Active Directory Migration From Windows 2008 R2 to Windows Server 2019

In this video, we will migrate our Active Directory from a Windows Server 2008 R2 to a Windows Server 2019.
Note: For this demonstration i have used Virtaul lab created in Oracle VirtualBox.
This Step-By-Step guide was created to give the basic idea of Active Directory Migration.
Six Simple Steps:
Step:1 Join Windows Server 2019 to the Domain
Step:2 Preparing your existing forest via the adprep command
for Windows Server 2019 DC.
Step:3 Promoting the Windows Server 2019 Server domain controller.
Step:4 Check Replication between both DC’s.
Step:5 Transfer FSMO roles to Server 2019.
Step:6 Remove AD services from Server 2008 R2(optional).
Check Out my blogs on Windows Server 2019:
msftwebcast.bl...

[@avinabh99]

Encountered error "Verification of replica failed. The specified domain [DomainName] is still using the File Replication Service (FRS) to replicate the SYSVOL share. FRS is deprecated." What can be done

[@avinabh99]

Eliminated the error with this link techcommunity.microsoft.com/t5/Storage-at-Microsoft/Streamlined-Migration-of-FRS-to-DFSR-SYSVOL/ba-p/425405

[@Blizzard976]

Try this link kzbin.info/www/bejne/oJ2Xp6Jrp6lkbqM

[@rira2005]

Thisone works for me. www.tech-faq.net/dfs-migration-active-directory/

[@netinfo21]

Check this : kzbin.info/www/bejne/oJ2Xp6Jrp6lkbqM

[@isnizamiharbi3892]

same error, what the solution?

[@BigCahona]

Thank you for this concise explanation of migrating from 2008R2 to 2019 AD

[@davidjoelhall]

This video is *still* the gold standard. I did this migration today and this video was a fantastic walk through of the process.

[@MSFTWebCast]

Thank you David.

[@1ajaypaul]

hi, did you have to upgrade the schema? i run the upgrade process in a test environment and promoting the 2019 server, it done the schema upgrade as part of the process

[@davidjoelhall]

@@1ajaypaul sorry, I don't recall if I had to do the schema upgrade separately

[@1ajaypaul]

@@davidjoelhall ok. Thanks for replying. After a little research. There’s no need of your introducing a newer DC.

[@AjaySingh-mj6cy]

When I was doing this activity I faced this issue "adprep failed to verify whether schema master has completed a replication cycle after last reboot" I also resolved this issue during migration from 2008 to 2019. Excellent Job and your way of explanation is highly appreciated with great learning experience, thanks bro.. Well done keep it up..

[@MSFTWebCast]

Thank you..

[@jasodanandvyas2565]

So I've been checking online and everywhere they say we have to migrate from 2008>2012>2016>2019, i'm relieved that this video alleviates those tedious steps. Thanks.

[@davidjoelhall]

If you're doing upgrades, then it's recommended to do that. This video is migrating to another VM/server running a later version of the OS.

[@DoggieA]

This is great! It shows step by step of what I need to do on both servers. I actually promoted Windows 2019 to DC without doing those 3 adprep's, but Win2019 seems to be smart enough to have completed them, since the registry entry shows scheme number of 88 right after the DC promo. Not sure if Win2019 is that smart, so I demoted it again and redid the adprep's, this time it confirmed that the schema has already been updated. This video is a big help!! Awesome.

[@veronicaduff5561]

This video instruction was fabulous. I've been procrastinating our migration to Server 2019 for some time. Now I'm ready to put this project behind me. Thank you for a very high-quality presentation.

[@mohammedghouse9524]

Appreciated your perfect solution for Windows Servers Migration. I have used the same procedure and successfully Migrated on my Production Environment. Thanks you so much.

[@MSFTWebCast]

Great to hear!

[@Gaffa3007]

Such a big thank you for this tutorial. Been years since I did this last and my eyes were starting to roll till I found this. You're worth more money.

[@patricksimons560]

It worked for met to migrate an SBS 2011 server to a Windows 2022 standard server. I owe you a good beer!

