or to make a reference.

650) this.width=650; "title=" 9.jpg "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M00/5B/2E/ Wkiol1ubw43ivanxaajunjphgr4256.jpg "alt=" Wkiol1ubw43ivanxaajunjphgr4256.jpg "/>

650) this.width=650; "title=" 10.jpg "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M00/5B/33/ Wkiom1ubwm3c6vftaaov8hjwzva023.jpg "alt=" Wkiom1ubwm3c6vftaaov8hjwzva023.jpg "/>

Finally, the upgrade completes, restart the server.

650) this.width=650; "title=" 11.jpg "src=" http://s3.51cto.com/wyfs02/M01/5B/33/wKiom1UBWn-C11ohAAMeM4BoCbg720.jpg "alt=" Wkiom1ubwn-c11ohaamem4bocbg720.jpg "/>

Let's take a look at the schema version, which has been upgraded to the . There is no need to extend the schema specifically when upgrading Windows R2 domain control. The system will automatically complete the schema extension.

650) this.width=650; "title=" 12.jpg "src=" http://s3.51cto.com/wyfs02/M00/5B/2E/wKioL1UBW6_RtDP6AAKXjVKo-ic611.jpg "alt=" Wkiol1ubw6_rtdp6aakxjvko-ic611.jpg "/>

Check the new server for DNS .

650) this.width=650; "title=" 13.jpg "src=" http://s3.51cto.com/wyfs02/M00/5B/33/wKiom1UBWp3BzLaYAADA6aghvSg846.jpg "alt=" Wkiom1ubwp3bzlayaada6aghvsg846.jpg "/>

Manually add FSMO The role is transferred to the new server. RIDs, PDC, Infrastructure master are viewed in Active Directory Users and Computers.

650) this.width=650; "title=" 14.jpg "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M01/5B/33/ Wkiom1ubwrhzshh0aafev0ipll8465.jpg "alt=" Wkiom1ubwrhzshh0aafev0ipll8465.jpg "/>

650) this.width=650; "title=" 15.jpg "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M01/5B/2E/ Wkiol1ubw9hxhho6aaenp2ixviu476.jpg "alt=" Wkiol1ubw9hxhho6aaenp2ixviu476.jpg "/>

Domain naming Master view in Active Directory Domains and Trusts.

650) this.width=650; "title=" 16.jpg "src=" http://s3.51cto.com/wyfs02/M02/5B/2E/wKioL1UBW-CgAeWcAAEgcvDDf5U753.jpg "alt=" Wkiol1ubw-cgaewcaaegcvddf5u753.jpg "/>

Schema Master need to register DLL file, and then manually MMC can be viewed by adding a snap-in.

650) this.width=650; "title=" 17.jpg "src=" http://s3.51cto.com/wyfs02/M02/5B/33/wKiom1UBWtDg_SPmAACEnwC0-Ms420.jpg "alt=" Wkiom1ubwtdg_spmaacenwc0-ms420.jpg "/>

Note that the default connected domain controller is still the old one.

650) this.width=650; "title=" 18.jpg "src=" http://s3.51cto.com/wyfs02/M02/5B/33/wKiom1UBWuHTOh-JAAGIfZY2YTE852.jpg "alt=" Wkiom1ubwuhtoh-jaagifzy2yte852.jpg "/>

You need to manually connect to the new domain control. And then transfer the role.

650) this.width=650; "title=" 19.jpg "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M00/5B/2E/wKioL1UBXBSS7_ 63aaeunx__3uy775.jpg "alt=" Wkiol1ubxbss7_63aaeunx__3uy775.jpg "/>

650) this.width=650; "title=" 20.jpg "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M00/5B/2E/ Wkiol1ubxbss7zooaagk1pruoec506.jpg "alt=" Wkiol1ubxbss7zooaagk1pruoec506.jpg "/>

Check it out. GC whether it is configured, it has been selected when the domain control is raised, let's check it again.

650) this.width=650; "title=" 21.jpg "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M01/5B/2E/ Wkiol1ubxe7teifaaag-mevs6zw968.jpg "alt=" Wkiol1ubxe7teifaaag-mevs6zw968.jpg "/>

650) this.width=650; "title=" 22.jpg "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M01/5B/33/ Wkiom1ubwy6gomxbaaeboryy_ao496.jpg "alt=" Wkiom1ubwy6gomxbaaeboryy_ao496.jpg "/>

The new domain-controlled DNS change it into your own. IP , because, I'm going to downgrade the old domain control immediately.

Last Run Dcpromo command.

650) this.width=650; "title=" 23.jpg "src=" http://s3.51cto.com/wyfs02/M02/5B/2E/wKioL1UBXGWRDXxLAAGMLDOifec556.jpg "alt=" Wkiol1ubxgwrdxxlaagmldoifec556.jpg "/>

Remind you that you need to make sure that there are other global catalogs available after this domain-controlled demotion.

650) this.width=650; "title=" 24.jpg "src=" http://s3.51cto.com/wyfs02/M00/5B/2E/wKioL1UBXHfiUQafAAC_AmBVkLs287.jpg "alt=" Wkiol1ubxhfiuqafaac_ambvkls287.jpg "/>

650) this.width=650; "title=" 25.jpg "src=" http://s3.51cto.com/wyfs02/M00/5B/34/wKiom1UBW4KAf2zoAAHOnDwXp1I583.jpg "alt=" Wkiom1ubw4kaf2zoaahondwxp1i583.jpg "/>

Set the local administrator password. Because it becomes a client in the domain. If you previously selected this to be the last domain control, it becomes a computer in the workgroup.

650) this.width=650; "title=" 26.jpg "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M01/5B/2E/ Wkiol1ubxlbchtbiaadpewisby4085.jpg "alt=" Wkiol1ubxlbchtbiaadpewisby4085.jpg "/>

650) this.width=650; "title=" 27.jpg "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M00/5B/34/ Wkiom1ubw5bdnjglaaelvs61c5i376.jpg "alt=" Wkiom1ubw5bdnjglaaelvs61c5i376.jpg "/>

Start using the eraser on the back of the pencil to erase something, and the promotion is written

650) this.width=650; "title=" 28.jpg "src=" http://s3.51cto.com/wyfs02/M01/5B/2E/wKioL1UBXMrj-YkyAACx9GFLs2E736.jpg "alt=" Wkiol1ubxmrj-ykyaacx9gfls2e736.jpg "/>

Finally, the downgrade is complete. The entire upgrade process after the restart.

650) this.width=650; "title=" 29.jpg "src=" http://s3.51cto.com/wyfs02/M01/5B/34/wKiom1UBW7bykFopAAFG7tl3Bpk708.jpg "alt=" Wkiom1ubw7bykfopaafg7tl3bpk708.jpg "/>

Remember to put all the client's DNS change to a new domain-controlled address, otherwise the domain control will not be contacted.

Upgrading Windows 2003 domain controllers to Windows R2