question

MacJohnsonII-7805 avatar image
0 Votes"
MacJohnsonII-7805 asked JiaYou-MSFT edited

Migrating Win 2011 SBS to Win 2019 Std when Exchange is not an issue.

Hello All
I have a Win SBS 2011 server and Exchange has been moved to MS 365 so I do not have to worry about moving Exchange from the SBS 2011 to the 2019 server. Should I go thru a migration or just start fresh on the 2019 server . If migration path is the choice what would be the best process to go about this when migrating the following:

FSMO roles
Active Directory Domain Services
DNS
DHCP
Folders, folders and shares
Users
Computers
Security and/or permissions


Thank you for any thoughts

windows-serverwindows-server-migration
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
2 Votes"
DSPatrick answered

I don't see any show stoppers. Good to go.

-please don't forget to upvote and Accept as answer if the reply is helpful--


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
2 Votes"
DSPatrick answered

--please don't forget to upvote and Accept as answer if the reply is helpful--


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
2 Votes"
DSPatrick answered

Then you'll nee to remove the 2019 domain controller then confirm health is 100% if all is good then do the FRS->DFSR migration
https://techcommunity.microsoft.com/t5/Storage-at-Microsoft/Streamlined-Migration-of-FRS-to-DFSR-SYSVOL/ba-p/425405
and after completion check health is 100% again, then you can raise DFL to at least 2008 level, then you can introduce a 2019 domain controller. (follow the detailed steps in my reply above)

--please don't forget to upvote and Accept as answer if the reply is helpful--


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
2 Votes"
DSPatrick answered

I feel foolish because I missed a step

Has the FRS->DFSR migration been completed?






5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
2 Votes"
DSPatrick answered

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--






5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
2 Votes"
DSPatrick answered DSPatrick edited

For the domain controller. The two prerequisites to introducing the first 2019 domain controller are that domain functional level needs to be 2008 or higher and older sysvol FRS replication needs to have been migrated to DFSR
https://techcommunity.microsoft.com/t5/Storage-at-Microsoft/Streamlined-Migration-of-FRS-to-DFSR-SYSVOL/ba-p/425405

I'd use dcdiag / repadmin tools to verify health correcting all errors found before starting any operations. Then stand up the new 2019, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over (optional), transfer pdc emulator role (optional), use dcdiag / repadmin tools to again verify health, when all is good you can decommission / demote old one.

I'd suggest asking the DHCP migration question here
https://docs.microsoft.com/en-us/answers/topics/windows-dhcp-dns.html

and the storage migration question here
https://docs.microsoft.com/en-us/answers/topics/windows-server-storage.html



--please don't forget to upvote and Accept as answer if the reply is helpful--






5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
1 Vote"
DSPatrick answered

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--






5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
1 Vote"
DSPatrick answered

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--




5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JiaYou-MSFT avatar image
1 Vote"
JiaYou-MSFT answered MacJohnson-3849 commented

HI MacJohnsonII-7805,

Since server 2019 standard has removed server essentials experience role, it is by design.
So the steps for migration is similar as the steps for migration from SBS 2011/server 2008r2 to server 2019 std.

we can refer below AD and DHCP migration video to do migration steps.

There are steps (including but not limited to these steps) listed here:
(1)Full system backup for SBS 2011 (System state & Data)
(2)Installing Server 2019 std on new Server and add it to existed SBS domain.
(3)Migrating Folders, folders and shares from SBS2011 to server 2019STD

(4)Migrating DHCP to hardware router or server 2019 std and check if migration successfully.
(5)Raising Forest and Domain Functional Level Windows Server 2008, then migrate FRS to DFSR ,before promote w2019 as replica DC.
(6)Promoting Server 2019 to PDC (Primary Domain Controller)
(7)checking replication between both DC servers.
(8)Transfering all FSMO from SBS2011 to W2019
(9)Removing AD service from SBS2011
(10)Unjoining all Computers Workstations from SBS 2011 and join them to server 2019STD
(11)Removing SBS2011 server from the network.

Active Directory Migration From Windows 2008 R2 to Windows Server 2019
https://www.youtube.com/watch?v=vuzrihbet1E

DHCP migration from Windows Server 2008R2/2012R2 to Windows Server 2016 (Step by step guide)
https://www.youtube.com/watch?v=8wdaeY7YmbY

Move Windows SBS 2011 Standard settings and data to the Destination Server for Windows Server Essentials migration
https://docs.microsoft.com/en-us/windows-server-essentials/migrate/move-windows-sbs-2011-standard-to-the-destination-server-for-migration


============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JiaYou,
Thank you for the detailed instructions.
I didn't see your post until recently when I asked DSPatrick some questions in reference to the migration steps.
Your info gives me a more secure feeling with what am going to attempt to do. I will be working on this today but I wanted to know is the original server going to be available to users during this process and when in the process besides step 11 removing SBS2011 from network will it not be available anymore.

I've got some reading to do but I will let you know how things went I will hopefully be doing the migration next Friday over the weekend.

Again Thanks for your time and the information.

0 Votes 0 ·

HI HI MacJohnsonII-7805,

in general, SBS2011 can only be acted as PDC with Full FSMO, this behavior is by design, so removing SBS2011 server from the network is a must. If you still want to use it in your current network, i think it need to be in other forest.

0 Votes 0 ·

Hello Jai-You and All,
Again many thanks for your steps.
I feel foolish because I missed a step and wanted to know if I could keep going after correcting the mistake or do I have to start over.
My mistake is I forgot to raise the functional level of the DC from Win server 2003 to Win Server 2008 and the promotion of the new ADC was stopped.
Can I just raise the functional level of the DC to Server 2008 or do I have to remove the AD role from the new ADC then raise the functional level of the DC to 2008 the add the AD role back to the new ADC?

Thank you for your thoughts

0 Votes 0 ·
MacJohnson-7597 avatar image
0 Votes"
MacJohnson-7597 answered JiaYou-MSFT edited

DSPatrick,
Will I need to unjoin and rejoin my workstations to the domain now that the 2011 SBS isn't handling the FSMO roles?
The reason I ask is because I had to reboot the original 2011 SBS and while it was rebooting I couldn't log in to the desktops I get an error message 106376-login-error-message.jpg

saying the security database on the server does not have a computer account for this workstation trust relationship. When the 2011 SBS comes back up all is fine again.
Thanks for any thoughts.


· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

HI

1.Please check if the issue computer accounts are existed in your original computer OU in ADUC on server 2019 and this account is not disable state?
108061-10.png

The Database on the Server Does not Have a Computer Account for This Workstation Trust Relationship
https://www.youtube.com/watch?v=pcPizQBR45k

2.Please run below powershell command on server 2019 and check if GlobalCatalog is on server 2019, if it is still on sbs2011, we need to migrate it to server 2019.

Get-ADForest |select -ExpandProperty GlobalCatalogs |Format-Table


0 Votes 0 ·
10.png (173.3 KiB)

HI MacJohnson-7597,

Is there anything I can help you?

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

0 Votes 0 ·

HI MacJohnson-7597,

Is there any progress on your question?


============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

0 Votes 0 ·