Hi!

I am from WinNT domain and migrated to Win2K AD Domain, years ago. I have 2
Win2K DC (DC01 and DC02) and I am now planning to retire the first W2K
Domain on my network so I've transferred all Operations Master to new
machine (DC03). I now have 3 DCs, and still uneasy if I will not encounter
problem if I will remove the 1st DC of my domain. What is the best way to
remove DC to the network? is it dcpromo? How can I check that all roles from
the 1st DC was already transferred and will not encounter problem? I need
your .

MP

In news:ulvvBN6UGHA.4900@TK2MSFTNGP12.phx.gbl,
M P <mark@textguru.ph> typed:
> Hi!
>
> I am from WinNT domain and migrated to Win2K AD Domain, years ago. I
> have 2 Win2K DC (DC01 and DC02) and I am now planning to retire the
> first W2K Domain on my network so I've transferred all Operations
> Master to new machine (DC03). I now have 3 DCs, and still uneasy if I
> will not encounter problem if I will remove the 1st DC of my domain.
> What is the best way to remove DC to the network? is it dcpromo? How
> can I check that all roles from the 1st DC was already transferred
> and will not encounter problem? I need your .

Dcpromo is the only way you should remove a DC from a domain. Any FSMO roles
will be attempted to be transferred by dcpromo. Check that you have made one
of the other DCs a Global Catalog. Also, check that you have changed any
clients using the soon to be removed DC for DNS in TCP/IP properties.

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This s
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
https://secure.lsaol.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oe.com/OEBackup/Default.aspx
===================================

"M P" <mark@textguru.ph> wrote in message
news:ulvvBN6UGHA.4900@TK2MSFTNGP12.phx.gbl...
> Hi!
>
> I am from WinNT domain and migrated to Win2K AD Domain, years ago. I have
> 2 Win2K DC (DC01 and DC02) and I am now planning to retire the first W2K
> Domain on my network so I've transferred all Operations Master to new
> machine (DC03). I now have 3 DCs, and still uneasy if I will not encounter
> problem if I will remove the 1st DC of my domain. What is the best way to
> remove DC to the network? is it dcpromo?

Yes, that is the ONLY way you SHOULD do this.

> How can I check that all roles from the 1st DC was already transferred and
> will not encounter problem? I need your .

You can move all roles with the (tedious) command line
utility NTDSUtil (roles subcommand area) and you can
see/move the three domain roles easily in AD Users &
Computers. The forest wide roles require you to use
AD Domains and Trusts and the Schema Editor if your
wish to use a GUI.

As Kevin said, make sure the other DCs are GCs.

Make sure you have DNS setup correctly (without the
departing DC) and make sure all of the clients DNS
setting no longer point to the departing DC.




--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

> MP
>

Herb Martin wrote:
> "M P" <mark@textguru.ph> wrote in message
> news:ulvvBN6UGHA.4900@TK2MSFTNGP12.phx.gbl...
> > Hi!
> >
> > I am from WinNT domain and migrated to Win2K AD Domain, years ago. I have
> > 2 Win2K DC (DC01 and DC02) and I am now planning to retire the first W2K
> > Domain on my network so I've transferred all Operations Master to new
> > machine (DC03). I now have 3 DCs, and still uneasy if I will not encounter
> > problem if I will remove the 1st DC of my domain. What is the best way to
> > remove DC to the network? is it dcpromo?
>
> Yes, that is the ONLY way you SHOULD do this.
>
> > How can I check that all roles from the 1st DC was already transferred and
> > will not encounter problem? I need your .
>
> You can move all roles with the (tedious) command line
> utility NTDSUtil (roles subcommand area) and you can
> see/move the three domain roles easily in AD Users &
> Computers. The forest wide roles require you to use
> AD Domains and Trusts and the Schema Editor if your
> wish to use a GUI.
>
> As Kevin said, make sure the other DCs are GCs.
>
> Make sure you have DNS setup correctly (without the
> departing DC) and make sure all of the clients DNS
> setting no longer point to the departing DC.
>
>
>
>
> --
> Herb Martin, MCSE, MVP
> Accelerated MCSE
> http://www.LearnQuick.Com
> [phone number on web site]
>
> > MP
> >

Make sure you move all roles (GC, FSMO) and services (DHCP, WINS, DNS, DFS,
etc.) to other DCs or servers.
Also think how the DC to be removed is used by other servers and clients.
After determining and moving roles and services DEMOTE the DC to a member,
remove the member server from the domain, delete computer account

If that DC hosts FSMO roles, move them manually as that is a best practice
because then YOU determine where the FSMO roles end up!

Want to be sure what happens if the server is gone? Do your work as
mentioned above, then shutdown the server for a week. If nothing or nobody
starts shouting, restart the DC and demote it

--

Cheers,
(HOPEFULLY THIS INFORMATION S YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
"M P" <mark@textguru.ph> wrote in message
news:ulvvBN6UGHA.4900@TK2MSFTNGP12.phx.gbl...
> Hi!
>
> I am from WinNT domain and migrated to Win2K AD Domain, years ago. I have
> 2 Win2K DC (DC01 and DC02) and I am now planning to retire the first W2K
> Domain on my network so I've transferred all Operations Master to new
> machine (DC03). I now have 3 DCs, and still uneasy if I will not encounter
> problem if I will remove the 1st DC of my domain. What is the best way to
> remove DC to the network? is it dcpromo? How can I check that all roles
> from the 1st DC was already transferred and will not encounter problem? I
> need your .
>
> MP
>