{"id":12377,"date":"2015-04-29T10:00:00","date_gmt":"2015-04-29T08:00:00","guid":{"rendered":"http:\/\/nolabnoparty.com\/?p=12377"},"modified":"2015-05-13T12:01:43","modified_gmt":"2015-05-13T10:01:43","slug":"migrate-active-directory-to-windows-2012-r2-pt-1","status":"publish","type":"post","link":"https:\/\/nolabnoparty.com\/en\/migrate-active-directory-to-windows-2012-r2-pt-1\/","title":{"rendered":"Migrate Active Directory to Windows 2012 R2 - pt. 1"},"content":{"rendered":"

\"upgradeadto2012versionpt1_01\"<\/p>\n

Migrating Active Directory to Windows 2012 R2, all Domain Controllers have to be migrated to Server version 2012 R2 following a specific procedure.<\/p>\n

The Domain Controllers to migrate are installed with Windows Server 2008 R2<\/strong>\u00a0and before begin the procedure, check\u00a0you have a full working backup of your environment.<\/p>\n

<\/p>\n

 <\/p>\n

Blog series<\/h2>\n

Migrate Active Directory to Windows 2012 R2 - pt. 1
\nMigrate Active Directory to Windows 2012 R2 - pt.\u00a02<\/a>
\nMigrate Active Directory to Windows 2012 R2 - pt.\u00a03<\/a><\/p>\n

 <\/p>\n

Check Domain Controllers health status<\/h2>\n

Before starting the migration, check DCs health status in order to be sure that current configuration is working<\/strong>\u00a0with no issues.<\/p>\n

To check DCs you can use a simple script to\u00a0stores the results into files<\/strong>\u00a0to be further analyzed.<\/p>\n

