{"id":12623,"date":"2015-05-04T10:00:00","date_gmt":"2015-05-04T08:00:00","guid":{"rendered":"http:\/\/nolabnoparty.com\/?p=12623"},"modified":"2020-01-07T12:29:08","modified_gmt":"2020-01-07T11:29:08","slug":"migrate-active-directory-to-windows-2012-r2-pt-2","status":"publish","type":"post","link":"https:\/\/nolabnoparty.com\/en\/migrate-active-directory-to-windows-2012-r2-pt-2\/","title":{"rendered":"Migrate Active Directory to Windows 2012 R2 - pt. 2"},"content":{"rendered":"

\"upgradeadto2012versionpt2_01\"<\/p>\n

After preparing the AD schema and demoted the secondary DCs, additional steps<\/strong> are required to migrate Active Directory to Windows 2012 R2.<\/p>\n

The installation of new Windows 2012 R2 Domain Controllers<\/strong> and the transfer of AD Roles<\/strong> are the next steps to complete the migration.<\/p>\n

<\/p>\n

 <\/p>\n

Blog series<\/h2>\n

Migrate Active Directory to Windows 2012 R2 - pt. 1<\/a>
\nMigrate Active Directory to Windows 2012 R2 - pt. 2
\nMigrate Active Directory to Windows 2012 R2 - pt. 3<\/a><\/p>\n

 <\/p>\n

Deploy the first Windows 2012 R2 DC<\/h2>\n

From vSphere Web Client (if you work with VMware), deploy a new Windows 2012 R2 Server we'll use as new Domain Controller<\/strong>.<\/p>\n

\"upgradeadto2012versionpt2_02\"<\/p>\n

In the new server, perform a Windows Update<\/strong> to have latest patches installed in the system.<\/p>\n

\"upgradeadto2012versionpt2_03\"<\/p>\n

 <\/p>\n

Join the server to the domain<\/h4>\n

From the Server Manager<\/strong>, select Local Server<\/strong> and click on the Workgroup<\/strong> name to join the server to the domain.<\/p>\n

\"upgradeadto2012versionpt2_04\"<\/p>\n

In Computer Name<\/strong> tab, click on\u00a0Change<\/strong>\u00a0button and type the Domain<\/strong> name to join. Click OK<\/strong> to save the configuration.<\/p>\n

\"upgradeadto2012versionpt2_05\"<\/p>\n

Type the credentials of the Domain Administrator to join the machine to domain and click OK<\/strong>.<\/p>\n

\"upgradeadto2012versionpt2_06\"<\/p>\n

The new server is joined to the domain. Click OK<\/strong>.<\/p>\n

\"upgradeadto2012versionpt2_07\"<\/p>\n

Click OK<\/strong> to continue.<\/p>\n

\"upgradeadto2012versionpt2_08\"<\/p>\n

Click Apply<\/strong> to apply changes.<\/p>\n

\"upgradeadto2012versionpt2_09\"<\/p>\n

Click Restart now<\/strong> to reboot the server.<\/p>\n

\"upgradeadto2012versionpt2_10\"<\/p>\n

 <\/p>\n

Install Roles<\/h4>\n

To promote the new server as Domain Controller, dcpromo<\/strong> command is no longer used<\/strong> in Windows 2012 but Active Directory Domain Services<\/strong> role must be installed instead.<\/p>\n

From the Server Manager<\/strong>, click Add roles and features<\/strong> option.<\/p>\n

\"upgradeadto2012versionpt2_11\"<\/p>\n

Click Next<\/strong> to start the Add Roles and Feature Wizard<\/strong>.<\/p>\n

\"upgradeadto2012versionpt2_12\"<\/p>\n

Select Role-based or feature-base installation<\/strong> option then click Next<\/strong>.<\/p>\n

\"upgradeadto2012versionpt2_13\"<\/p>\n

Thick Select a server from the server pool<\/strong> and select the server to install. Click Next<\/strong>.<\/p>\n

\"upgradeadto2012versionpt2_14\"<\/p>\n

Select Active Directory Domain Services<\/strong> role.<\/p>\n

\"upgradeadto2012versionpt2_15\"<\/p>\n

Since the selected role requires\u00a0some additional features, click Add Features<\/strong> to complete the requirements.<\/p>\n

\"upgradeadto2012versionpt2_16\"<\/p>\n

Click Next<\/strong> to continue.<\/p>\n

\"upgradeadto2012versionpt2_17\"<\/p>\n

Click Next<\/strong> to continue.<\/p>\n

\"upgradeadto2012versionpt2_18\"<\/p>\n

Nothing to select here. Click Next<\/strong>.<\/p>\n

\"upgradeadto2012versionpt2_19\"<\/p>\n

Check the Restart the destination server automatically if required<\/strong> option and click Yes<\/strong> in the pop up window.<\/p>\n

