<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2523 " id="quads-ad2523" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>
<p>Current Environment</p>
<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2524 " id="quads-ad2524" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2522 " id="quads-ad2522" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2526 " id="quads-ad2526" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<p>Microsoft Active Directory 2008R2 with Exchange 2010</p>
<p>Requirements for migration</p>
<p>1- New Windows Server 2012 R2 server to be prepared. </p>
<p>2- Join the new Server to the old Dc.</p>
<p>First I will be Installing the new Server windows 2012 R2 which I will migrate all the roles to after preparing it and joining it to the domain as in the following snapshots.</p>
<p><a href="http://lh3.googleusercontent.com/-FMtiShLRuKo/VVC8BKozaiI/AAAAAAAAOxs/IiK577eXn9s/s1600-h/clip_image001%25255B3%25255D.png"><img alt="clip_image001" src="https://lh6.googleusercontent.com/8F6qUp19_jlzMkBsauUfLtBvjs7qjiYKeKIt4RMCb4SFE7ZJEsyHIvzJjoDjbpKXQuvuSP-ee7tZGiRgWan8sCjB2cJCtvJQ_AVtFXOcB6UsFiZ9Ldpa=w472"></a> 

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2525 " id="quads-ad2525" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>
 
</p>
<p>Below I will add the server to the current existing DC. </p>
<p><a href="http://lh3.googleusercontent.com/-kWL2mC_VHi4/VVC8DCRiV3I/AAAAAAAAOx8/YsrCVOv7KD4/s1600-h/clip_image002%25255B3%25255D.png"><img alt="clip_image002" src="https://lh3.googleusercontent.com/Uv8ONpZWcoFXP0qboiJf3nfBHemOVT1fHvkcQqtM3_LX6iWeTEQyRftEx8-m_r4G6JgZXJPVKKmvPwuWAr-HfJwgNq_5bXxx09vktBfjYZexP4Z-l8A=w371"></a></p>
<p>Here I will leave the default settings but will have to enter the DSRM password as it&#8217;s mandatory.</p>
<p><a href="http://lh3.googleusercontent.com/-8BDL6Ired0w/VVC8EoopYII/AAAAAAAAOyM/7JrLX696yI8/s1600-h/clip_image003%25255B3%25255D.png"><img alt="clip_image003" src="https://lh5.googleusercontent.com/aHWkQAbTb4jcHtjp0K0pgMZLgXXKw8qOtlAfuP7HsaCdQKciZiWYwzRbeLsvOkSMfH0Q0cn9iUTZjHOsOhDIEylPElSNqQx6tPp9oVowUxi0CY6gHPk=w371"></a></p>
<p><a href="http://lh3.googleusercontent.com/-ZUO1PQ0NFZo/VVC8GXt79lI/AAAAAAAAOyc/mjSbCscp1VI/s1600-h/clip_image004%25255B3%25255D.png"><img alt="clip_image004" src="https://lh6.googleusercontent.com/2gDAYq58RDDEb1COwVC1pP6bxJT84-dX7yXxebpxsZukxn28E57l7ywW5p_6wpFYineoomsTsHkUEUzb-c-5udI_KvWx_Cg_ucyyyxlKYDP3e1r2XA=w673"></a></p>
<p><a href="http://lh3.googleusercontent.com/-NBb49b09adU/VVC8IVekfjI/AAAAAAAAOys/Om0qVGs-DWg/s1600-h/clip_image005%25255B3%25255D.png"><img alt="clip_image005" src="https://lh6.googleusercontent.com/2h9BYKpY-sOp2YnwhAkAbIXMcOZ67RJZHPkkrB3yBo2EhKzvzVPTeSnkGF9gBwPkS5adf751xzSd_EWVUux7ea0XPj4JHDcxvUeTC11uaQFiaqgJQw=w673"></a></p>
<p><a href="http://lh3.googleusercontent.com/-QfygAFadIo4/VVC8KKG16tI/AAAAAAAAOy8/3dbkWdK3CWw/s1600-h/clip_image006%25255B3%25255D.png"><img alt="clip_image006" src="https://lh6.googleusercontent.com/o-N8V6G3JJx0WSPzGEazorV4AOsNIfty-LisEMjldSqRE5J_WfKNI6iUfLItbMzCvxPCXOi8nMOG5EQFIsKmVsYekE-dYz3cOGjuqUOIq5JkMmlubHw=w673"></a></p>
