Migrando o Server 2003 - Server 2008 r2. Localização do Catálogo Global. Problemas de DNS

6

Eu tenho um servidor moribundo com um WinServer 2003 instalado. É um controlador de domínio. Eu criei uma máquina virtual com um Server 2008 r2 e migrei todas as funções nela. Mas há um problema. O Catálogo Global ainda está localizado no servidor antigo, apesar de o novo ter uma opção de Catálogo Global ativada. Diz:

Log Name:      Directory Service
Source:        Microsoft-Windows-ActiveDirectory_DomainService
Date:          30.08.2013 18:45:20
Event ID:      1869
Task Category: Global Catalog
Level:         Information
Keywords:      Classic
User:          ANONYMOUS LOGON
Computer:      vm-dns2.logstream.local
Description:
Active Directory Domain Services has located a global catalog in the following site. 

Global catalog:
\server.logstream.local 
Site:
Default-First-Site-Name
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-ActiveDirectory_DomainService" Guid="{0e8478c5-3605-4e8c-8497-1e730c959516}" EventSourceName="NTDS General" />
    <EventID Qualifiers="16384">1869</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>18</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2013-08-30T14:45:20.007237900Z" />
    <EventRecordID>186</EventRecordID>
    <Correlation />
    <Execution ProcessID="484" ThreadID="604" />
    <Channel>Directory Service</Channel>
    <Computer>vm-dns2.logstream.local</Computer>
    <Security UserID="S-1-5-7" />
  </System>
  <EventData>
    <Data>\server.logstream.local</Data>
    <Data>Default-First-Site-Name</Data>
  </EventData>
</Event>

Eu preciso que o GC esteja localizado no novo servidor para que o antigo eventualmente morra. Alguém poderia me ajudar com isso?

Concordo que pode haver alguns problemas de DNS. Se o antigo DC estiver desligado, o novo sais:

Log Name:      Directory Service
Source:        Microsoft-Windows-ActiveDirectory_DomainService
Date:          02.09.2013 12:58:06
Event ID:      1126
Task Category: Global Catalog
Level:         Error
Keywords:      Classic
User:          ANONYMOUS LOGON
Computer:      vm-dns2.logstream.local
Description:
Active Directory Domain Services was unable to establish a connection with the global catalog. 

Additional Data 
Error value:
1355 The specified domain either does not exist or could not be contacted. 
Internal ID:
3200e25 

User Action: 
Make sure a global catalog is available in the forest, and is reachable from this domain controller. You may use the nltest utility to diagnose this problem.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-ActiveDirectory_DomainService" Guid="{0e8478c5-3605-4e8c-8497-1e730c959516}" EventSourceName="NTDS General" />
    <EventID Qualifiers="49152">1126</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>18</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2013-09-02T08:58:06.650172500Z" />
    <EventRecordID>248</EventRecordID>
    <Correlation />
    <Execution ProcessID="484" ThreadID="604" />
    <Channel>Directory Service</Channel>
    <Computer>vm-dns2.logstream.local</Computer>
    <Security UserID="S-1-5-7" />
  </System>
  <EventData>
    <Data>3200e25</Data>
    <Data>1355</Data>
    <Data>The specified domain either does not exist or could not be contacted.</Data>
  </EventData>
</Event>

E só depois disso aparece um evento de 2092:

This server is the owner of the following FSMO role, but does not consider it valid. For the partition which contains the FSMO, this server has not replicated successfully with any of its partners since this server has been restarted. Replication errors are preventing validation of this role. Operations which require contacting a FSMO operation master will fail until this condition is corrected. FSMO Role: DC=logstream,DC=local

As outras máquinas com configuração automática de rede dizem que o servidor DNS é 192.168.0.1, que é um roteador

    
por Konstantin 30.08.2013 / 17:28

1 resposta

10

Tudo bem ... o catálogo global não precisa ser "migrado" de um DC para outro, por si só. Apenas faça todos os seus controladores de domínio, GCs. É isso aí. Não há problema em encerrar um controlador de domínio que seja um GC. Todos os seus controladores de domínio devem ser todos os GCs ao mesmo tempo.

    
por 30.08.2013 / 17:30