\"upgradeadto2012versionpt2_20\"<\/p>\n

Click on Install<\/strong> button to install selected roles.<\/p>\n

\"upgradeadto2012versionpt2_21\"<\/p>\n

The roles are being installed.<\/p>\n

\"upgradeadto2012versionpt2_22\"<\/p>\n

When complete, a warning message informs the server must be promoted to a Domain Controller. Click on the Promote this server to a domain controller<\/strong> link.<\/p>\n

\"upgradeadto2012versionpt2_23\"<\/p>\n

 <\/p>\n

Promote the server as Domain Controller<\/h4>\n

When the Active Directory Domain Services Configuration Wizard<\/strong> starts, select the Add domain controller to an existing domain<\/strong> option then click Next<\/strong>.<\/p>\n

\"upgradeadto2012versionpt2_24\"<\/p>\n

Make sure DNS<\/strong> and GC<\/strong> are selected and insert a strong password for DSRM<\/strong>.<\/p>\n

\"upgradeadto2012versionpt2_25\"<\/p>\n

Click Next<\/strong>.<\/p>\n

\"upgradeadto2012versionpt2_26\"<\/p>\n

Leave default Any domain controller<\/strong> to replicate data from then click Next<\/strong>.<\/p>\n

\"upgradeadto2012versionpt2_27\"<\/p>\n

Leave default values then click Next<\/strong>.<\/p>\n

\"upgradeadto2012versionpt2_28\"<\/p>\n

In the Review Options<\/strong> click Next<\/strong> to continue.<\/p>\n

\"upgradeadto2012versionpt2_29\"<\/p>\n

If all prerequisites check passed successfully, click Install<\/strong> to begin installation.<\/p>\n

\"upgradeadto2012versionpt2_30\"<\/p>\n

The installation is being performed.<\/p>\n

\"upgradeadto2012versionpt2_31\"<\/p>\n

When the process has completed, the server automatically reboots<\/strong>.<\/p>\n

\"upgradeadto2012versionpt2_32\"<\/p>\n

When the server has restarted, from Server Manager<\/strong> select Tools > Active Directory Users and Computers<\/strong>.<\/p>\n

\"upgradeadto2012versionpt2_33\"<\/p>\n

Expand the domain name and select Domain Controllers<\/strong> item. In the right pane the new Domain Controller shows up.<\/p>\n

\"upgradeadto2012versionpt2_34\"<\/p>\n

To verify if the DNS works properly, from Server Manager<\/strong> select Tools > DNS<\/strong>.<\/p>\n

\"upgradeadto2012versionpt2_35\"<\/p>\n

Expand the server name<\/strong> and Forward Lookup Zones<\/strong>\u00a0item. Right click the domain name and select Properties<\/strong>.<\/p>\n

\"upgradeadto2012versionpt2_36\"<\/p>\n

Ensure new DC is listed in the Name Servers<\/strong> tab.<\/p>\n

\"upgradeadto2012versionpt2_37\"<\/p>\n

 <\/p>\n

Keep same DCs' IP Addresses<\/h2>\n

If you need to keep same Domain Controllers' IP Addresses during the migration to Windows 2012 R2, setup the 2012 R2 Servers as Domain Controllers with different IPs on the same subnet.<\/p>\n

During the promotion procedure, a new DC (i.e.\u00a0w12r2-dc01<\/em>) has been installed in the network.<\/p>\n

\"upgradeadto2012versionpt2_38\"<\/p>\n

Now change the IP of one of your secondary Windows 2012 R2 Servers (i.e.\u00a0w12r2-dc02<\/em>) to the IP of the DC previously shutdown (i.e.\u00a0w2k8r2-dc02<\/em>) then restart the server.<\/p>\n

\"upgradeadto2012versionpt2_39\"<\/p>\n

After the restart, check the DNS Name Servers<\/strong> tab to see if the server is listed.<\/p>\n

\"upgradeadto2012versionpt2_40\"<\/p>\n

Check replica errors<\/strong> executing the command:<\/p>\n

C:\\>repadmin \/replsummary<\/span><\/p>\n

\"upgradeadto2012versionpt2_41\"<\/p>\n

If no errors are detected, the procedure completed successfully.<\/p>\n

 <\/p>\n

Transfer the FSMO roles<\/h2>\n

Prior decommission the old Domain Controllers, the FSMO roles must be transferred<\/strong> to the new 2012 R2 servers to keep the Active Directory. Five roles in Active Directory must be transferred from the old to the new DCs:<\/p>\n