{"id":1263,"date":"2014-02-13T08:56:15","date_gmt":"2014-02-13T13:56:15","guid":{"rendered":"http:\/\/wildow.com\/?p=1263"},"modified":"2015-12-20T08:08:41","modified_gmt":"2015-12-20T13:08:41","slug":"step-by-step-active-directory-migration-from-windows-server-2003-to-windows-server-2012","status":"publish","type":"post","link":"https:\/\/wildow.com\/?p=1263","title":{"rendered":"Step-By-Step: Active Directory Migration from Windows Server 2003 to Windows Server 2012"},"content":{"rendered":"<h3>Step-By-Step: Active Directory Migration from Windows Server 2003 to Windows Server 2012<\/h3>\n<div><a href=\"http:\/\/blogs.technet.com\/b\/canitpro\/archive\/2013\/05\/27\/step-by-step-active-directory-migration-from-windows-server-2003-to-windows-server-2012.aspx\" target=\"_blank\">http:\/\/blogs.technet.com\/b\/canitpro\/archive\/2013\/05\/27\/step-by-step-active-directory-migration-from-windows-server-2003-to-windows-server-2012.aspx <\/a><\/div>\n<div><\/div>\n<div><img decoding=\"async\" src=\"http:\/\/i1.social.s-msft.com\/profile\/u\/avatar.jpg?displayname=anthony+bartolo&amp;size=large\" alt=\"Anthony Bartolo\" border=\"0\" \/> <a href=\"http:\/\/blogs.technet.com\/Anthony%20Bartolo\/ProfileUrlRedirect.ashx\">Anthony Bartolo<\/a><\/div>\n<p><!--more--><\/p>\n<p><a href=\"http:\/\/blogs.technet.com\/cfs-file.ashx\/__key\/communityserver-blogs-components-weblogfiles\/00-00-00-48-12\/4405.AD2012.gif\"><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/blogs.technet.com\/resized-image.ashx\/__size\/550x0\/__key\/communityserver-blogs-components-weblogfiles\/00-00-00-48-12\/4405.AD2012.gif\" alt=\"\" width=\"405\" height=\"335\" border=\"0\" \/><\/a><\/p>\n<p>As you may know, Active Directory\u00a0provides authentication and authorization mechanisms as well as framework from within other related services that can be deployed.\u00a0As an LDAP compliant database, it contains most commonly used objects such as users, computers, and groups which can be organized into organizational units or OUs by any number of logical or business needs. Group Policy Objects or GPOs\u00a0are then\u00a0linked to OUs to centralize the settings for various users or computers across an organization. Part of the quandaries that IT professionals face is taking advantage of nuances provided\u00a0in Active Directory in newer server offerings such as Windows Server 2012.\u00a0 As detailed in Pierre&#8217;s post, <a title=\"&quot;Windows Server 2012 Active Directory &amp;ndash; What&amp;rsquo;s New?&quot;\" href=\"http:\/\/blogs.technet.com\/b\/canitpro\/archive\/2013\/05\/21\/windows-server-2012-active-directory-what-s-new.aspx\" target=\"_blank\">&#8220;Windows Server 2012 Active Directory \u2013 What\u2019s New?&#8221;<\/a>, Active Directory provided in Windows Server 2012 is provided\u00a0impactful enhancements.\u00a0 Yet\u00a0some organizations choose not to migrate due to reasons of uncertainty.<\/p>\n<p>This Step-By-Step,\u00a0suggestion online via the\u00a0<a title=\"IT Professionals Community of Greater Toronto\" href=\"http:\/\/www.meetup.com\/ITProToronto\/\" target=\"_blank\">IT Professionals Community of Greater Toronto<\/a>,\u00a0is\u00a0to help deal with that uncertainty and provide guidance for IT professionals looking to migrate their organizations Active Directory offering from Windows Server 2003 to 2012.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>Prerequisites<\/strong><\/p>\n<ol>\n<li><strong><a title=\"Download Windows Server 2012 \" href=\"http:\/\/aka.ms\/WS2012AB\" target=\"_blank\">Download Windows Server 2012<\/a>. <\/strong>If you plan on completing this Step-By-Step in a virtual lab, it is recommended to\u00a0<strong><a title=\"download the FREE Hyper-V Server 2012 first\" href=\"http:\/\/aka.ms\/HV2012AB\" target=\"_blank\">download the FREE Hyper-V Server 2012 first<\/a>.