[@MSFTWebCast]

Thank You for the beer.

[@jasonwesbrooks4466]

Excellent instruction. Followed to the letter and everything worked great.

[@MSFTWebCast]

Glad it helped

[@user-sc2gu9wx7x]

This worked very well for me, thank you for your complete and detailed instruction

[@MSFTWebCast]

Great to hear!

[@gkhachiyan]

Great tutorial! One thing I did see though (unless I missed it somehow) was moving an authorized DHCP server from the old DC to new one. If you had only one DC, most likely it ran the DCHP as well. Otherwise, really great video.

[@MSFTWebCast]

Yes, we have dedicated video on it.

[@timn0042]

Great job and your step by step process made my job look so simple. You're my hero and keep up the good work !!! THANK YOU !!!

[@arun242]

Very useful video dear. Very nice presentation 👍👍

[@rahulknair3927]

Best video i have watched ever. Its working perfectly for me. Thank You

[@jimmyjet07]

Excellent tutorial. I have two sites which are moving to Server 2019 and this was very helpful and easy to follow. Thank you!

[@selva1977]

Excellent Video. You have explained step by step very clearly, particularly the FSMO move. Great work buddy. It would be more useful If you show the DNS manager IP details after decom the 2008 R2.

[@MSFTWebCast]

Noted

[@allbeebeen8667]

Really appreciate your effort to make this Video, it was very helpful to implement same steps in Production environment, wish you all the best, may god bless you

[@MSFTWebCast]

Thank You!

[@Ivandyk77]

Thaks for this video, It help me to migration in a client, thaks for your work from Colombia

[@pkokkinis]

This was nicely done and very accurate. Thank you for putting it together!

[@cls7155]

Excellent Video. The steps you have provided are very systematic and easy to follow. Keep it up !!! Looking forward for more video's from you

[@darwinph7516]

Awesome tutorial! Thank you very much! By any chance that you also have a tutorial with regards to File Server Migration from 2008R2 over to 2019? Looking forward to your other videos!

[@VikasKhair]

Thanks for the wonderful video and clear instructions

[@hicalls]

Thanks for tutorial bro, i will implement your tutorial into my customer environment and before doing that i will take a snapshot on it.

[@MSFTWebCast]

Yeah backups or snapshots are necessary. You can also create a clone from snapshot to test the migration first.

[@54tutu8]

24:50 transfer fsmo roles 28:27 check DNS replication 30:34 remove AD services from 2008 (no need to uncheck GC first)

[@doolabi]

Thanks for this tutorial, very detailed and worked fine.

[@Shinare73]

This excellent. I wish you also would have also included DHCP as one of the services needed to migrate over. Thank you!

[@Tech-geeky]

DCHP is far simpler..... run the following from Commmd Prompt netsh dhcp server export all so for example: netsh dhcp server export c:\dhcp.txt all copy that text file to new server, then install dhcp role.. but do not add scope (when it comes to define scope, leave blank and click "Next") after install of dhcp role, open command prompt and run : netsh dhcp server import all ie: replace with physical path.

[@chandrasekharpanda6408]

Your videos really awesome

[@MSFTWebCast]

Thank you so much.

[@anm3037]

Warm Greetings for this awesome Tutorial

[@MSFTWebCast]

Thank you!

[@jamilshahafridi]

Great Tutorial

[@jamischmohe]

How do I give you all the kudos?! Thank you for this video. It saved me today! Huge, huge help! There is no way I can thank you enough for this.

[@MSFTWebCast]

Great to hear!

[@cuneytkurt3675]

@@MSFTWebCast I'm following you and watched this video at least 3 times. I'm thinking to migrate my 2008 DC to 2019 DC this week. I tested at my test lab everything works fine. I had disscussed about User files at the own PCs. I thought that they will not be effected ( there's no user files and datas at 2008 DC ) but my friend advised me to take a full backup of all users. Did you test this issue at user computers? Thanks for your post :)

[@MSFTWebCast]

​@@cuneytkurt3675 If you are just migrating Domain controllers than there is nothing going to change on client side. If users data's are on client computer than that is not going to impact. But if you have group policy with UNC paths, home directory or roaming profile in your setup and if it is stored on domain controller itself then you need to address it first or need to migrate to some other location. Hope I am making some sense here.

