Try   HackMD

Windows Server 2003 AD 升級到 2022演示

Windows 網域樹系目前最高提供到2016版本,2003 AD要升級為2022中間有些許問題,包括介面、網路設定、FRS轉DFSR等等。

一、環境建置

(一)、虛擬機配置

本次Lab建立三台虛擬機進行作業,如下說明:

  1. Windows Server 2003, IP:10.100.100.170 (第一台AD)
  2. Windows Server 20012R2, IP:10.100.100.171、DNS:指原本的AD,也就是第一台 (中繼AD)
  3. Windows Server 2022, IP:10.100.100.172 、DNS:指上一台,也就是成為中繼站的AD(升級後最後一台AD)

(二)、第一台AD環境建置

以上說明3台虛擬機的配置後,接下來直接建立AD網域、樹系,域名取名為:anontokyo.local 需要將其他的DC加入到anontokyo.local,因為2003預設是2000等級,所以這裡先將樹系等級升級,並且確認樹系等級提升至2003。

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

二、五大角色移轉

(一)、第二台機器進入網域並轉移五大角色

將第二台加入網域並升級為DC,中間過程較簡單,不再贅述。

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

接下來需要將五大角色轉移到2012R2上,以下演示一次:

到2012的操作主機點選RID PDC 基礎結構,並點選變更;到Active Directory 網域及信任 一樣進行變更

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

最後一個比較麻煩,打開CMD,輸入regsvr32 schmmgmt.dll;電腦搜尋mmc,點選新增/移除嵌入式管理單元,將Active Directory 架構加進去,再來變更目錄伺服器,選取2012主機並確定。

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

至此,五大角色轉移完成,在CMD輸入netdom query fsmo 確認是否轉移成功。接續將舊DC移除,CMD輸入DCPROMO

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

(二)、2012移轉至2022

這步驟會出現錯誤,主要跟FRS與DFSR有關。

在這之前,我們先把樹系提升至2012R2,

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

開啟CMD依照以下步驟進行指令的輸入:

  1. dfsrmig /SetGlobalState 1,等待全域進入準備完成

    Image Not Showing Possible Reasons
    • The image file may be corrupted
    • The server hosting the image is unavailable
    • The image path is incorrect
    • The image format is not supported
    Learn More →

  2. dfsrmig /getglobalstate,顯示DFSR全域狀態進入準備完成

    Image Not Showing Possible Reasons
    • The image file may be corrupted
    • The server hosting the image is unavailable
    • The image path is incorrect
    • The image format is not supported
    Learn More →

  3. dfsrmig /setglobalstate 2,重新導向複寫。

    Image Not Showing Possible Reasons
    • The image file may be corrupted
    • The server hosting the image is unavailable
    • The image path is incorrect
    • The image format is not supported
    Learn More →

  4. dfsrmig /setglobalstate 3,狀態顯示已排除

    Image Not Showing Possible Reasons
    • The image file may be corrupted
    • The server hosting the image is unavailable
    • The image path is incorrect
    • The image format is not supported
    Learn More →

  5. dfsrmig /getglobalstate dfsrmig /getmigrationstate,檢查狀態。

    Image Not Showing Possible Reasons
    • The image file may be corrupted
    • The server hosting the image is unavailable
    • The image path is incorrect
    • The image format is not supported
    Learn More →

接下來將2022升級成DC後加入網域,並轉移五大角色,最後2012 DC退出網域,升級樹系。

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

到這裡,2003到2022 AD的升級動作就結束了,樹系最高等級就是2016。