<p><a href="http://lh3.googleusercontent.com/-RyCXCFHxNWw/VVC8L3C9b7I/AAAAAAAAOzI/Gs7m0MCoUjg/s1600-h/clip_image007%25255B3%25255D.png"><img alt="clip_image007" src="https://lh3.googleusercontent.com/M27Nh3trV02pG-azBZVZ5_8R_xYp-KuWu7bCBM0B0F66_2CHWslc0-rc0c5L3IrZLM8yKJI_Gub1Slk_YgQCuMWCM9897e7np573HwaxEn3vvAWjAw=w673"></a></p>
<p><a href="http://lh3.googleusercontent.com/-4HZ6U-foFOQ/VVC8NrFySxI/AAAAAAAAOzY/cq0yAfMsf6A/s1600-h/clip_image008%25255B3%25255D.png"><img alt="clip_image008" src="https://lh3.googleusercontent.com/vqHvePoQGXzL8v1oEKyKIWmmmIJeHdHWWGtq4uB6UoQRuaeNl6PECHRAvcajOeUK-XXbdJ9GodSJoWXsu5LJy7AoS0qa7uqWvp-BJ-qS_itMNLZ6MA=w673"></a></p>
<p><a href="http://lh3.googleusercontent.com/-oW8JySastVc/VVC8PN8UmXI/AAAAAAAAOzo/7pkO30pdXmo/s1600-h/clip_image009%25255B3%25255D.png"><img alt="clip_image009" src="https://lh6.googleusercontent.com/MMm2NfAoB3jXFsf8khVfOwfZUvN-X62QVqapYPod6oqg_zj-By9yM55gzMUvU6LEsdyVcMpjPWZ740bgL_S1qrjzSUbNTQ2bX2gqoPorrgAVOEZtxw=w673"></a></p>
<p><a href="http://lh3.googleusercontent.com/-WEAg94fc3h0/VVC8QqpfYYI/AAAAAAAAOz0/PNZn3d2l42Y/s1600-h/clip_image010%25255B3%25255D.png"><img alt="clip_image010" src="https://lh5.googleusercontent.com/aKWVUiIscMXwt4xpfv_5ILBX8HVUuzZx9Dusld_DQX2O_yV96rkMI4dQxFm1z69PH6Gtw6fKHam-DViF5ms-dBNteNyLrs-3cgpQkEh7R1JlVwjiOxQ=w673"></a></p>
<p>to migrate the AD Operations Master roles. The simplest way to move these roles is via PowerShell. On Server 2012 AD PowerShell modules, this can be done from anywhere. Simply run the following command to view you current configuration, and change them:</p>
<p>PS C:\>; netdom query FSMO</p>
<p><a href="http://lh3.googleusercontent.com/-zRXXrbyjvhM/VVC8SNO84vI/AAAAAAAAO0E/0fiUVFpaA1I/s1600-h/clip_image011%25255B3%25255D.png"><img alt="clip_image011" src="https://lh6.googleusercontent.com/FeuU3cPqRk0_klmK8V7_W53JA3jVWFcfkxLp_IutKknh4f4IPpIQF1hLv30jAPE6vItOvsME5sWa-qRUJ-qbTt8d9DShaZcVlhRNNotR-Z5kO5U0GQ=w572"></a></p>
<p>In order to Migrate all the roles from the DC (Kibtek.local) to the new Server I will use the following powershell cmdlet. </p>
<p>Move-ADDirectoryServerOperationMasterRole -identity &#8220;Destination DC&#8217;s Hostname&#8221; -OperationMasterRole 0,1,2,3,4</p>
<p>Once you copy and paste the powershell after you edit the destination host DC name you it will take couple of minutes to migrate all the FSMO roles to the new Server. </p>
<p><a href="http://lh3.googleusercontent.com/-NxclFq79dls/VVC8TjMmVqI/AAAAAAAAO0U/0o7L9VvTaA0/s1600-h/clip_image012%25255B3%25255D.png"><img alt="clip_image012" src="https://lh4.googleusercontent.com/dEvsMOFHIueT01aADKfwA-nRAvHPuBqNTPOpkTie6wr8TU2fgj77ubsDyf2wmfMPWMe4yeyhqBRqfMNJeKOsA-v86Y-xfcM-3MYhXx9eoa47VNjI9g=w673"></a></p>
<p>Making sure that all the roles have been migrated :</p>
<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2529 " id="quads-ad2529" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<p>Netdom query FSMO</p>
<p><a href="http://lh3.googleusercontent.com/-JqJYSdKA_ls/VVC8W1u7KCI/AAAAAAAAO08/tnNTuO8T5uM/s1600-h/clip_image014%25255B3%25255D.png"><img alt="clip_image014" src="https://lh4.googleusercontent.com/KZmkrYBx64fwPRAYM9ygI2uZQZfZGDssC8-iYh1uU3oJkcidDOR471QQWMGH4uhfB67AB7Ws1E-2vwey0nMx-lP4QKqkf2T5uZtoU8zv-brJSMsDIm8=w371"></a></p>