[@cuneytkurt3675]

@@MSFTWebCast Thanks for your response. I will try this migration on live company structure. I hope this will work and wish not to have any issue on client site.

[@MSFTWebCast]

@@cuneytkurt3675 If you need any help let me know on my email address. One more thing which is not covered in video is you need to perform Sysvol ntfrs to dfsr migration (for group policy). Do that first and then start the migration. Do not remove your old dc's for atleast week or so.

[@awais.muhammad38]

Fabulous

[@Agelluisdominguez]

Thanks!!, Great

[@syedhussain322]

Excellent really enjoyed the steps you showed . Made it look very easy thank you

[@ktdo95133]

Very understandable, love it. Thank you.

[@MSFTWebCast]

Glad it was helpful!

[@castigohd]

excellent explanation. Thank you

[@flaviolago880]

Thanks for this wonderful tutorial

[@JabeyeAmoozesh-p6x]

Thank you!

[@nozynoz]

Cheers for the video, only sticking point was 37.57, when looking into the regedit, was unable to get the schema a cross.

[@Tech-geeky]

21:59 To prevent the need to constantly go back and forth with replication, explained Inter-Site Transports and click "ip"... Right click site link in the right pane, and go to "properties". change value from 'Replicate every" to 15 minutes (default is 180) 3 hours Regardless in some cases, when you click ok,, it should replicate "immediately" and should not requite much effort to get it done correctly. :) Windows versions after 2008 should be 15 minutes by default.... as any changes to replication time-frame must be done both ways... so if needed, it will be under same location.

[@robertlong4917]

@ 29:00 you are checking the SOA numbers matching. I just did this and my msdcs .domain SOA on my new machine is 2 numbers higher on my win2k19 than my 2k8 server. How do I fix this or does it matter? Everything else went Great. Excellent video.

[@MSFTWebCast]

It will sync automatically, not to worry about it.

[@robertlong4917]

I just checked again this morning and you are correct. THANK YOU for this video. Instructions are Excellent!

[@MidnightWulfie]

Great tutorial, thank you. If needing to add a third DC (DC3 for example) to eventually remove the older DC1, should the "Replica From" on step at 15:30 in this tutorial, be be to replicate from "DC2" (which holds the 5 FSMOs), or would it be better to replicate from "Any Domain Controller"? Also, in that scenario (of 3 DCs), what is the best way to configure the NICs on all servers in regards to the IPv4 Preferred DNS Server settings (as shown in one section around 17:05 (or 18:16) and 18:30 in this tutorial?) - Ultimately, I will end up with DC2 and DC3 only, but I need DC1 to still be DC for a little longer - any tips on the above mentioned configuration are greatly appreciated! Thanks again.

[@globalcharts369]

you should always replicated from Primary Domain Controller. and it would better to give Ip address of SRV which you are migrating the PDC role to.

[@xxJFXxx]

Perfect! Great video, thank you very much!

[@DhyanNrl]

I deeply appreciate your effort to provide the cristal clear tutorial it would be very much helpful to the people. I have my domain controller of windows server 2008 STANDARD in a production environment, Can I migrate it to server 2012 R2 or server 2019, using the same steps, or do I need to upgrade my 2008 standard to R2 first?

[@MSFTWebCast]

Microsoft Documents says that it needs Server 2008 R2 but with Server 2008 it also work. You can migrate Server 2008 to 2012 R2 or Server 2019. Keep in mind that you need to upgrade FRS to DFSR.

