ActiveDirectory crash during migration from 2k3 to 2k12R2

Question

Good evening,

"You are my only hope Obi-Wan Kenobi..."

Migrating from 2k3 to 2k12 failed and nothing works anymore :(

• I added the 2k12 to the domain (it's a VM for the moment because the second server is 2k19, I need to use an intermediate server.)
• I migrated the forest from 2000 to 2003
• I launched the promotion of 2k12 in AD+DNS server (the DHCP is managed by the router)
• the "netdom query fsmo" command returned the 2K12 server for all fields.
• the 2 servers appeared well in the OU for the domain controllers
• On the 2K12, I could see AD users well
• Role deletion not working, I used "dcpromo /forcemoreval" it was a big mistake :(
• 2k3 is shutdown now and roles are removed
• 2k12: the dashboard displays AD DS and DNS correctly
• 2k12: BPAs don't launch for DNS
• 2k12: BPA for AD returns 2 warnings (it detects that it is a virtual machine and that the OUs are not protected against accidental deletion).
• on 2k12, the "net share" command returns only C$, IPC$, ADMIN$

Is it still salvageable?

THANKS

Answer 1

Hi @Anonymous

Before demoting the DC 2003 , you should check the domain controller health and fix any problem in case of problem.

It seems that DNS zone replication was not completed correctly between DC 2003 and 2012.

It's important before any Domain controller demotion or promotion to check domain controller health.

If you can restore the first DC 2000 , you should relaunch the upgrade. If it's not the case I recommend you to build new domain and migrate all users and servers to it.

Please don't forget to mark helpful answer as accepted

Answer 2

Please run;

Dcdiag /v /c /d /e /s:%computername% >C:\dcdiag.log (run on PDC emulator)
repadmin /showrepl >C:\repl.txt (run on any domain controller)
ipconfig /all > C:\%computername%.txt (run on EVERY domain controller)

Also check the domain controller System and Replication (DFS or FRS) event logs for errors since last boot. Post the Event Source and Event IDs of any found. (no evtx files)

then put unzipped text files up on OneDrive and share a link.

Dcdiag /skip:systemlog /v /c /d /e /s:%computername% >c:\dcdiag.log

Answer 3

Thanks for a so quick answer.

Here's the link :

https://1drv.ms/u/s!Agb0oEgmq3_dgvw_l1IA_I5cBFvGaA?e=IvXafh

DFS Event log reports errors 1202 & 6012 for source DFSR

Answer 4

thanks @Dave Patrick & @Thameur-BOURBITA you are both right.

I decided to create a new domain from scratch. The previous one was build for 2000 so 20 years ago (in a far galaxy ^^).

I had to leave each computer from old domain and add them to the new one, transfer documents, images, desktop. There's only 10 computer, so it took only 1 day of work. Glad to not have 1 000 computers ^^.

Thanks again for help & time.