Hello Andrey, Yes, I transfered all the available roles with the Ntdsutil command. and samba-tool fsmo show return all roles. regards Le 15/05/2015 17:26, Andrey Repin a ?crit :> Greetings, Sam! > >> Hello all, >> I'm always trying to migrate from W2000 server to Samba 4. >> For doing this, I tried this : >> - install a W2003 server with AD and DNS services, join it to W2000, >> transfer roles and after demote the old W2000 -> done >> - install a Sernet Samba4 with Bind9, join W2003, transfer roles -> done >> At this point the sync process is working in two way, I can manage DNS >> and AD with rsat tool even directly on the Samba4 server... Which was >> hard to do this to work properly! ;) >> Now I can't demote the W2003 server, the only way I find is to use >> "dcpromo.exe /froceremoval" command... ( the alone "dcpromo.exe" command >> don't work... ) >> But now Samba4 always trying to contact the w2003 server and I can't >> clean the dns and active directory, I've some error for example in >> "domain controllers" section of the AD... >> if I try "samba-tool domain level raise --domain-level=2008_R2" I read >> "ERROR: Domain function level can't be higher than the lowest function >> level of a DC!" >> So how to do a clean demote process even manualy? ( I can't set up a >> fresh new AD because I have too many users profile to move...) >> Thanks for helping! :) > Did you transfer all seven roles? > >
Greetings, Sam!>>> Hello all, >>> I'm always trying to migrate from W2000 server to Samba 4. >>> For doing this, I tried this : >>> - install a W2003 server with AD and DNS services, join it to W2000, >>> transfer roles and after demote the old W2000 -> done >>> - install a Sernet Samba4 with Bind9, join W2003, transfer roles -> done >>> At this point the sync process is working in two way, I can manage DNS >>> and AD with rsat tool even directly on the Samba4 server... Which was >>> hard to do this to work properly! ;) >>> Now I can't demote the W2003 server, the only way I find is to use >>> "dcpromo.exe /froceremoval" command... ( the alone "dcpromo.exe" command >>> don't work... ) >>> But now Samba4 always trying to contact the w2003 server and I can't >>> clean the dns and active directory, I've some error for example in >>> "domain controllers" section of the AD... >>> if I try "samba-tool domain level raise --domain-level=2008_R2" I read >>> "ERROR: Domain function level can't be higher than the lowest function >>> level of a DC!" >>> So how to do a clean demote process even manualy? ( I can't set up a >>> fresh new AD because I have too many users profile to move...) >>> Thanks for helping! :) >> Did you transfer all seven roles?> Hello Andrey, > Yes, I transfered all the available roles with the Ntdsutil command. > and samba-tool fsmo show return all roles. > regardsFor your future reference, "All" is not a number. samba-tool only aware of five roles to the best of my knowledge, unless it has been fixed already. -- With best regards, Andrey Repin Friday, May 15, 2015 19:02:29 Sorry for my terrible english...
On 15/05/15 16:45, Sam wrote:> Hello Andrey, > Yes, I transfered all the available roles with the Ntdsutil command. > and samba-tool fsmo show return all roles. > regards > > Le 15/05/2015 17:26, Andrey Repin a ?crit : >> Greetings, Sam! >> >>> Hello all, >>> I'm always trying to migrate from W2000 server to Samba 4. >>> For doing this, I tried this : >>> - install a W2003 server with AD and DNS services, join it to W2000, >>> transfer roles and after demote the old W2000 -> done >>> - install a Sernet Samba4 with Bind9, join W2003, transfer roles -> >>> done >>> At this point the sync process is working in two way, I can manage DNS >>> and AD with rsat tool even directly on the Samba4 server... Which was >>> hard to do this to work properly! ;) >>> Now I can't demote the W2003 server, the only way I find is to use >>> "dcpromo.exe /froceremoval" command... ( the alone "dcpromo.exe" >>> command >>> don't work... ) >>> But now Samba4 always trying to contact the w2003 server and I can't >>> clean the dns and active directory, I've some error for example in >>> "domain controllers" section of the AD... >>> if I try "samba-tool domain level raise --domain-level=2008_R2" I read >>> "ERROR: Domain function level can't be higher than the lowest function >>> level of a DC!" >>> So how to do a clean demote process even manualy? ( I can't set up a >>> fresh new AD because I have too many users profile to move...) >>> Thanks for helping! :) >> Did you transfer all seven roles? >> >> >Try counting the roles that 'samba-tool fsmo show' returns and then check what Andrey asked you. You probably haven't changed the DomainDNS & ForestDNS roles. Rowland