[@cydmansg1979]

I've following you for quite sometime now and all your videos I would say, they are all amazing. Straight to the point and helpful. Next Year 2024 around Jan or Feb, we are planning to migrate our on-prem active directory. We have 4 active directory, 2x in AWS they are both WinServ 2012, 2 onprem, 1x 2008 R2 and 1x 2012. Our Domain and forest function level are both WinSer 2008 R2. The idea is, we want to reuse the same IP and hostname of this 2008 R2 AD. Would you please just help me to layout the steps like what you did here in this video? I saw that only 1 AD you have here. I am hoping to receive an answer from you brother.. Again, thank you very much for all your hard work to put all of these up. Kudos to you.

[@MSFTWebCast]

Send me an email, will give you the guideline. Note: find my email address on channels about page.

[@cydmansg1979]

@@MSFTWebCast Hi brother, we will send you an email tonight. Thank you for your response.

[@upenderbabu]

Thank you :)

[@Sweetpapers]

Perfect 🌺🌺🌺🌺

[@arriaga11]

Great Video , from all the videos on KZbin, this is the best XD

[@andrew2202]

awesome video, thank you!

[@itzickmaymon12]

hi all your videos are really helpful and professional .do you have video how to Migrating Shared Folder from Server 2008R2 to Server 2019/2022

[@MSFTWebCast]

Migrating Shared Folder from Server 2003 to Server 2019: kzbin.info/www/bejne/fXzWnXp-e7JmgK8

[@itzickmaymon12]

Many thanks to you, you are a professional and courteous person

[@gaeww.3297]

Thanks for your helpful guide. By the way, can we change the IP address of Windows 2019 to be as IP address of Windows 2018 ex-PDC?

[@MSFTWebCast]

Yes, you can. Once everything settle down you can switch back to the old IP address.

[@gaeww.3297]

@@MSFTWebCastThank you. What's the best way to change PDC computer name?

[@Tech-geeky]

Why did you join Domain prior to upgrading Schema on 2019? Was this just to make things easier ? When i did mine, i mounted CD(Image) on older VM, since that is the same VM you check in regedit after anyway to verify upgrade completed.

[@LittleKenshiro]

Very helpful. Thank you.

[@brindleitsolutions4777]

Worked like a charm! Thanks!!

[@MSFTWebCast]

Glad it helped!

[@vainmonadiocan]

Thanks for your tutorials. Great job :-)

[@VivekSingh-cq5rt]

really useful

[@MSFTWebCast]

Glad to hear that

[@maheshkajania8778]

thanks for the video. lengthy but good one.

[@prageethperera741]

Thanks

[@isnizamiharbi3892]

When I trying to promote this server to domain controller, I encountered this error "Verification of replica failed. The specified domain [DomainName] is still using the File Replication Service (FRS) to replicate the SYSVOL share. FRS is deprecated." how to solve this error?

[@localhost3527]

Thanks a lot. It's precisely explained it.

[@niekshelis13]

Went like a glove. Thanks mate!

[@netinfo21]

Hi ! Thank you for this great tutorial. I used for migrate some servers in the past. One question: it's right that windows server 2022 use the same schema number (88) of 2019 ?.

[@MSFTWebCast]

Yes, correct, There is no schema update in server 2022.

[@netinfo21]

@@MSFTWebCast Thank you

[@fabianbarrera9562]

Excellent demo and explanation¡ Which is your suggestion to test applications running in windows server 2008 r2 domain before migrating to windows server 2019 functional and domain level?

[@meharali7890]

Great job man . Amazing video.Really helpfull.

[@MSFTWebCast]

Thank You.

[@josebello61]

Great Tutorial!!! Congratulations!!! Can the same be used to migrate a 2008 R2 Foundation server to 2019 STD server'

[@sohandy79]

running ad connect on old 2012 server, any extra steps i should take befroe i modify the schema at all?

[@totostyle1]

thank you so much for your help. Very good tutorial

[@anishbnair5970]

Hi, I did the same steps in a lab environment and after promoting 2019 to DC , i cant see any entries in 2019 DNS server .No forward/reverse lookup zone and server showing cross mark

[@ertanyildiz5354]

Great video!!! Saved a lot of time.

[@MSFTWebCast]

Great to hear!