@echo off\r\ncls\r\necho.\r\necho ---------------------------\r\necho Test ACTIVE DIRECTORY\r\necho ---------------------------\r\necho.\r\necho.\r\necho Testing DNS\r\necho ---------------------------\r\ndcdiag \/TEST:DNS \/v >> c:\\temp\\ad01_dns.txt\r\n\r\necho.\r\necho.\r\necho Testing DHCP\r\necho ---------------------------\r\nnetsh dhcp show server >> c:\\temp\\ad02_dhcp.txt\r\n\r\necho.\r\necho.\r\necho Testing Domain Controllers\r\necho ---------------------------\r\ndcdiag \/a \/v \/c >> c:\\temp\\ad03_dc.txt\r\n\r\necho.\r\necho.\r\necho Testing Replica\r\necho ---------------------------\r\nrepadmin \/showrepl >> c:\\temp\\ad04_replica.txt\r\n\r\necho.\r\necho.\r\necho Replica Summary\r\necho ---------------------------\r\nrepadmin \/replsummary >> c:\\temp\\ad05_replica_sum.txt\r\n\r\necho.\r\necho.\r\necho Show Replica Errors\r\necho ---------------------------\r\nrepadmin \/replsum \/errorsonly >> c:\\temp\\ad06_replica_err.txt\r\nrepadmin \/options * >> c:\\temp\\ad07_replica_opt.txt\u00a0\r\n\r\npause\r\nexit<\/pre>\n
How results\u00a0are displayed running the commands\u00a0from the Command Prompt.<\/p>\n
\"upgradeadto2012versionpt1_01a\"<\/p>\n
If the tests don't detect any error, the migration can safely begin.<\/p>\n
 <\/p>\n
Prepare Active Directory Schema<\/h2>\n
From one of your Domain Controller mount the Server 2012 R2<\/strong> installation disc using the VMware Web Client.<\/p>\n
\"upgradeadto2012versionpt1_02\"<\/p>\n
Select the Windows Server 2012 R2 installation media then click OK<\/strong>.<\/p>\n
\"upgradeadto2012versionpt1_03\"<\/p>\n
Enable the connection to the CD<\/strong> for\u00a0the Domain Controller then click OK<\/strong>.<\/p>\n
\"upgradeadto2012versionpt1_04\"<\/p>\n
From the Domain Controller, check the Windows Server 2012 R2 installation media is accessible<\/strong>.<\/p>\n
\"upgradeadto2012versionpt1_05\"<\/p>\n
Open the Command Prompt<\/strong> with administrative privileges and navigate to \\support\\adprep<\/strong> on the installation media.<\/p>\n
D:\\>cd \\support\\adprep<\/span><\/p>\n
\"upgradeadto2012versionpt1_06\"<\/p>\n
We need to upgrade the Active Directory Schema<\/strong> version to Windows 2012 R2. Run\u00a0the command adprep \/forestprep<\/strong>.<\/p>\n
D:\\support\\adprep>adprep \/forestprep<\/span><\/p>\n
\"upgradeadto2012versionpt1_07\"<\/p>\n
Type C<\/strong> to begin the process.<\/p>\n
\"upgradeadto2012versionpt1_08\"<\/p>\n
Now run\u00a0the command adprep \/domainprep<\/strong>.<\/p>\n
D:\\support\\adprep>adprep \/domainprep<\/span><\/p>\n
\"upgradeadto2012versionpt1_09\"<\/p>\n
To verify if the schema version<\/strong> has been updated successfully, open the\u00a0Registry Editor<\/strong>\u00a0and navigate to:<\/p>\n
Computer\\HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\services\\NTDS\\Parameters<\/p><\/blockquote>\n
The Schema Version<\/strong> REG_WORD value should be 69<\/strong>.<\/p>\n
\"upgradeadto2012versionpt1_10\"<\/p>\n
The Active Directory preparation schema process is now complete.<\/p>\n
 <\/p>\n
Decommission secondary Windows 2008 R2 DC<\/h2>\n
From the secondary Domain Controller, click Start > Run<\/strong> and type the command dcpromo<\/strong>.<\/p>\n
\"upgradeadto2012versionpt1_11\"<\/p>\n
The system checks the AD environment.<\/p>\n
\"upgradeadto2012versionpt1_12\"<\/p>\n
When the Installation Wizard window appears, click Next<\/strong> to continue.<\/p>\n
\"upgradeadto2012versionpt1_13\"<\/p>\n
Since this DC has the Global Catalog service installed, before demoting<\/strong> make sure the primary DC has the GC service enabled as well. Click OK<\/strong>.<\/p>\n
\"upgradeadto2012versionpt1_14\"<\/p>\n
To check if the primary DC has the Global Catalog service enable, open Active Directory Sites and Services<\/strong>. Expand Sites<\/strong> and navigate to Default-First-Site-Name > Servers<\/strong>. Right click first DC and select Properties<\/strong> option.<\/p>\n
\"upgradeadto2012versionpt1_15\"<\/p>\n
In General<\/strong>\u00a0tab check if Global Catalog<\/strong> option is checked. In this example also the primary DC has the GC service enabled.<\/p>\n
\"upgradeadto2012versionpt1_16\"<\/p>\n
DON'T check the Delete the domain because this server is the last domain controller in the domain<\/strong> option and click Next<\/strong>.<\/p>\n
\"upgradeadto2012versionpt1_17\"<\/p>\n
Type the Password<\/strong> for the Local Administrator<\/strong> account then click Next<\/strong>.<\/p>\n