<br \/>\n<\/strong><\/li>\n<li><strong>Complete <a title=\"Step-By-Step: Adding a Windows Server 2012 Domain Controller to an Existing Windows Server 2003 network\" href=\"http:\/\/blogs.technet.com\/b\/canitpro\/archive\/2013\/05\/05\/step-by-step-adding-a-windows-server-2012-domain-controller-to-an-existing-windows-2003-network.aspx\" target=\"_blank\">Step-By-Step: Adding a Windows Server 2012 Domain Controller to an Existing Windows Server 2003 network<\/a><\/strong><\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<p><strong>Transferring the Flexible Single Master Operations (FSMO) Role<\/strong><\/p>\n<ol>\n<li>Open the <strong>Active Directory Users and Computers<\/strong> console on your new Windows Server 2012 computer.<\/li>\n<li><em>Right click<\/em> your domain and select <strong>Operations Masters<\/strong> in the sub menu.<\/li>\n<li>In the <strong>Operations Masters <\/strong>window, ensure the RID tab is selected.<\/li>\n<li><em>Select<\/em> the <strong>Change<\/strong> button.<a href=\"http:\/\/blogs.technet.com\/cfs-file.ashx\/__key\/communityserver-blogs-components-weblogfiles\/00-00-00-48-12\/7183.MigAD2003to2012a.png\"><img decoding=\"async\" src=\"http:\/\/blogs.technet.com\/resized-image.ashx\/__size\/550x0\/__key\/communityserver-blogs-components-weblogfiles\/00-00-00-48-12\/7183.MigAD2003to2012a.png\" alt=\"\" border=\"0\" \/><\/a><\/li>\n<li><em>Select<\/em> <strong>Yes<\/strong> when asked about transferring the operations master role.<\/li>\n<li>Once the operations master role has successfully transferred, <em>click<\/em> <strong>OK<\/strong> to continue.<\/li>\n<li>Ensure the Operations Master box now shows your new 2012 Windows Server.<\/li>\n<li>Repeat steps 4 to 6 for the <strong>PDC<\/strong> and <strong>Infrastructure<\/strong> tabs.<\/li>\n<li>Once completed, <em>click<\/em> <strong>Close<\/strong> to close the <strong>Operations Masters<\/strong> window.<\/li>\n<li>Close the <strong>Active Directory Users and Computers<\/strong> window.<\/li>\n<\/ol>\n<p><strong>Changing the Active Directory Domain Controller<\/strong><\/p>\n<ol>\n<li>Open the <strong>Active Directory\u00a0Domains and\u00a0Trusts<\/strong> console on your new Windows Server 2012 computer.<\/li>\n<li><em>Right click<\/em> your domain and select <strong>Change Active Directory Domain Controller&#8230; <\/strong>in the sub menu.<\/li>\n<li>In the <strong>Change Directory Server<\/strong> window, <em>select<\/em> <strong>This Domain Controller or AD LDS instance.<br \/>\n<\/strong><\/li>\n<li>Select your new 2012 Windows Server.<img decoding=\"async\" src=\"http:\/\/blogs.technet.com\/resized-image.ashx\/__size\/550x0\/__key\/communityserver-blogs-components-weblogfiles\/00-00-00-48-12\/2350.MigAD2003to2012b.png\" alt=\"\" border=\"0\" \/><\/li>\n<li><em>Click<\/em> <strong>OK<\/strong> to continue.<\/li>\n<li>Back in the <strong>Active Directory Domains and Trusts<\/strong> window, hover over the <strong>Active Directory Domains and Trusts <\/strong>found in the folder tree on the left hand side to ensure the server now reflects your new 2012 Windows server.<\/li>\n<li><em>Right click<\/em> <strong>Active Directory Domains and Trusts <\/strong>found in the folder tree and select <strong>Operations Manager&#8230; <\/strong>in the sub menu.<\/li>\n<li>In the <strong>Operations Master<\/strong> window, <em>click<\/em> <strong>Change<\/strong> to transfer the domain naming master role to the 2012 Windows Server.<\/li>\n<li>When asked if you are sure you wish to transfer the operations master role to a different computer, <em>click<\/em> <strong>Yes<\/strong>.