[@kofidonkor151]

God bless, really grateful for the video..... do you have video on Windows server 2008r2 file server migration to Windows server 2019?

[@netinfo21]

Could you update video with "How to demote Win2012R2 DC" ? In 2012, dcpromo is deprecated and I have to use the "Remove role" in Server Manager. But, when I run it, server was dejoined from domain and moved in Workgroup but DC and DNS Server roles ttill remain installed.

Great video, thank you! Saved me a lot of time :)

[@gaj774]

Great video. Where in those steps we need to migrate the DHCP?

[@akinyemiibrahim2553]

Before i start, Can this same step work for Active Directory Migration From Windows 2003 to Windows Server 2016? If not do you have a detailed video as this?

[@Bakemono1CC]

can you migrate (or copy) all objects and GPO to a new domain with another domain name ? what about all PC members of the domain ? how to manage Exchange messaging (2010 version which should be migrated in 2019 and integrated into the new domain), Skype, existing shares, all services and hundred of servers etc. ... all dependent on the existing domain?

[@brandynmckibben6174]

What about doing an upgrade in place on a Windows 2008 domain controller? Upgrading to server 2012 then 2016/19? How would the steps vary?

[@agent9548]

Very informative video. Could you please do a video on converting SYSVOL when adding and promoting a new 2019 server to co exist with other 2008 DC's? Thank you so much.

[@dennyaaa]

techcommunity.microsoft.com/t5/storage-at-microsoft/streamlined-migration-of-frs-to-dfsr-sysvol/ba-p/425405

[@AdmV0rl0n]

I've been an admin for a long time. A lot of changes of AD get made, but very few seem to deal with demoting and changing the cert services - which is kind critical in background when moving your AD forwards :/

[@hiteshprajapati]

Hello, I am planning to upgrade my current DC which is on Windows 2008 R2 to Windows 2019. All the Domain controller in my environment is on Windows 2008 R2. I have 3 DC, out of which 2 DC are Global Catalog and one is DC. when i run "netdom query fsmo" I see the result except for "infrastructure master" everything is on my Primary DC . what steps should i take to move infrastructure master which is on other DC to my Primary DC ? Or Am i able to upgrade my Primary DC with out moving infrastructure master to primary DC ? What safety measures should i take? Thank you,

[@MSFTWebCast]

You can manually transfer Infrastructure master role to Root DC. 1. Take a backup before you start migration. 2. First manually upgrade schema on Schema master (in your case root dc) 3. Introduce Windows Server 2019 as a member server. 4. Promote Windows Server 2019 as a additional domain controller. 5. Wait for replication to complete successfully. 6. Transfer the FSMO roles to Server 2019 DC. 7. Migrate DHCP, File Server Shares or print service to server 2019. 8. Test with one user account that everything is working file with them like group policy and other settings. 9. If everything is working fine, then start decommissioning the server 2008 R2 DC. Note: Make sure that your Root DC will be the last to decommission.

[@hiteshprajapati]

@@MSFTWebCast Thank you very much for your quick response. 1. Do you have any steps or video which i can follow to manually transfer infrastructure master role to Root DC. 2. In your second step you mentioned "First manually upgrade schema on Schema master (in your case root dc)" , are you referring to schema ver. 47 to new Schema ver 88. ?

[@MSFTWebCast]

How to Transfer FSMO Roles: kzbin.info/www/bejne/q2OkgKWvrrSgrJY

[@GoWisdomFellowship]

Great tutorial. Thanks.

[@arriaga11]

Will this steps work on Windows Server SBS 2011???

[@netinfo21]

One question: is it mandatory run adprep BEFORE migrating domain ? Is not possible migrate domain leaving the original schema and raise forest/domain level AFTER migration ?

[@MSFTWebCast]

NO, you need to prepare the existing forest to support new version of Windows domain controller. You can manually update the schema before adding new domain controller or if it is already not updated then the AD DS wizard will update the schema (if you have sufficient privilege).

