Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

currently we are running samba and openldap as our PDC. our ultimate goal is to migrate completely over to windows active directory. how would i go about doing this?

share|improve this question
You're doing it wrong! </fanboy> I have very little experience with LDAP; why are you migrating? – Luke has no name Jun 18 '10 at 19:02
migrating because my manager wants me to. not sure if there is any other reason. – Roger Jun 18 '10 at 19:04
"Because X told me to" is a pretty lousy reason to migrate -- There are plenty of good ones & I would discuss them with management. – voretaq7 Jun 18 '10 at 19:39
Demanding that your manager justify their decisions before you start researching how to do it is generally not a healthy career move. – Kara Marfia Jun 18 '10 at 20:29
true.. far better to demand a fortnight's offsite training course. Wouldn't want to get it wrong after all, think of the cost to the business :) – gbjbaanb Jun 18 '10 at 21:07

Generally speaking this can be treated the same as adding/migrating to any other DC:

  1. Join two Windows servers to the domain.
  2. Make the windows servers into backup DCs.
    1. See the Windows documentation & any notes your admin team has on this process
  3. Make the OpenLDAP PDC go away (Again refer to notes/docs, but you want to unplug it, then disjoin it)
    1. Universe still working? If so, continue. Otherwise Find out why & fix it.
      1. Can't fix it? Revert back to the OpenLDAP PDC until you can!
  4. Promote one of the Windows boxen to be PDC (not sure if this is still necessary or not these days?)
    1. Universe still working? If so you're done. If not, fix it
      1. (You shouldn't ever get to 4.1 :)
share|improve this answer
I worry that you're using PDC and BDC as operational terms when we're talking about AD domains. – mfinni Jun 18 '10 at 20:11

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.