<\/li>\n<li>Once the operations master is successfully transferred, <em>click<\/em> <strong>OK<\/strong> to continue.<\/li>\n<li><em>Click<\/em> <strong>Close<\/strong> to close the <strong>Operations Master<\/strong> window.<\/li>\n<li>Close the\u00a0<strong>Active Directory\u00a0Domains and\u00a0Trusts<\/strong> console.<\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<p><strong>Changing the Schema Master<\/strong><\/p>\n<ol>\n<li>Open a command prompt in administration view on your new Windows Server 2012 computer.<\/li>\n<li>On the command prompt window, <em>enter<\/em> <strong>regsvr32 schmmgmt.dll<\/strong> and hit enter.<\/li>\n<li>Once completed successfully, <em>click<\/em> <strong>OK<\/strong> to close the <strong>RegSvr32<\/strong> window.<a href=\"http:\/\/blogs.technet.com\/cfs-file.ashx\/__key\/communityserver-blogs-components-weblogfiles\/00-00-00-48-12\/1830.MigAD2003to2012c.png\"><img decoding=\"async\" src=\"http:\/\/blogs.technet.com\/resized-image.ashx\/__size\/550x0\/__key\/communityserver-blogs-components-weblogfiles\/00-00-00-48-12\/1830.MigAD2003to2012c.png\" alt=\"\" border=\"0\" \/><\/a><\/li>\n<li>Close the command prompt.<\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<p><strong>Add the Active Directory Schema Console from MMC<\/strong><\/p>\n<ol>\n<li>Open a MMC console on your new Windows Server 2012 computer.<\/li>\n<li>Click <strong>File<\/strong> &gt; <strong>Add\/Remove Snap-in&#8230;<br \/>\n<\/strong><\/li>\n<li>In the <strong>Add or Remove Snap-ins<\/strong> window, <em>select<\/em> <strong>Active Directory Schema<\/strong> and <em>click<\/em> the <strong>Add &gt;<\/strong> button.<a href=\"http:\/\/blogs.technet.com\/cfs-file.ashx\/__key\/communityserver-blogs-components-weblogfiles\/00-00-00-48-12\/2313.MigAD2003to2012d.png\"><img decoding=\"async\" src=\"http:\/\/blogs.technet.com\/resized-image.ashx\/__size\/550x0\/__key\/communityserver-blogs-components-weblogfiles\/00-00-00-48-12\/2313.MigAD2003to2012d.png\" alt=\"\" border=\"0\" \/><br \/>\n<\/a><\/li>\n<li><em>Click<\/em> <strong>OK<\/strong> to continue.<\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<p><strong>Change the Schema Master<\/strong><\/p>\n<ol>\n<li>In the same MMC console, <em>right click<\/em> <strong>Active Directory Schema<\/strong> and <em>select<\/em>\u00a0<strong>Change Active Directory Domain Controller&#8230;<\/strong>\u00a0in the sub menu.<\/li>\n<li>In the <strong>Change Directory Server<\/strong> window, <em>select<\/em> <strong>This Domain Controller or AD LDS instance.<br \/>\n<\/strong><\/li>\n<li>Select your new 2012 Windows Server.<\/li>\n<li><em>Click<\/em> <strong>OK<\/strong> to continue.<\/li>\n<li>A warning will appear stating that the Active Directory Schema snap-in in not connected. <em>Click<\/em> <strong>OK<\/strong> to continue.<\/li>\n<li>Hover over the <strong>Active Directory Schema <\/strong>folder in the folder tree to ensure the new Windows Server 2012 computer is\u00a0shown.<\/li>\n<li>Now<em> right click<\/em> <strong>Active Directory Schema<\/strong> and <em>select<\/em>\u00a0<strong>Operations Master&#8230; <\/strong>in the sub menu.<\/li>\n<li>In the <strong>Change Schema Master<\/strong> window, <em>click<\/em> <strong>Change<\/strong> to transfer the schema master role to the 2012 Windows Server.<\/li>\n<li>When asked if you are sure you wish to transfer the\u00a0schema master role to a different computer, <em>click<\/em> <strong>Yes<\/strong>.<\/li>\n<li>Once the schema master is successfully transferred, <em>click<\/em> <strong>OK<\/strong> to continue.<\/li>\n<li>C<em>lick<\/em> <strong>Close<\/strong> to close the <strong>Change\u00a0Schema Master<\/strong> window.<\/li>\n<li>In the MMC,<em> click<\/em> <strong>File<\/strong> &gt; <strong>Exit<\/strong>.