21/12/2021
Matan Sigavker
Windows Server 2003R2, Windows Server 2016, Windows Server 2019
0

Hi Folks,
this guide will be very interesting for system admins who want to migrate Domain Controller to new server, or even just for expand your knowledge.

First at all! before you starting to migrate your server, you must know what are you doing and what the consequences of every change you do, also you need to get know about “FSMO ROLES”, “SYSVOL” “RFS”, “DFSR”.

The 5 FSMO roles are:

Schema Master – one per forest
Domain Naming Master – one per forest
Relative ID (RID) Master – one per domain
Primary Domain Controller (PDC) Emulator – one per domain
Infrastructure Master – one per domain

Schema Master: is common to all domains and must be consistently processed without duplicates or copy errors and is responsible for how updates and changes are made to it.

Domain Naming: When you add a domain in an organization, the domain name must be unique and therefore the Domain Naming checks this as it must be enabled when you add a new domain.

PDC Emulator: his role is responsible for updating all of the Forest’s policies. This role deals with security policies and passwords for everything in Forest.

RID Master: This role is responsible for the ID number of each object in AD. Every User and object we see visually is interpreted in the system as a “ID” SID. The RID is responsible for this mechanism – creating the SID and distributing them to the rest of the DCs in the organization. What is called a SID – each user has a Security Identify which he received from the Rid Master. The SIDs are in regular use, for example when connecting a computer to the user. The computer is authenticated using the unique SID in addition to the username and password.

Infrastructure Master: It updates the objects between the domains, in addition the Global Catalog verifies or compares with the DATA in the Global Catalog on all domains

FRS, DFSR, SYSVOL:

In 2000, Microsoft introduced the File Replication Service (FRS) in Windows Server in order to asynchronously replicate file data. Since then, Microsoft released the Distributed File System Replication (DFSR) and deprecated FRS.

This change occurred between Windows Server 2003 to 2008 and a lot of people missed this step of the upgrade process. Both 2008 and 2012 continued to function with FRS SYSVOL replication, but with 2016 and above, people using FRS will not be able to introduce a new domain controller into the Active Directory environment.