Migrate Windowws Server 2008 R2 DC to WIndows Server 2016 DC

背景说明

由于之前windows 2008 r2 vm的v2v过程失败，加之原来vm性能不能满足现有网络的要求，决定重新部署ad-ds、dns、dhcp服务到物理服务器上

系统版本

• windows server 2016 standard

步骤如下

1. 在一台hyper-v 2016的VM中Windows Server 2016 Standard 并部署ad-ds、dns服务，命名为dc3，作为Additional DC 参考[1][2][3][4]

2. 将dc1上的fsmo角色迁移到dc3，参考[5][6][7][8][9]

3. 降级dc1为成员服务器[10][11]

4. 将dc1从ad/site中删除

5. 在bare-metal主机安装Windows server 2016并依次安装ad-ds、dns服务，命名为dc1加域成为dc

6. 迁移fsmo角色到dc1

相同步骤的处理dc2，待dc2完成后删除掉dc3，即完成

  Move-ADDirectoryServerOperationMasterRole -Identity dc3 -OperationMasterRole SchemaMaster, DomainNamingMaster, PDCEmulator, RIDMaster, InfrastructureMaster

参考

• [1][Step-By-Step: Setting up Active Directory in Windows Server 2016]( https://blogs.technet.microsoft.com/canitpro/2017/02/22/step-by-step-setting-up-active-directory-in-windows-server-2016/ )

• [2][Promote Windows Server Core 2016 To Be a Domain Controller Using PowerShell]( https://www.ntweekly.com/2017/09/27/promote-windows-server-core-2016-domain-controller-using-powershell/ )

• [3][Chad's Quick Notes – Installing a Domain Controller with Server 2016 Core]( https://blogs.technet.microsoft.com/chadcox/2016/10/25/chads-quick-notes-installing-a-domain-controller-with-server-2016-core/ )

• [4][How to build a server 2016 domain controller (Non-GUI) and make it secure]( https://medium.com/@rootsecdev/how-to-build-a-server-2016-domain-controller-non-gui-and-make-it-secure-4e784b393bac )

• [5][Use PowerShell to add an additional Domain Controller to an existing Windows Server 2012 Active Directory Domain]( http://mikefrobbins.com/2013/03/14/use-powershell-to-add-an-additional-domain-controller-to-an-existing-windows-server-2012-active-directory-domain/ )

• [6][How to Move FSMO Roles on Windows Server 2016]( http://msptechs.com/move-fsmo-roles-windows-server-2016/ )

• [7][Step-By-Step: Migrating Active Directory FSMO Roles From Windows Server 2012 R2 to 2016]( https://blogs.technet.microsoft.com/canitpro/2017/05/24/step-by-step-migrating-active-directory-fsmo-roles-from-windows-server-2012-r2-to-2016/ )

• [8][STEP-BY-STEP GUIDE TO MIGRATE ACTIVE DIRECTORY FSMO ROLES FROM WINDOWS SERVER 2012 R2 TO WINDOWS SERVER 2016]( http://www.rebeladmin.com/2016/10/step-step-guide-migrate-active-directory-fsmo-roles-windows-server-2012-r2-windows-server-2016/ )

• [9][server2012 R2 辅助域控制器提升为主域控[夺取5个角色]]( http://www.btfw.org/windows/475.html )

• [10][活动目录实战系列七（降级主DC为成员服务器）]( http://blog.51cto.com/hlfxmsb/170878 )

• [11][Demote Windows Server 2016 Domain Controllers](http://www.azure365pro.com/demote-windows-server-2016-domain-controllers/)

• [12][Active Directory domain controllers changes]( https://serverfault.com/questions/843004/active-directory-domain-controllers-changes/843049)

• [13][DC Upgrade from Windows Server 2008 R2 to Windows Server 2016]( https://social.technet.microsoft.com/Forums/en-US/79b3fd1d-8d47-4b36-b94f-b720691c9634/dc-upgrade-from-windows-server-2008-r2-to-windows-server-2016?forum=winserverDS )

• [14][Migrate Windows 2008r2 DC to windows server 2016]( https://partnersupport.microsoft.com/en-us/par_servplat/forum/par_winserv/migrate-windows-2008r2-dc-to-windows-server-2016/ab47d7bb-7fd9-456a-ba5a-d27e01d308e3?auth=1 )

• [15][Windows Server Active Directory升级2016问题]( https://partnersupport.microsoft.com/zh-hans/par_servplat/forum/par_winserv/windows-server-active/9c8926e6-3837-4551-859d-a77d2e9d8989 )

• [16][Windows server 2012 R2 双AD域搭建(AD+DHCP+DNS)]( https://blog.csdn.net/u012402276/article/details/52838052 )