You're right Andrey, I can see only 5 roles with the "samba-tool fsmo show"... I don't remember if I transfered 5 or 7 roles with the Ntdsutil command. I'm just sure that I transfer all availlable roles with this command... I'm going to redo a try and if I see only 5 roles to transfer I will use the GUI for the 2 last... Thank a lot! Sam Le 15/05/2015 18:03, Andrey Repin a ?crit :> Greetings, Sam! > >>>> Hello all, >>>> I'm always trying to migrate from W2000 server to Samba 4. >>>> For doing this, I tried this : >>>> - install a W2003 server with AD and DNS services, join it to W2000, >>>> transfer roles and after demote the old W2000 -> done >>>> - install a Sernet Samba4 with Bind9, join W2003, transfer roles -> done >>>> At this point the sync process is working in two way, I can manage DNS >>>> and AD with rsat tool even directly on the Samba4 server... Which was >>>> hard to do this to work properly! ;) >>>> Now I can't demote the W2003 server, the only way I find is to use >>>> "dcpromo.exe /froceremoval" command... ( the alone "dcpromo.exe" command >>>> don't work... ) >>>> But now Samba4 always trying to contact the w2003 server and I can't >>>> clean the dns and active directory, I've some error for example in >>>> "domain controllers" section of the AD... >>>> if I try "samba-tool domain level raise --domain-level=2008_R2" I read >>>> "ERROR: Domain function level can't be higher than the lowest function >>>> level of a DC!" >>>> So how to do a clean demote process even manualy? ( I can't set up a >>>> fresh new AD because I have too many users profile to move...) >>>> Thanks for helping! :) >>> Did you transfer all seven roles? >> Hello Andrey, >> Yes, I transfered all the available roles with the Ntdsutil command. >> and samba-tool fsmo show return all roles. >> regards > For your future reference, "All" is not a number. > samba-tool only aware of five roles to the best of my knowledge, unless it has > been fixed already. > >
Disturbing... Every where I read I see only 5 roles to transfer in windows 2003 server : * /transfer PDC/ * /transfer RID master/ * /transfer infrastructure master/ * /transfer naming master/ * /transfer schema master/ How to transfer the 2 other "roles"? Thanks. Le 15/05/2015 18:03, Andrey Repin a ?crit :> Greetings, Sam! > >>>> Hello all, >>>> I'm always trying to migrate from W2000 server to Samba 4. >>>> For doing this, I tried this : >>>> - install a W2003 server with AD and DNS services, join it to W2000, >>>> transfer roles and after demote the old W2000 -> done >>>> - install a Sernet Samba4 with Bind9, join W2003, transfer roles -> done >>>> At this point the sync process is working in two way, I can manage DNS >>>> and AD with rsat tool even directly on the Samba4 server... Which was >>>> hard to do this to work properly! ;) >>>> Now I can't demote the W2003 server, the only way I find is to use >>>> "dcpromo.exe /froceremoval" command... ( the alone "dcpromo.exe" command >>>> don't work... ) >>>> But now Samba4 always trying to contact the w2003 server and I can't >>>> clean the dns and active directory, I've some error for example in >>>> "domain controllers" section of the AD... >>>> if I try "samba-tool domain level raise --domain-level=2008_R2" I read >>>> "ERROR: Domain function level can't be higher than the lowest function >>>> level of a DC!" >>>> So how to do a clean demote process even manualy? ( I can't set up a >>>> fresh new AD because I have too many users profile to move...) >>>> Thanks for helping! :) >>> Did you transfer all seven roles? >> Hello Andrey, >> Yes, I transfered all the available roles with the Ntdsutil command. >> and samba-tool fsmo show return all roles. >> regards > For your future reference, "All" is not a number. > samba-tool only aware of five roles to the best of my knowledge, unless it has > been fixed already. > >