All posts by moh10ly

Active Directory Migration 2008R2 to 2012 R2

Current Environment

Microsoft Active Directory 2008R2 with Exchange 2010

Requirements for migration

1- New Windows Server 2012 R2 server to be prepared.

2- Join the new Server to the old Dc.

First I will be Installing the new Server windows 2012 R2 which I will migrate all the roles to after preparing it and joining it to the domain as in the following snapshots.

clip_image001

Below I will add the server to the current existing DC.

clip_image002

Here I will leave the default settings but will have to enter the DSRM password as it’s mandatory.

clip_image003

clip_image004

clip_image005

clip_image006

clip_image007

clip_image008

clip_image009

clip_image010

to migrate the AD Operations Master roles. The simplest way to move these roles is via PowerShell. On Server 2012 AD PowerShell modules, this can be done from anywhere. Simply run the following command to view you current configuration, and change them:

PS C:\> netdom query FSMO

clip_image011

In order to Migrate all the roles from the DC (Kibtek.local) to the new Server I will use the following powershell cmdlet.

Move-ADDirectoryServerOperationMasterRole -identity “Destination DC’s Hostname” -OperationMasterRole 0,1,2,3,4

Once you copy and paste the powershell after you edit the destination host DC name you it will take couple of minutes to migrate all the FSMO roles to the new Server.

clip_image012

Making sure that all the roles have been migrated :

Netdom query FSMO

clip_image014

clip_image015

Adding second DC

clip_image016

Reference:

https://technet.microsoft.com/en-us/library/ee617229.aspx?f=255&MSPPError=-2147217396

Source: Default-First-Site-Name\DC2

******* 1 CONSECUTIVE FAILURES since 2015-03-23 19:37:45

Last error: 8524 (0x214c):

The DSA operation is unable to proceed because of a DNS lookup failure.

Naming Context: CN=Configuration,DC=kibtek,DC=local

Source: Default-First-Site-Name\DC2

******* WARNING: KCC could not add this REPLICA LINK due to error.

Naming Context: CN=Schema,CN=Configuration,DC=kibtek,DC=local

Source: Default-First-Site-Name\DC2

******* WARNING: KCC could not add this REPLICA LINK due to error.

Naming Context: DC=kibtek,DC=local

Source: Default-First-Site-Name\DC2

******* WARNING: KCC could not add this REPLICA LINK due to error.

clip_image017

Resolution:

After joining new DC you will see this error until the replication with the PDC and schema master is finished.

Use the repadmin /syncall to hasten the sync process.

clip_image018

Hope this was useful

Installing child domain in Windows 2012 R2 RTM causes replication failure

After Installing child domain in Windows 2012 R2 RTM causes the replication to fail.

Symptoms : Event ID 1202, 1126 and 1645

Evet ID 1202

clip_image001[6]

Event ID 1126

Event ID 1645

clip_image002[4]

After installing new child domain and join it to the Root domain

To show the child domain’s DNS partition enlisting use

Dnscmd /enumdirectorypartitions

clip_image003[4]

Add child domain’s DNS to the forest

dnscmd /enlistdirectorypartition

First Solution

Make sure windows is full updated, After you apply Windows update the problem should be gone.

clip_image004[4]

If not check the second solution:

Second: Make sure that your Child administrator and root administrator’s passwords are not identical.

Third: Make sure trust is set properly using the following command

clip_image005[4]
clip_image006[4]