Sunday, September 12, 2010

Adding W2K8 server core (domain controller) to 2003 AD + BIND (DDNS)

Adding W2K8 server core (domain controller) to 2003 AD + BIND (DDNS)
CentOS 5.5

References:




Current infrastructure :

Windows Server 2003 AD with BIND as DDNS server (No Windows DDNS)
1 W2K3 domain controller = dc1
Domain name = mydomain.local

Project Goal:

Add second domain controller  running Windows Server 2008 server core to 2003 AD domain.
1 W2K8 domain controller = dc2

Preparation:

Raise forest and domain levels to Windows Server 2003 on dc1

Run adprep from W2K8 CD on dc1
            adprep /forestprep
            adprep /domainprep /gpprep

On BIND (DDNS)Add IP address of dc2 to acl in /var/named/chroot/etc/named.conf

Build W2K8 domain controller (server core)

Configure tcp/ip settings using netsh
            IP address
            Subnet Mask
            Gateway
            DNS server

Add primary dns suffix and connection specific dns suffix using regedit.

HKLM/System/CurrentControlSet/Services/TcpIP/Parameters/Domain = primary dns suffix(mydomain.local)
HKLM/System/CurrentControlSet/Services/TcpIP/Parameters/Interfaces/Domain = connection specific dns suffix(mydomain.local)

Enable ddns using netsh.
netsh  interface ip set dns name=”2” source=static  addr=IP Address of dc2 register=primary

Rename server.
            Netdom RenameComputer %COMPUTERNAME% /newname:dc2

Restart server.
            Shutdown /r /t 0

Build answer file:

Type notepad and add the following:

[DCINSTALL]
UserName=Administrator
UserDomain=mydomain.local
Password=*
SiteName=Default-First-Site-Name.
ReplicaOrNewDomain=replica
ReplicaDomainDNSName=mydomain.local
DatabasePath="%SYSTEMROOT\NTDS%"
LogPath="%SYSTEMROOT%\NTDS"
SYSVOLPath="%SYSTEMROOT%\SYSVOL"
InstallDNS=NO
ConfirmGC=yes
SafeModeAdminPassword=*
RebootOnCompletion=yes

Run DCPromo
            Dcpromo /unattend:answer.txt

Test
After reboot login to dc2 and check BIND (tail –f /var/log/messages) for successful ddns updates.

Logging to dc1 and open Computer Managemet mmc and connect to dc2 and check the event logs.

No comments:

Post a Comment