Shulou(Shulou.com)06/03 Report--

Transfer the operation host in the domain to improve the domain function level!

one. Let's start with raising the functional level of the domain!

In the Windows domain, with the update of the operating system, many new features are not supported by the previous operating system, but the domain environment has been built on the operating system (such as Windows server 2003) for a long time and cannot use a higher level of functionality (such as Windows server 2008 R2)! At this point, you need to use today's experimental content to improve the domain function!

two. If you want to transfer the operation host, you have to mention the operation host.

1. There are five operating hosts: architecture host, domain naming host, PDC simulation host, RID host and infrastructure host!

1.1.Architectural host: used to control the definition of all objects and attributes in the whole forest of AD.

1.2. Domain naming host: control the addition or deletion of domains in the forest to prevent duplicate domain names in the forest.

1.3. PDC simulation host: 1). Responsible for time synchronization in the domain

2)。 Minimize replication wait time for password changes

3)。 Support for operating systems prior to Windows 2000

RID hosts: assign relative ID (RID) sequences to each domain controller in the domain.

1.5. Infrastructure host: responsible for updating references from objects in its domain to objects in other domains.

two。 There can be only one architecture host and domain naming host in the whole forest! There can only be one PDC host, one RID host, and one infrastructure host in each domain in the forest! Diagram:

three. Experimental topology diagram:

four. Experimental steps,

If you want to add the server of Windows server 2008 R2 to the domain of Windows server 2003, you need to extend the domain architecture and forest architecture of server 2003, update the permissions of Group Policy objects, and update AD's support for RODC.

1. First insert the system CD of server 2008 on server 2003! CD driver is D

two。 Open the command prompt and output the command "d:" to enter the CD!

3. Enter "cd support\ adprep" to enter the adprep directory

4. Enter the "adprep32.exe / forestprep" prompt to run the adprep warning!

Note: here the operating system of server 2003 is 32-bit version, if it is 64-bit version, you need to run the command adprep.exe / forestprep

5. Type "c" and press enter to start expanding server2003 AD's forest architecture! It will take a few minutes here, as shown in the figure:

6. Continue to enter the command "adprep32.exe / domainprep" to expand the domain architecture of server 2003 AD, as shown in the figure

7. Enter the command "adprep32.exe / domainprep / gpprep" to update group policy object permissions!

8. Continue to enter the command "adprep32.exe / rodcprep" to update AD's support for RODC! After completion, as shown in the picture

Note: extend the AD forest architecture before you can extend its domain architecture!

2) now join the server of 2008 R2 to the domain of 2003 and become the extra domain controller.

Note: after joining the domain and promoting to an additional domain controller, change the preferred DNS of 2008DC to point to itself.

Here you can build a user "Zhang San" to verify whether the user can log in normally on the client after upgrading the domain function level.

3) transfer operation host

1. Transfer the schema host, domain naming host, PDC host, RID host, and infrastructure host to 2008 R2 DC!

1.1 transfer Architecture Host

◆ runs the "mmc" command on 2003 DC and selects the menu "File" → to add / remove snap-ins "→ add" Active Diretory Schema, "Active Directory users and computers", "Active Directory domains and Trust relationships"!

◆ transfers the FSMO role to 2008 R2 DC

Open the command line on 2008 R2 DC and install the schema host management tool "regsvr32 schmmgmt.dll"!

◆ right-click the Active Diretory schema and select "change Domain Controller" here enter the computer name of the 2008DC. Click OK!

◆ right-click the Active Diretory schema, select "Operation Host" and click change!

1.2 transfer domain naming host!

◆ right-click the domain and trust relationship in the console and select change Domain Controller! Select the computer name of 2008DC!

◆ right-click the domain and trust relationship in the console, select the operation host, and click change!

1.3 transfer RID, PDC, infrastructure hosts

◆ click the lower left corner to start the "→" administrative tool "→" Active Directory users and computers "→ right-click domain name to change the domain controller, select 2008 computer name, click OK! Then right-click the domain name to select the operation host. Transfer RID, PDC, and infrastructure hosts respectively!

IV) uninstall the server 2003 DC domain

1. Open run, type dcpromo, and click next! Choose to be sure!

two。 Move on to the next step!

3. Set a new administrator password! (local administrator password, not domain)

4. Next, complete the uninstall!

5) upgrade the domain function level of 2008DC!

Click "start" → "management tool" → "domain and trust relationship", right-click the domain name, and choose to upgrade the domain function level! Promoted to 2008R2! Click OK! You can now see that the domain functional level has been upgraded to 2008 R2

Use Zhang Sandeng to record the domain on a client computer here! Notice that the client's DNS now points to 2008 R2 DC!

Now the 2008 server has become the primary DC for this domain! And all the information in the domain is retained!

Verification is complete. Experiment is over!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.