Windows Server 2003 AD 升級到 2022演示
Windows 網域樹系目前最高提供到2016版本,2003 AD要升級為2022中間有些許問題,包括介面、網路設定、FRS轉DFSR…等等。
一、環境建置
(一)、虛擬機配置
本次Lab建立三台虛擬機進行作業,如下說明:
- Windows Server 2003, IP:10.100.100.170 (第一台AD)
- Windows Server 20012R2, IP:10.100.100.171、DNS:指原本的AD,也就是第一台 (中繼AD)
- Windows Server 2022, IP:10.100.100.172 、DNS:指上一台,也就是成為中繼站的AD(升級後最後一台AD)
(二)、第一台AD環境建置
以上說明3台虛擬機的配置後,接下來直接建立AD網域、樹系,域名取名為:anontokyo.local
。
需要將其他的DC
加入到anontokyo.local
,因為2003預設是2000等級,所以這裡先將樹系等級升級,並且確認樹系等級提升至2003。
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
二、五大角色移轉
(一)、第二台機器進入網域並轉移五大角色
將第二台加入網域並升級為DC
,中間過程較簡單,不再贅述。
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
接下來需要將五大角色轉移到2012R2上,以下演示一次:
到2012的操作主機
點選RID
PDC
基礎結構
,並點選變更
;到Active Directory 網域及信任
一樣進行變更
。
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
最後一個比較麻煩,打開CMD
,輸入regsvr32 schmmgmt.dll
;電腦搜尋mmc
,點選新增/移除嵌入式管理單元
,將Active Directory 架構
加進去,再來變更目錄伺服器
,選取2012主機並確定。
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
至此,五大角色轉移完成,在CMD
輸入netdom query fsmo
確認是否轉移成功。接續將舊DC
移除,CMD
輸入DCPROMO
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
(二)、2012移轉至2022
這步驟會出現錯誤,主要跟FRS與DFSR有關。
在這之前,我們先把樹系提升至2012R2,
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
開啟CMD
依照以下步驟進行指令的輸入:
-
dfsrmig /SetGlobalState 1
,等待全域進入準備完成
。
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
-
dfsrmig /getglobalstate
,顯示DFSR全域狀態
進入準備完成
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
-
dfsrmig /setglobalstate 2
,重新導向複寫。
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
-
dfsrmig /setglobalstate 3
,狀態顯示已排除
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
-
dfsrmig /getglobalstate
dfsrmig /getmigrationstate
,檢查狀態。
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
接下來將2022升級成DC後加入網域,並轉移五大角色,最後2012 DC退出網域,升級樹系。
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
到這裡,2003到2022 AD的升級動作就結束了,樹系最高等級就是2016。