[@gentuxx1536]

Good tutorial Thanks

[@MSFTWebCast]

Glad it helped

[@1ajaypaul]

hi, many thanks for tutorial, extremally helpful. i tested the schema upgrade in a test environment and i did not need to do it as adding and promoting the 2019 server, it must of done it during DC promote. can you confirm if this was the case? thanks in advance. the version was 47 before promoting. when running adprep commands it stated, already upgraded Ajay

[@MSFTWebCast]

We can manually update the schema or we allow it to update automatically during the AD DS configuration (I mean when we add windows server 2019 as an additional domain controller). But I prefer to use manual method to for more surety. Note: You need to insert the Windows server 2019 ISO image while running the adprep commands.

[@1ajaypaul]

@@MSFTWebCast many thanks for the reply.

[@prafulljoshi3585]

verification of the replica failed the forest functional level not supported to install I was the update schema version

[@MSFTWebCast]

Check replication between all the domain controllers and then raise the forest and domain functional level. Manually update the Active directory schema.

[@darenlorenzo4904]

Thank you for this! Question, can the windows 2019 DC use a 2008r2 certificate master or will the certificate master have to up migrated as well?

[@MSFTWebCast]

Not necessary but you wont get some new features of certificate templates.

[@impsquared]

great video, this helped a lot

[@yasirmohyh]

30:19 which option made domain controller have decided that the new server (windows server 2019) is the current domain controller ?

[@MSFTWebCast]

When you open GPMC, it will first try to connect to the PDC role owner DC. At that point already we have transferred PDC Emulator role to Windows Server 2019 Domain controller, so GPMC connect with the windows server 2019 domain controller.

[@yasirmohyh]

@@MSFTWebCast Thanks

[@leedavila9622]

Amazing, thanks!

[@IdealnetCa]

Hello - after i transferred the FSMO roles, i checked the DNS and the 2019 server shows(648) and the 2008 server shown (647). is this correct?

[@MSFTWebCast]

FSMO roles has nothing to with DNS SOA number. If SOA numbers are not same on both DNS server that means DNS replication is not completed yet. Once replication completes, both SOA numbers will be same.

[@omtschand3432]

Thank you

[@yordanmasso3618]

Awsome man!!!

[@lanserRus]

Боже, спасибо тебе индус

[@MSFTWebCast]

Спасибо!

[@sajidahmedkhan1101]

from where i can get the adprep utility to upgrade 2008 forest ?

[@MSFTWebCast]

It will be in Windows Server ISO image.

[@brettpenza2213]

Is this possible with 2008R2 --> 2019 in a different, brand new domain?

[@MSFTWebCast]

If you want new domain then why migration? If your are asking for migration with new domain name. 1) Migrate Active Directory and 2) Rename Active Directory Domain Name.

[@AkumetsuOne]

Hello, thanks for the video, i am planning do the migration to 2008 R2 to 2022, while the migration is running, the AD of the 2008R2 will be suspended or the users can work normally, because the server have DNS, DHCP and AD DS + FortiAD sync.

[@MSFTWebCast]

It is side by side migration, so your old server will be in running condition and users can work normally without any issue.

[@AkumetsuOne]

@@MSFTWebCast thank you for answering, is possible do a video of renaming Domain?

[@MSFTWebCast]

@@AkumetsuOne Yes already we have video on domain renaming: kzbin.info/www/bejne/nISWlKN8mZedrqc

[@jurajvantuch9636]

Great video :)

[@Joseinazusa297]

Can this be done with Server 2019 Essentials?

[@Omeromuscio]

good morning and thanks for video i have a problem when i try to add windows controller domain to an exist domain error is forest not supported but i have execute adprep and i have forest whit 2018 level how can i do ? thanks Alberto

[@MSFTWebCast]

First check both Domain and Forest functional level. You also need to make sure sysvol is using DFS not FRS.

[@Omeromuscio]

@@MSFTWebCast many thank do you know guide to change in dfs for this ? thanks Alberto

[@MSFTWebCast]

@@Omeromuscio I have not created video on it yet, but surely video will be there. You can get very good guide on rebel admins website.