Migrate AD from 2012 to 2022

Question

Hi everyone

So i have customer with 2 DC on located on different site comunicated with vpn site-to-site.

SRVBO (Primary Domain)

SRVRN (Seconday Domain)

Both dc as running on VM on Proxmox Server just for info.

Now customer want migrate this DC to Windows Server 2022.

So i create 2 new VM with Windows Server 2022 and this is the step i perform:

1. Join Domain
2. Install Domain Service Role and Promote ad DC
3. Transfer FSMO Roles from SRVBO to DC01
4. Demote SRVRN and remove the roles AD.

Now i have three DC:

SRVBO(old PDC)

DC01 (new windows2022 PDC in the same network of SRVBO)

DC02 (new windows2022 secondary domain)

The problem is if i poweroff SRVBO for testing, and reboot both DC01 and DC02 is still on this blue screen "Applying computer settings" for 5-10 minutes and once arrive to the desktop if i open "User and Computers Active Directory" i get this error: Unable to locate naming information: The specified domain does not exist or cannot be contacted.

Answer 1

To be honest this thread has been running so long and so slowly I don't even remember the current status. With the problems you're having there's a good chance that domain health was in a broken state before this upgrade process was started which just adds to complication and confusion. I'd suggest moving roles off and demoting new ones, clear out the system and dfs replication event logs on original and then after reboot capture a new set of files to look at.

Answer 2

I checked the OneDrive today again and the files showed up!

• DC01 should have own static ip address (192.168.0.10) listed for primary DNS and loopback for secondary (127.0.0.1)
• DC02 should have own static ip address (192.168.2.10) listed for primary DNS and loopback for secondary (127.0.0.1)
• SRVBO should have own static ip address (192.168.0.11) listed for primary DNS and loopback for secondary (127.0.0.1)

After fixing above on each then do ipconfig /flushdns, ipconfig /registerdns, restart the netlogon services.

• SRVBO Windows Time service is not running
• DsGetDcName returned information for \SRVBO.SELLCOM.LOCAL, when we were trying to reach DC02.

This is problematic, do the sysvol, netlogon shares show up on DC02?

• DsGetDcName returned information for \SRVBO.SELLCOM.LOCAL, when we were trying to reach DC01.

This is problematic, do the sysvol, netlogon shares show up on DC01?

If not you could try a non-authoritative sync
https://learn.microsoft.com/en-US/troubleshoot/windows-server/group-policy/force-authoritative-non-authoritative-synchronization#how-to-perform-a-non-authoritative-synchronization-of-dfsr-replicated-sysvol-replication-like-d2-for-frs

• After you work through these ones if problems persist then put up a new set of files to look at.

--please don't forget to close up the thread here by marking answer if the reply is helpful--

Answer 3

Please run;

Dcdiag /v /c /d /e /s:%computername% >C:\dcdiag.log (run on PDC emulator)
repadmin /showrepl >C:\repl.txt (run on any domain controller)
ipconfig /all > C:\%computername%.txt (run on EVERY domain controller)
ipconfig /all > C:\problemserver.txt (run on problem server)

Also check the domain controller System and Replication (DFS or FRS) event logs for errors since last boot. Post the Event Source and Event IDs of any found. (no evtx files)

then put unzipped text files up on OneDrive and share a link.

Answer 4

Hi Dave

This is the link One Drive:

https://1drv.ms/f/s!AtoewrWi2bwigToONEEj_tD4JYQr?e=b0exA9

Thanks

Answer 5

Hi Dave

I don't know why you get "Access Denied" i try on different pc on many browser also in anonymous mode and i can see the file and open and edit, because the link i provide to you is public so anyone can view and edit the file.

Anyway i upload the folder on Dropbox here is the link:

https://www.dropbox.com/scl/fo/6isal8180as00vgo0fz4u/h?rlkey=jx1yhkcxjw9wepl31z6oxg0oo&dl=0

Thanks