<p><a href="http://lh3.googleusercontent.com/--nrJkeD9La8/VVC8YQXlKII/AAAAAAAAO1M/uIvrcQcLBbw/s1600-h/clip_image015%25255B3%25255D.png"><img alt="clip_image015" src="https://lh5.googleusercontent.com/9uZGRS1AT7pMSMuXpi44QvjuDVza10sVGwwH6TMLOtd_6hsQNiL93bfeR2YY45yhO5MIeFD5OkKe3__9YuqjPM1BOP5yeGvUf22Bi4VAAgUYYPodiMw=w572"></a></p>
<p>Adding second DC</p>
<p><a href="http://lh3.googleusercontent.com/-hX7eXC2CR0s/VVC8afcJ7iI/AAAAAAAAO1c/G8sSX6VjPG4/s1600-h/clip_image016%25255B3%25255D.png"><img alt="clip_image016" src="https://lh6.googleusercontent.com/lZjOHTN_GVo9FNnyCvEMB-cVeNsbCOqjXwVRnip0694ZKf6beynGvm5_9BQ7AM0paqyms9Nm0XsJ6CikJo4C129JcucbNV3t_gE6yEhqoCf3N9C4jIc=w673"></a></p>
<p>Reference:</p>
<p><a href="https://www.google.com/url?q=https%3A%2F%2Ftechnet.microsoft.com%2Fen-us%2Flibrary%2Fee617229.aspx%3Ff%3D255%26MSPPError%3D-2147217396&;sa=D&;sntz=1&;usg=AFQjCNFxXinIYmsk51GUIEf9tUvI-3FwXg">https://technet.microsoft.com/en-us/library/ee617229.aspx?f=255&;MSPPError=-2147217396</a></p>
<p>Source: Default-First-Site-Name\DC2</p>
<p>******* 1 CONSECUTIVE FAILURES since 2015-03-23 19:37:45</p>
<p>Last error: 8524 (0x214c):</p>
<p>The DSA operation is unable to proceed because of a DNS lookup failure.</p>
<p>Naming Context: CN=Configuration,DC=kibtek,DC=local</p>
<p>Source: Default-First-Site-Name\DC2</p>
<p>******* WARNING: KCC could not add this REPLICA LINK due to error.</p>
<p>Naming Context: CN=Schema,CN=Configuration,DC=kibtek,DC=local</p>
<p>Source: Default-First-Site-Name\DC2</p>
<p>******* WARNING: KCC could not add this REPLICA LINK due to error.</p>
<p>Naming Context: DC=kibtek,DC=local</p>
<p>Source: Default-First-Site-Name\DC2</p>
<p>******* WARNING: KCC could not add this REPLICA LINK due to error.</p>
<p><a href="http://lh3.googleusercontent.com/-Xhpg52exwe4/VVC8bzLQ3sI/AAAAAAAAO1o/Dt7-QBL3Pi0/s1600-h/clip_image017%25255B3%25255D.png"><img alt="clip_image017" src="https://lh3.googleusercontent.com/jwwXoWO-SUrwyokm7F__VenY6uVutlcxi8LmuTc_Zm0jcYXFTolVSUaghh50cTflR-8T9ojiG-BBeiRIMu-q1yxdLSU-wY_rLqoWfQzWgyYUMarR8oo=w673"></a></p>
<p><strong>Resolution:</strong></p>
<p>After joining new DC you will see this error until the replication with the PDC and schema master is finished.</p>
<p>Use the repadmin /syncall to hasten the sync process.</p>
<p><a href="http://lh3.googleusercontent.com/-IqdsVf0D64c/VVC8dhsJRGI/AAAAAAAAO14/GR8-nkmWrPY/s1600-h/clip_image018%25255B3%25255D.png"><img alt="clip_image018" src="https://lh6.googleusercontent.com/JrA7UwSZ504Bwl0S0aalUlJQnhKzaDpwDfOokSfkViVeseM-mhAffVcTpB799-YMabCpi_GSqYJXT-feUfn2SCaXqTjY4kcEXKGeaBYwjBFdDr1EDlxX=w472"></a></p>
<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2527 " id="quads-ad2527" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<p>Hope this was useful</p>

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2528 " id="quads-ad2528" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>


Reset and manage your Active Directory users' Passwords Active Directory is one of the most…
Finding Exchange Database hidden mailboxes. Story:Maybe you have been in this situation before, trying to…
If you're using a Proxy server in your firewall or in your network and have…
Story:I got some clients that have reported some of their users being locked out and…
Delegate Permissions This is a code that I have wrote recently to check if an…
Story: I got a request from a client who constantly gets CVs and have to…