DC迁移步骤

背景：硬件环境的更换,将老服务器DC1去掉,换上了新服务器DC2 （结合部分seize情况下的操作）

环境：
ServerOS:2K3Standard Edition
ClientOS:XP Pro

步骤：
1.dcpromo将DC2提升为域控服务器，添加DNS服务，重新加载DNS，让区域生成SRV，修改dns指向地址为自己

2.查看 FSMO 角色
c:program filessupport tools>netdom query fsmo
Schema owner                 dc1.msft.com
Domain role owner            dc1.msft.com
PDC role                     dc1.msft.com
RID pool manager             dc1.msft.com
Infrastructure owner         dc1.msft.com
The command completed successfully.
C:Program FilesSupport Tools>
或者
c:program filessupport tools>ntdsutil
partition management
select operation target
connections
connect to server dc1.msft.com
quit
list roles for connected server
C:Program FilesSupport Tools>

3.转移 FSMO 角色 由DC1->DC2，DC1去掉GC，DC2加上GC
c:program filessupport tools>ntdsutil
roles
connection
connect to server dc2.msft.com
quit
transfer domain naming master
transfer infrastructure master
transfer pdc
transfer rid master
transfer schema master
quit
quit
C:Program FilesSupport Tools>

4.dcpromo将DC1降级

5.DC1退出域，修改ip，dns地址

6.迁移共享文件，以及更改权限相应；修改本地ip，dns地址，以及相应dns记录

7.在额外域控制器(dc2.msft.com)上通过ntdsutil.exe工具把主域控制器(dc1.msft.com)从ＡＤ中删除；
C:Program FilesSupport Tools>ntdsutil
ntdsutil: metadata cleanup
metadata cleanup: select operation target
select operation target: connections
server connections: connect to domain test.com
select operation target: list sites
Found 1 site(s)
0 – CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=msft,DC=com
select operation target: select site 0
Site – CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=msft,DC=com
No current domain
No current server
No current Naming Context
select operation target: List domains in site
Found 1 domain(s)
0 – DC=msft,DC=com
Found 1 domain(s)
0 – DC=msft,DC=com
select operation target: select domain 0
Site – CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=msft,DC=com
Domain – DC=msft,DC=com
No current server
No current Naming Context
select operation target: List servers for domain in site
Found 2 server(s)
0 – CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=te
st,DC=com
1 – CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=te
st,DC=com
select operation target: select server 0
select operation target: quit
metadata cleanup:Remove selected server

出现对话框，按“确定“删除DC1主控服务器。
metadata cleanup:quit
ntdsutil: quit

使用ADSI EDIT工具删除Active Directory users and computers中的Domain controllers中DC1服务器对象，打开ADSI EDIT工具，展开Domain NC[dc2.msft.com]，展开OU=Domain controllers，右击CN=DC1，然后选择Delete，把DC1服务器对象删除，如图1；
在Active Directory Sites and Service中删除DC1服务器对象，打开Administrative tools中的Active Directory Sites and Service，展开Sites，展开Default-First-Site-Name，展开Servers，右击DC1，选择Delete，单击Yes按钮

7.测试客户端登陆及共享文件访问权限