New server: pdc and group policy control transfer?

[woody]

I have my shiney new dell server which I want to take on the role of the main domain controller and to take authority over group policy settings on the domain.

 

I have promoted the new server to become a domain controller, but what do I do to get it to take the reigns from the current main server?

 

I also downloaded and installed Group Policy Management console but this wanted me to change the domain controller to a different one - presumably the current server from which I edit group policies.

 

I'm sure it's straight forward, but thought I'd post here for a quick answer before I start trawling through Mr Gate's website.

[Geoff]

Do you mean you want to transfer the FSMO roles?

[woody]

I have figured that out now. Is group policy one of those FSMO roles? If so, how do I transfer it?

[djm968]

I think thats what he means Geoff.

 

This link should help.

 

http://support.microsoft.com/kb/324801

[petectid]

As Geoff mentions you need to transfer the FSMO roles to your new server, also make sure its a Global Catalogue server. How to transfer FSMO roles here

[Geoff]

I have figured that out now. Is group policy one of those FSMO roles? If so, how do I transfer it?

 

No, have a read of this KB article.

 

http://support.microsoft.com/kb/324801

[djm968]

I may be missing something but I must say that I am a little concerned that you are unable to edit GPO from the new DC. Have you configured DNS correctly?

[Geoff]

I may be missing something but I must say that I am a little concerned that you are unable to edit GPO from the new DC. Have you configured DNS correctly?

 

It's probably not finished replicating.

[djm968]

There we go.... I was missing something!

[woody]

I may be missing something but I must say that I am a little concerned that you are unable to edit GPO from the new DC. Have you configured DNS correctly?

 

No, I can edit GP from the new server, if I point the GP management console to the current server. But I want the new server to CONTROL GP, not just edit it. When I transfer FSMO roles, will this include GP controll as well?

[petectid]

GP should work on both servers. Do you intend on keeping two Domain controllers? If so you can share the FSMO roles between them but there are a few rules you are best using. If your going to demote the old server then move all the FSMO roles and the Global Catalogue to the new DC. You will also need DNS on the new server if you have not installed it already. Do not demote your old server until everything works as it should or you will break the domain.

[woody]

GP should work on both servers. Do you intend on keeping two Domain controllers? If so you can share the FSMO roles between them but there are a few rules you are best using. If your going to demote the old server then move all the FSMO roles and the Global Catalogue to the new DC. You will also need DNS on the new server if you have not installed it already. Do not demote your old server until everything works as it should or you will break the domain.

 

Thanks for that. I do intend to leave the old server as a domain controller but it is getting on now so I don't want it to do too much of the work. Which FSMO roles if any would it be worth leaving on the old server?

 

Also how do I transfer the global catalogue? Can't seem to find anything about this on microsoft support.

[djm968]

 

Also how do I transfer the global catalogue? Can't seem to find anything about this on microsoft support.

 

 

Active Directory Sites and Services

 

http://support.microsoft.com/kb/313994

[woody]

Forget the last post. It is spelled CATALOG on the microsoft website!

[Geoff]

Silly Americans

[woody]

Ok, I got it all transferred over now except Infrastructure manage FSMO which windows nicely told me should be kept seperate from the Global Catalog(ue) controller if you have more than one DC. So I've left that role on the old server. Well, got to give it something to do

 

Anyway, seeing as I have installed 2003 Server R2 on the new server, thought I'd install some of the new features through Add / Remove windows components. I installed the File Server Management bit, but when I run it I get an error message:

 

'Cannot find resource file C:\Windows\System32\FsmMsg.dll'

 

I looked in the system 32 folder and the file is there! Tried uninstalling it and re-installing it but I just get the same. Can't find anything on this in Microsoft support, or even from googling 'FsmMsg.dll'.

 

Any ideas?

[djm968]

Has the FSRM service started? Any error messages in the event viewer?