\"upgradeadto2012versionpt1_18\"<\/p>\n
From the Summary<\/strong> window, click Next<\/strong> to begin the operation.<\/p>\n
\"upgradeadto2012versionpt1_19\"<\/p>\n
The Domain Controller is being demoted. Check the Reboot on completion<\/strong> option to restart the server automatically.<\/p>\n
\"upgradeadto2012versionpt1_20\"<\/p>\n
 <\/p>\n
Remove roles<\/h4>\n
After the server has rebooted, access the server Roles<\/strong> from the Server Manager<\/strong> and click Remove Roles<\/strong>.<\/p>\n
\"upgradeadto2012versionpt1_21\"<\/p>\n
The Remove Role Wizard starts. Click Next<\/strong> to continue.<\/p>\n
\"upgradeadto2012versionpt1_22\"<\/p>\n
Clear the check boxes<\/strong> for the roles to remove.<\/p>\n
\"upgradeadto2012versionpt1_23\"<\/p>\n
Click Next<\/strong> when done.<\/p>\n
\"upgradeadto2012versionpt1_24\"<\/p>\n
Click Remove<\/strong> to proceed with removal.<\/p>\n
\"upgradeadto2012versionpt1_25\"<\/p>\n
The removal process is being executed.<\/p>\n
\"upgradeadto2012versionpt1_26\"<\/p>\n
Click Close<\/strong> to exit the Wizard.<\/p>\n
\"upgradeadto2012versionpt1_27\"<\/p>\n
Click Yes<\/strong> to restart the server now.<\/p>\n
\"upgradeadto2012versionpt1_28\"<\/p>\n
After rebooting the server the Configuration Wizard<\/strong> resumes the configuration to complete the removal process.<\/p>\n
\"upgradeadto2012versionpt1_29\"<\/p>\n
Components are being removed from the system.<\/p>\n
\"upgradeadto2012versionpt1_30\"<\/p>\n
When the removal has completed, click Close<\/strong> to exit the Wizard.<\/p>\n
\"upgradeadto2012versionpt1_31\"<\/p>\n
 <\/p>\n
Disjoin server from domain<\/h4>\n
Since the server won't be used anymore, the demoted Domain Controller must be disjoined from domain<\/strong>. From the Server Manager<\/strong> click Change System Properties<\/strong>.<\/p>\n
\"upgradeadto2012versionpt1_32\"<\/p>\n
In Computer Name<\/strong> tab click Change<\/strong>. Select Workgroup<\/strong> option and type a name to assign then click OK<\/strong> to confirm.<\/p>\n
\"upgradeadto2012versionpt1_33\"<\/p>\n
Click OK<\/strong> to continue.<\/p>\n
\"upgradeadto2012versionpt1_34\"<\/p>\n
The server is disjoined from the domain. Click OK<\/strong>.<\/p>\n
\"upgradeadto2012versionpt1_35\"<\/p>\n
Click OK<\/strong>.<\/p>\n
\"upgradeadto2012versionpt1_36\"<\/p>\n
Click Close<\/strong>.<\/p>\n
\"upgradeadto2012versionpt1_37\"<\/p>\n
Since we no longer need this server, click Restart Later<\/strong>.<\/p>\n
\"upgradeadto2012versionpt1_38\"<\/p>\n
Shutdown the server from Start > Shutdown<\/strong>.<\/p>\n
\"upgradeadto2012versionpt1_39\"<\/p>\n
The procedure to decommission the secondary Domain Controller has been completed.\u00a0Part 2<\/a> of the procedure will cover the deployment\u00a0of new 2012 R2 Domain Controllers transferring the FSMO Roles<\/strong>.<\/p>\n
\"firma\"<\/p>\n","protected":false},"excerpt":{"rendered":"
Migrating Active Directory to Windows 2012 R2, all Domain Controllers have to be migrated to Server version 2012 R2 following a specific procedure. The Domain Controllers to migrate are installed with Windows Server 2008 R2\u00a0and before begin the procedure, check\u00a0you have a full working backup of your environment.<\/p>\n","protected":false},"author":3,"featured_media":12340,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":{"linkedin_93tdZWzMZc_93tdZWzMZc":"","facebook_2879994398731222_17841400390232720":"","twitter_113568041_113568041":"","mastodon_115463926174894442_115463926174894442":""},"rop_publish_now_history":[],"rop_publish_now_status":"pending","footnotes":""},"categories":[913,1065],"tags":[1593,220,1556,1555],"class_list":["post-12377","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-active-directory-en","category-microsoft-en","tag-active-directory","tag-domain-controller","tag-migration","tag-windows-2012-r2","has_thumb"],"_links":{"self":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/12377","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/comments?post=12377"}],"version-history":[{"count":0,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/12377\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media\/12340"}],"wp:attachment":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media?parent=12377"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/categories?post=12377"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/tags?post=12377"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}