Migrate AD from Win2k server to Windows 2003 server

I'm in the planning stage of migrating from a single DC (Win2k server) to a
new Windows 2003 server. The existing Win2k DC will eventually be retired
and perhaps be put to another use. My main concern is that I don't want to
have to reconfigure the client PC's for a different domain name (ie backup
all existing profile data, join to a different domain name and then copy the
"old domain name" profile data to the new profile).

Is there a quick way to migrate the existing Win2k AD to the new Windows
2003 server and keep the same domain name so I don't have to recreate user
profiles (these are not roaming profiles) on the network client PC's?

Thanks in advance for any suggestions!!

Very easy process if its not SBS2000.
You need Service Pack 2 Installed or higher. Recommend Having SP4 before you do this though.

Put in your windows 2003 server cd into the 2k domain controller.
Run CMD
Eg: CDROM = R:\
R:\I386\AdPrep.exe /forestprep
Press C to continue. Wait 5-10 minutes for completion depending on your server.

R:\I386\AdPrep.exe /Domainprep
Once done.
R:\I386\AdPrep.exe /Domainprep /gpprep
to update Group policy

Now on your 2003 Domain controller. run dcpromo
additional domain controller in existing forest.
type in credentials and netbios domain name.
select forest from browse.
Follow prompts. That should be it.

Couple of problems in the past i have come across is DNS not being setup correctly. where the forward lookup wasnt configured for active directory properly. was missing a heap or rpc entry's. Also if the schema updates didnt work i couldnt update.

If the process fails and it gives a error message. Cancel out of the wizard as if you press next it will join you to the old domain. Which you dont want as it will create a computer account for you on the old domain which you are migrating from.

Once you have successfully completed dcpromo and rebooted. Go into Active directory users and computers and make sure your new domain controller is under the domain controllers OU. Once that is done. Its time to transfer over all the Operational roles.

Go into Active Directory Users & Computers.
Right Click on the domain.
Click on Operations Masters
Change RID, PDC & infrastructure roles to the new server by pressing change.

Dont go into Raise Domain functional level as you will then not be able to remove the old DC.

Go into Active Directory Domains & Trusts
Right click on Active Directory Domains & Trusts on the top left
Click on Operations Master & change by pressing change.

Go into Active Directory Sites & Services
Expand the site and servers until you see your two servers. Old DC and new DC. Expand the new DC and right click on NTDS Settings and go properties. Tick the global catalog box. Press ok.
Expand the old DC right click on NTDS settings and go properties. Untick the global catalog box. Press ok.
Right click on the new Server NTDS settings. All tasks. Replicate Now. same with old server.

Install DNS server on the new server. Configure as a secondary zone. configure zone transfer from the old server to allow ip of new server. then configure your secondary zone to be updated from the old dc. Note: the zone name has to be the same as the one on the old dc. Then right click the zone and update from master. Once you can see the dns settings are replicated. Right click the zone. go properties. under main page change the type from secondary to primary. and tick the box saying active directory integrated. now dns is configured. Also install DHCP and WINS if its your only server. then change your network card settings to point to your new dc. eg local ip.

Now you should be able to turn off the old server. go to a workstation and logon to the domain and it should authenticate to the new dc.

Once your happy its all up and working fine. run dcpromo on the old dc to demote it from Active directory. Be sure to write down all the shares on the old DC if you havent already and the permissions assigned to them. As you will need to copy them across. When you copy your data from your old dc to your new dc. use xcopy with the switch that keeps security information. I forget what it is. But your share security will need to be manually recreated on the new dc.

Then all you need to do is update logon scripts for network drives and printer mapping and you should be all sweet.

Hope this helps.

Andrew