<\/li>\n<li>When asked to save the console, <em>click<\/em> <strong>No<\/strong>.<\/li>\n<\/ol>\n<p>Once completed, open the\u00a0Active Directory Users and Computers console to verify that the Active Directory database successfully replicated to your new Windows Server 2012 computer.\u00a0 Be aware that the database replication may take some\u00a0time depending on the number of objects in Active Directory.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>Removing the 2003 Windows Server from the Global Catalog Server<\/strong><\/p>\n<ol>\n<li>Open<strong> Active Directory Sites and Services<\/strong> on your new Windows Server 2012 computer.<\/li>\n<li><em>Expand<\/em> the <strong>Sites<\/strong> folder, then the <strong>Default-First-Site-Name<\/strong> folder, then the <strong>Servers<\/strong> folder.<\/li>\n<li>Expand both listed servers. One should be your new 2012 Windows Server and one should be you 2003 Windows Server.<\/li>\n<li><em>Right click<\/em> <strong>NTDS Settings<\/strong> found under your\u00a0old 2003 Windows Server.<\/li>\n<li>In the sub menu, <em>select<\/em> <strong>Properties<\/strong>.<\/li>\n<li>Under the <strong>General Tab<\/strong>, <em>unselect<\/em> <strong>Global Catalog<\/strong> and then <em>click<\/em> the <strong>Apply<\/strong> button.<\/li>\n<li><em>Click<\/em> <strong>OK<\/strong> to continue.<\/li>\n<li>Close the\u00a0<strong>Active Directory Sites and Services <\/strong>window.<\/li>\n<li>Verify that your new 2012 Windows Server is running the FSMO role by opening the command prompt in Administrative view and running the following command: <strong>Netdom query fsmo.<br \/>\n<\/strong><\/li>\n<li>In the <strong>Network and Sharing Center<\/strong>, be sure to change the Preferred DNS server to match the Alternate DNS server, then delete the IP address listed under the Alternate DNS server\u00a0should it currently be pointed to the old 2003 Windows Server.<\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<p>All that&#8217;s left is to demote the old 2003 Windows server by first adding the new 2012 Windows Server as the Primary DNS, followed by running DCPROMO to demote the old 2003 Windows server.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Step-By-Step: Active Directory Migration from Windows Server 2003 to Windows Server 2012 http:\/\/blogs.technet.com\/b\/canitpro\/archive\/2013\/05\/27\/step-by-step-active-directory-migration-from-windows-server-2003-to-windows-server-2012.aspx Anthony Bartolo<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[21,4],"tags":[],"class_list":["post-1263","post","type-post","status-publish","format-standard","hentry","category-migration","category-windows"],"_links":{"self":[{"href":"https:\/\/wildow.com\/index.php?rest_route=\/wp\/v2\/posts\/1263","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wildow.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wildow.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wildow.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wildow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1263"}],"version-history":[{"count":3,"href":"https:\/\/wildow.com\/index.php?rest_route=\/wp\/v2\/posts\/1263\/revisions"}],"predecessor-version":[{"id":1641,"href":"https:\/\/wildow.com\/index.php?rest_route=\/wp\/v2\/posts\/1263\/revisions\/1641"}],"wp:attachment":[{"href":"https:\/\/wildow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1263"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wildow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1263"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wildow.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1263"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}