The same forest migration of a domain
1. With the continuous updating of Microsoft products, the company will also update their products with Microsoft.
1) Microsoft products have a lifecycle. If the lifecycle comes, Microsoft will stop supporting it! -whether to support = whether to continue to provide patches
2) large companies must have vendor support in the process of running IT. -otherwise, you can't pass the IT audit!
two。 For a large company, domain upgrade is a planned and step-by-step task, not a short-term solution.
planning-demonstration-a small number of tests-step by step implementation-usability considerations-complete!
3. Native upgrade VS Migration
native upgrades can be done in theory, but few people do so in reality
migration: upgrade the real version mainly through migration in the actual project
4. Demo: 2008DC-2016DC
original environment: two DC:dc01 (192.168.10.2, primary DC), dc02 (192.168.10.3, backup DC)
In order to save the network resources of the server, had better adopt the step-by-step replacement method.
5. Active Directory health diagnostics must be run before migration to ensure that all items pass the test
Specific steps:
1) Let all client or server DNS and so on point to DC01, and let DC02 shut down for a week.
[purpose: to make the domain work even if the DC02 is missing! ]
2) Delete DC02: delete AD, and then withdraw from the domain! -cancel GC in the site first
3) install a brand new WS2016 server, computer name: DC02 IP address: 192.168.10.3
4) make the new DC02 become the backup domain controller of DC01 [become BDC and automatically copy everything in the active directory]
5) Let the current environment run for a week to see if there are any anomalies!
6) make the new DC02 become the master DC [Migration of operating hosts], manually modify the DNS direction on the DHCP, and the preferred DNS points to 192.168.10.3
7) Let DC01 shut down for a week to see if it has any impact on the environment
8) Delete DC01: delete AD, and then withdraw the domain
9) install a brand new WS2016 server, computer name: DC01 IP address: 192.168.10.2
10) make DC01 a backup domain control
