samba - Aug 2025 - Active Directory migration from Windows to Samba

Hi all,

As I haven?t been able to find anything that seems sufficiently complete 
or up to date, I?d like to ask if there is any guide or best practices 
document on how to replace a Windows Active Directory domain controller 
with a Samba server.

Thanks in advance for any pointers.

Best regards,
Antonio Trogu

?Not specific for your project but should help.

samba.bigbird.es

Add a samba DC , copy sysvol, transfer roles, demote windows DC, add another
samba DC for resiliency

Your AD functional level may impact the process.


On 8 Aug 2025 at 12:11 +0200, Antonio Trogu via samba <samba at
lists.samba.org>, wrote:
> Hi all,
>
> As I haven?t been able to find anything that seems sufficiently complete
> or up to date, I?d like to ask if there is any guide or best practices
> document on how to replace a Windows Active Directory domain controller
> with a Samba server.
>
> Thanks in advance for any pointers.
>
> Best regards,
> Antonio Trogu
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba

Greetings, Antonio Trogu!
> As I haven?t been able to find anything that seems sufficiently complete or
> up to date, I?d like to ask if there is any guide or best practices
document
> on how to replace a Windows Active Directory domain controller with a Samba
server.
> Thanks in advance for any pointers.
A more complete checklist would be:

1. Setup the samba secondary DC as per Samba wiki.
2. Ensure replication works.
3. Transfer all (7 last I checked) FSMO roles. Ref:
https://wiki.samba.org/index.php/Transferring_and_Seizing_FSMO_Roles#FSMO_Role_Management_Using_samba-tool
4. Double check that all roles are where they should be.
5. Double check that sysvol is replicated.
6. Recheck the DNS records.
7. Disconnect the DC.

Nota bene: you will still need a Windows desktop with RSAT to manage the
domain.


-- 
With best regards,
Andrey Repin
Wednesday, August 20, 2025 09:22:11

Sorry for my terrible english...