Windows Server

Jochen Fahr · Guest

Hello NG,

Finally we've made it to w2k3...
But after the migration (12 hours at Saturday), I have some errors in my
eventlog.

I transported the following FSMO from the migration server to our new
server:

- Schema master
- Global Catalog
- PDC/RID/Infrastructure
- Domainmaster

I got no error message when I transported these.
Then I turned off the migration server.

Now I get this error message on my new server:

"This server is the owner of the following FSMO role, but does not consider
it valid. For the partition which contains the FSMO, this server has not
replicated successfully with any of its partners since this server has been
restarted. Replication errors are preventing validation of this role. "

This error comes for these FSMOs:
- DC=<domainname>,DC=<companyname>
- Infrastructure
- RID
- partitions
- Schema

How comes?
I mean, does AD need time to replicate from the migration server to the new
server?

We've waited about half an hour until we turned off the migration server to
let the new server overtake full control.

Hope you can help...

Jochen

Vincent Xu [MSFT] · Guest

Hi Jochen,

First I want to explain that we strongly recommend not to transfer the
infrastucture master role to a DC that hosts a GC. From your description, I
noticed that have done so.

Now I think we need to check if the FSMO roles are transfered successfully.

To determine which domain controller holds the RID master, PDC emulator, or
infrastructure master roles, perform the following steps.
1. Open Active Directory Users and Computers.
2. In the console tree, right-click Active Directory Users and Computers,
and then click Operations Masters.
3. Click the RID, PDC, or Infrastructure tab.

The name of the current operations master appears under Operations master.

To determine which domain controller holds the domain naming master role,
perform the following steps:
1. Open Active Directory Domains and Trusts.
2. Right-click Active Directory Domains and Trusts, and then click
Operations Master.
The name of the current domain naming master appears in the Change
Operations Master dialog box.

To determine which domain controller holds the schema master role, perform
the following steps:
1. Register the Active Directory Schema snap-in by running the following
command:
regsvr32.exe %systemroot%\system32\schmmgmt.dll
2. Click OK to close the message that indicates the registration succeeded.
3. Create a custom Microsoft Management Console (MMC) console.
4. Add the Active Directory Schema snap-in to the console.
5. In the console tree, right-click Active Directory Schema, and then click
Operations Master.
The name of the current schema master appears in the Change Schema Master
dialog box.

If the transfer failed, please follow the article to perform it again:

<http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Oper
ations/bde352aa-101a-4da1-872a-de18b2bb87fb.mspx>

But please note:not to transfer the infrastucture master role to a DC that
hosts a GC.

Best regards,

Vincent Xu
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

--------------------

Jochen Fahr · Guest

I want to add something...

When I use NTDSUTIL to check which roles are on my new server, I get the
information that my new server holds 5 roles:
- Schema
- Domain
- PDC
- RID
- Infrastructure

Well, although you wrote that it is not recommended to have an
infrastructure roles on a server who is GC, those error messages mustn't
occure...

Anyway, why is it so strongly not allowed to have an infrastructure roles on
a GC?

"Jochen Fahr" <jochen.fahr@asstec.com> schrieb im Newsbeitrag
news:%232Hi$h3tFHA.3548@TK2MSFTNGP10.phx.gbl...

Jochen Fahr · Guest

Hi Vincent,

all the operations master roles are set correctly and pointing to the new
server.

It seems to me, that the replication wasn't complete or hasn't started at
all.

Do I need to downgrade the migration server, so that it completes the
replication of the FSMO roles?

"Vincent Xu [MSFT]" <v-xuwen@online.microsoft.com> schrieb im Newsbeitrag
news:r1KKqb3tFHA.3160@TK2MSFTNGXA01.phx.gbl...

Vincent Xu [MSFT] · Guest

Hi Jochen,

Since the FSMO transfer is succeed,for your situation, I think we need to
move the data of old dc out of AD.

Please refer to following article to perform it:

216498 How to remove data in Active Directory after an unsuccessful domain
http://support.microsoft.com/?id=216498

If the infrastructure master and the global catalog are the same computer,
the infrastructure master will not function because it does not contain any
references to objects that it does not hold. But in a single domain forest,
the infrastructure master does not need to function because there are no
external object references for it to update.

Hope it helps.

Best regards,

Vincent Xu
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

--------------------

Jochen Fahr · Guest

Hello Vincent,

thank you for your help...
So you are saying, that the error messages are gone once I moved the
migration server out of my domain with dcpromo?

And the infrastructure issue is in that case not relevant to us, because we
have exactly this single domain forest situation.
So I can ignore that issue?

Greets,
Jochen

Vincent Xu [MSFT] · Guest

Hi Jochen,

I mean since the FSMO transfer is succeed we may try to remove the computer
from domain to test if the event still occurs.

If the computer is necessary you may re-join it into domain again later.

Or you may just ignore the event if there is no visible symptom I think.

Thanks.

Best regards,

Vincent Xu
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

--------------------

	Windows Server Forum Index -> Migration	All times are GMT
Page 1 of 1