{"id":325,"date":"2023-06-14T06:20:47","date_gmt":"2023-06-14T06:20:47","guid":{"rendered":"https:\/\/bene.webtopia.ch\/?p=325"},"modified":"2023-06-14T06:20:47","modified_gmt":"2023-06-14T06:20:47","slug":"server-migration","status":"publish","type":"post","link":"https:\/\/bene.webtopia.ch\/?p=325","title":{"rendered":"Server Migration"},"content":{"rendered":"<p>The original article is here: https:\/\/petri.com\/7-steps-to-migrate-windows-2012-r2-domain-controllers-to-windows-server-2019\/#5_Move_Flexible_Single_Master_Operation_FSMO_roles_to_new_server<\/p>\n<p>&nbsp;<\/p>\n<p>In this article, I\u2019m going to take you through the high-level steps for migrating a Windows Server 2012 R2 DC to Windows Server 2016 or Windows Server 2019. The procedure is the same, regardless of whether you choose Server 2016 or 2019. But I recommend migrating straight to Windows Server 2019. There simply isn\u2019t a reason not to.<\/p>\n<h2><span id=\"1_Set_up_a_new_server_using_Windows_Server_2019\">1. Set up a new server using Windows Server 2019<\/span><\/h2>\n<p>The first step is to install Windows Server 2019 on a new physical device or virtual machine. If you are more technically experienced with Windows Server, you could choose to install Server Core and then perform the necessary steps using PowerShell or by remotely connecting to the new server using Server Manager or Windows Admin Center. Otherwise, install Windows Server with the Desktop Experience role enabled.<\/p>\n<p>If you are installing Windows Server 2016, you can check out Aidan Finn\u2019s article on Petri <a href=\"https:\/\/petri.com\/install-the-full-ui-on-windows-server-2016\">here<\/a>.<\/p>\n<h2><span id=\"2_Join_the_new_server_to_your_existing_Active_Directory_domain\">2. Join the new server to your existing Active Directory domain<\/span><\/h2>\n<p>Once the new server is up and running, join it to your existing AD domain. You can start the process from the <strong>Local Server<\/strong> tab in Server Manager by clicking <strong>WORKGROUP<\/strong> under the Properties. The procedure is then the same as joining Windows 10 to an AD domain. You will need to reboot the server to complete the process.<\/p>\n<h2><span id=\"3_Install_the_Active_Directory_Domain_Services_role\">3. Install the Active Directory Domain Services role<\/span><\/h2>\n<p>Wait for the server to reboot and then sign in with a domain admin account. You can then install the Active Directory Domain Services (AD DS) server role using Server Manager and the <strong>Add Roles and Features<\/strong> wizard in the <strong>Manage<\/strong> menu. You can also use the following PowerShell command:<\/p>\n<pre class=\"lang:ps decode:true \">Install-WindowsFeature -Name AD-Domain-Services -IncludeManagementTools<\/pre>\n<h2><span id=\"4_Promote_the_new_server_to_a_domain_controller\">4. Promote the new server to a domain controller<\/span><\/h2>\n<p>When the AD DS server role has been installed, you\u2019ll get a notification in Server Manager prompting you to promote the server to a domain controller. Clicking the yellow exclamation mark icon will launch the AD DS configuration wizard. You should choose to <strong>\u2018Add a domain controller to an existing domain\u2019<\/strong> and follow through the on-screen instructions. And providing that you are signed in with a domain admin account, adprep will automatically prepare your existing domain.<\/p>\n<h2><span id=\"5_Move_Flexible_Single_Master_Operation_FSMO_roles_to_new_server\">5. Move Flexible Single Master Operation (FSMO) roles to new server<\/span><\/h2>\n<p>The next step is to log on to the old domain controller and move the domain and forest FSMO roles, there are five in total, to the new DC. The easiest way to do this is using PowerShell. In the command below, you should replace DC1 with the name of your new DC.<\/p>\n<p>This article assumes you have a domain with only one DC. In practice it\u2019s likely that you will have more than one DC, so make sure you understand how FSMO roles work and on which DCs they are located in your domain and forest.<\/p>\n<pre class=\"lang:ps decode:true \">Move-ADDirectoryServerOperationMasterRole -Identity DC1 -OperationMasterRole 0,1,2,3,4<\/pre>\n<p>On the new domain controller, confirm that the FSMO roles have been moved. Start by checking the domain FSMO roles. Using Get-ADDomain, check the name of the server next to the following entries: InfrastructureMaster, PDCEmulator, and RIDMaster. The server name should match that of your <em>new<\/em> domain controller. Similarly, using Get-ADForest, check the name of the server next to the following entries: SchemaMaster and DomainNamingMaster. Again, the server name should match that of your <em>new<\/em> domain controller.