Migrating AD from Windows Server 2003 to Windows Server 2016

Active Directory (AD), a service provided by Microsoft, functions as a central database for securely storing and managing information about user accounts, groups, applications, and other critical resources. It primarily functions as a directory service for Windows domain networks. Windows Server 2016, the eighth version of Windows Server operating system, was launched in 2016. In comparison to the earlier versions, Windows Server 2016 has multiple improved features for AD, such as privileged access management, Windows Hello for Business, and single sign-on features.

Follow these steps to migrate your AD from Windows Server 2003 to Windows Server 2016:

1) Installing Windows Server 2016

Before migrating AD from Windows Server 2003, Windows Server 2016 must first be installed on a new system.

2) Configuring the IP addresses in Windows Server 2016

After the installation process is complete, the IP address must be configured on the new Windows Server 2016. The following are the prerequisites:

• The existing domain and the IP address must be located in the same subnet.
• The DNS server should remain the same as it is in the existing domain.

3) Joining the Windows Server 2016 with AD from the Windows Server 2003 domain

Once the required IP settings are made, Windows Server 2016 will be joined with the existing AD from the Windows Server 2003 domain.

1. Open the Server Manager in Windows Server 2016.
2. Click on Local Server in the left pane.

3. Select the Workgroup and click Change.
4. In the Computer Name/Domain Changes dialog box, type the name of the existing domain (xyz.local) in the Member of Domain option.
5. In the user name field, type Administrator, enter the domain administrator account password, and click OK.
6. Restart the system to complete the process and apply the changes made.

4) Logging in to the Windows Server 2016

Once the restart process is completed, follow the following steps to log in using the domain administrator account:

1. Press Ctrl + Alt + Del.
2. Once the login screen is displayed, click on the Other User option.
3. In the user name field, enter the domain name in this format:
4. “DomainName\Administrator” (for instance, “xyzdomain\Administrator”).
5. Enter the password and click Enter to log in.

5) Raising the functional levels of domains and forests

1. Open Active Directory Users and Computers in Windows Server 2003.
2. Right-click on the domain name and choose Raise Domain Functional Level.

3. Choose Windows Server 2003 from the drop-down list.

4. Click Raise and select OK when the warning message is displayed.
5. Once the functional levels are raised, click OK when prompted by the information message.
6. Click and open Active Directory Domain and Trusts.
7. Choose Raise Forest Functional Level.

8. Ensure that Windows Server 2003 is selected.

9. Click Raise and select OK.

6) Adding the AD domain services to Windows Server 2016

Follow the below steps to add the AD services to Windows Server 2016 and promote it as a domain controller (DC):

1. Open the Server Manager in Windows Server 2016.
2. Select Add Roles and Features.
3. Click Next when prompted at the information window.
4. Select role-based or feature-based installation and click Next.

5. The Select Destination Server dialog box will be opened.
6. Click on the Server Selection option from the left pane.
7. Choose the Select a server from the server pool option and select the new Windows Server 2016 as the destination server, Click Next.
8. Select Active Directory Domain Services, choose Add Features, and click Next.

9. If required, select Restart the destination server automatically and click Yes.
10. Select Install to begin the installation process. Once complete, click Next.

7) Promoting the new server as DC

Follow these steps to promoted the Windows Server 2016 as the domain controller:

1. Choose Promote this server.
2. Choose Add a domain controller to an existing domain and check if the existing domain name is selected.
3. In the Domain Controller Options field, no changes to the default settings are required.
4. For the Directory Services Restore Mode, enter the domain administrator password and select Next.
5. When the Additional Options screen is displayed, choose the option to replicate from the old AD server 2003 and select Next.
6. No changes need to be made to the default paths. Select Next.
7. Once the Prerequisites Check is successful, select Install. The installation process and restarting the server may take several minutes.

8) Transferring the Operations Master role to Windows Server 2016

The role of the Operations Master should be transferred from the Windows Server 2003 to the Windows Server 2016. Follow these steps:

1. Open the Server Manager on Windows Server 2016.

2. Choose Active Directory Users and Computers.
3. Click Operations Masters.
4. Select Change from the RID tab and choose Yes.
5. On successful transfer, select OK.
6. Click Change from the PDC tab and select Yes.
7. Select Change from the Infrastructure tab and select OK.
8. Once the role has been transferred and the changes are displayed in all tabs, select Close.

9) Changing the AD DC to Windows Server 2016

Follow these steps to change the AD DC to Windows Server 2016:

1. In the Server Manager, select the Tools menu and choose Active Directory Domains and Trusts.
2. Select the Change Active Directory Domain Controller option.
3. Check if the Current Directory Server is the new one and select OK.

10) Changing the domain naming master role

1. Open Active Directory Domains and Trusts.
2. Choose the Operations Master.
3. Select Change to transfer the domain naming master role to the new Windows Server 2016 and choose Yes to confirm it.
4. Select OK.

11) Changing the schema master role

1. On the new Windows Server 2016, open the Command Prompt.
2. Run the following command:

xyzdomain schmmgmt.dll

3. Select OK when prompted at the information message.
4. Enter mmc and click Enter.

5. Once the MMC console is opened, select File and choose Add/Remove Snap-in…

6. On the left pane, choose the Active Directory Schema.
7. Click on Add and select OK.
8. In the MMC console, select Change Active Directory Domain Controller.
9. Once the Change Directory Server window is open, choose the new Windows Server 2016 and select OK.
10. Select Yes and choose OK when prompted.
11. Select Operations Master from the Active Directory schema.
12. Select Change and OK to close the window.

12) Verifying the transfer of FSMO roles

1. Open the Command Prompt on the new Windows Server 2016.
2. Run the following command:

xyz query fsmo

3. Check and verify if all the FMSO roles have been transferred from the old server.

13. Removing the old server from the global catalogue

1. Open Active Directory Users and Computers on the new server.
2. Select Domain Controllers.
3. Right-click on the old server name and select Properties.
4. Choose NTDS Settings.
5. If the box next to Global Catalog is checked, uncheck it and select OK.
6. The replication process will take a few minutes to complete.

14. Modifying the preferred DNS address

1. Open the Network and Sharing Center on the old server.
2. Select Properties from the Local Area Connection.
3. Click on Internet Protocol TCP/IP.
4. Change the Preferred DNS server address to the new server IP address.
5. Change the Alternate DNS server address to the old server IP address.
6. Select OK.

15. Demoting the old server from DC

Follow these steps to remove the AD services from the old Windows Server 2003:

1. Open the Command Prompt on the Windows Server 2003.
2. Run the following command:

dcpromt

3. Select Next when prompted by the Active Directory Installation Wizard to remove AD from the old server.

4. The local administrator account will require a new password. Enter a new password and click Next.

5. The remaining data will be transferred to the new Windows Server 2016. Once the transfer is complete, click Finish.

6. Restart the system to apply the changes.