<\/p>\n<div class=\"image-expand aligncenter\" data-expand=\"https:\/\/petri-media.s3.amazonaws.com\/2021\/04\/Figure1-2.png\">\n<div class=\"image-expand--top\"><span class=\"image-expand--order\">Image #1<\/span> <span class=\"image-expand--click\">Expand <i class=\"far fa-external-link\"><\/i><\/span><\/div>\n<figure id=\"post-656767\" class=\"align-aligncenter\"><img decoding=\"async\" class=\" ls-is-cached lazyloaded\" src=\"https:\/\/petri-media.s3.amazonaws.com\/2021\/04\/Figure1-2-1280x698.png\" alt=\"\" data-src=\"https:\/\/petri-media.s3.amazonaws.com\/2021\/04\/Figure1-2-1280x698.png\"><figcaption>7 Steps to Migrate Windows 2012 R2 Domain Controllers to Windows Server 2019 (Image Credit: Russell Smith)<\/figcaption><\/figure>\n<\/div>\n<h2>&nbsp;<\/h2>\n<h2><span id=\"6_Demote_your_old_domain_controller\">6. Demote your old domain controller<\/span><\/h2>\n<p>Now that you have moved the FSMO roles to the new DC, you can safely demote the old Windows Server 2012 R2 domain controller. You can demote a DC using Server Manager. One way to demote a DC is to use the <strong>Remove Roles and Features<\/strong> command in the <strong>Manage<\/strong> menu to remove the AD DS server role. Removing the role will open the Active Directory Domain Services Configuration wizard and take you through the steps to demote the DC before the AD DS role can be removed.<\/p>\n<p>Alternatively, you can use the Uninstall-ADDSDomainController and Uninstall-WindowsFeature PowerShell cmdlets to demote the DC and uninstall the AD DS server role respectively.<\/p>\n<h2><span id=\"7_Raise_the_domain_and_forest_functional_levels\">7. Raise the domain and forest functional levels<\/span><\/h2>\n<p>Finally, you can raise the domain and forest functional levels to Windows Server 2016. Even if you are running Windows Server 2019, the highest functional levels are Windows Server 2016. You can confirm the domain and forest levels using Get-ADDomain and Get-ADForest cmdlets.<\/p>\n<pre class=\"lang:ps decode:true \">Set-ADDomainMode -Identity CONTOSO -DomainMode Windows2016Domain\r\nSet-ADForestMode -Identity CONTOSO Windows2016Forest<\/pre>\n<p>And that is it! As you can see, while there are several steps, it is relatively simple to migrate a DC to a more current version of Windows Server. So, I encourage you to look at migrating any DCs that are running anything below Windows Server 2016.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The original article is here: https:\/\/petri.com\/7-steps-to-migrate-windows-2012-r2-domain-controllers-to-windows-server-2019\/#5_Move_Flexible_Single_Master_Operation_FSMO_roles_to_new_server &nbsp; In this article, I\u2019m going to take you through the high-level steps for migrating a Windows Server 2012 R2 DC to Windows Server 2016 or Windows Server 2019. The procedure is the same, regardless of whether you choose Server 2016 or 2019. But I recommend migrating straight to [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[18],"tags":[],"class_list":["post-325","post","type-post","status-publish","format-standard","hentry","category-server"],"_links":{"self":[{"href":"https:\/\/bene.webtopia.ch\/index.php?rest_route=\/wp\/v2\/posts\/325","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bene.webtopia.ch\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bene.webtopia.ch\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bene.webtopia.ch\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bene.webtopia.ch\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=325"}],"version-history":[{"count":2,"href":"https:\/\/bene.webtopia.ch\/index.php?rest_route=\/wp\/v2\/posts\/325\/revisions"}],"predecessor-version":[{"id":327,"href":"https:\/\/bene.webtopia.ch\/index.php?rest_route=\/wp\/v2\/posts\/325\/revisions\/327"}],"wp:attachment":[{"href":"https:\/\/bene.webtopia.ch\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=325"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bene.webtopia.ch\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=325"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bene.webtopia.ch\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=325"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}