Hot answers tagged

7

As a best practice, you should be running AD DS and AD-Integrated DNS zones (ADI zones) on the same server. This is because the DNS records in ADI zones are replicated using AD DS replication and are stored in the directory, rather than using things like a zone transfer to get records across multiple DNS servers. If you want to use ADI zones for your ...


6

There are other good answers to this, but they're fairly theoretical. I thought it might be useful for you to know that I've done this, on a number of occasions, and it's fine, but on CentOS servers using dovecot and sendmail, and I use mbox as a storage format. I know you're using postfix and Maildir, and I'm sorry I can't shed specific light on that; I ...


5

If it's only Active Directory that you want to move then one possible solution can be is to install a secondary Domain Controller(DC) in your VM, transfer all FSMO Roles to the VM and then demote your older DC. Check the following links for step-by-step process Adding a 2012 Domain Controller to an existing Domain Demoting a 2012 Domain Controller ...


5

You'll have to reassign or seize the RID master role on a functioning domain controller. Microsoft says: Do not seize the RID master role if you can transfer it instead. Seizing the RID master is a drastic step that should be considered only if the current operations master will never be available again. For more information about transferring ...


5

You will have to test to find out. There are many variables such as the speed of your storage system. Consider restoring your tar archive or backup while the old system is up. Then during the downtime use rsync to copy the remaining changes. It still has to check many file modify times which takes time, but there is much less I/O and network transfer. This ...


5

While there are tools that can rename a domain, it can be a complicated process. You have a couple options. 1. You can add an alternate UPN so that @domain.com is valid. 2. You can migrate to a new domain. I'd try the upn route first


4

The first answer from jornane is correct so far as it goes, however I do not believe it addresses what the OP is really trying to get at - which is how best to handle migration of email and accounts, rather than how to handle DNS. Ordinarily there are many ways to handle this task, but because we are dealing with only one server which will be going through ...


4

Rsync may allow you to sync the files without taking the server down. For example, you could do a sync while in production, then take the server down, sync again to make sure you got everything that changed in the mean time, and then turn on the new server. The second sync will be incremental, and would take a fraction of the time of the whole, minimizing ...


4

You should handle that migration at the application level, so that you have a clean start with the new server and no leftover migration cruft (like hypervisor tools and drivers) lying around. Start with a list of all the things the server currently hosts, and migrate those roles individually onto the new server using migration procedures specific to each ...


4

Under the configuration settings for the AD domain, you need to make sure that it's configured to allow devices to be joined. There is more information here - https://azure.microsoft.com/en-us/documentation/articles/active-directory-conditional-access-device-registration-overview/?rnd=1


4

Another reason for this error is when you have 7z.exe but do not also have 7z.dll - both are needed for the commandline program to work properly. Copying just these two files from the normal 7-zip GUI install folder is enough for a portable version of the commandline program on our CI.


4

There is no such mechanism. This is because it is the way DNS and its caching mechanisms work. This is usually handled before the migration by setting the TTL for the A record to the minimum value possible, so that DNS servers keep the IP address cached for the least possible time. However, only in rare cases you can set the TTL to zero, which would ...


4

The answer is yes, and there's no conflicting information. Any person, article or resource that claims this doesn't occur is just plain wrong. The linked article explains the process. This has not changed from Windows 2000 and carries forward all the way through Windows Server 2012 R2. Make note of these sections: The transfer of an FSMO role is the ...


3

There's a tool made for this very thing, called the Microsoft Virtual Machine Converter (currently at version 3.0). As to your questions about time and the best way to do this, those are highly variable, environment-specific things you'll have to figure out on your own. Shouldn't be too hard - pick some typical VMs, time their conversions, extrapolate how ...


3

Dovecot allows you to configure a master user which can be used to access user mailboxes without knowing their passwords. The master user can be used with imapsync (as well as most other IMAP tools) to copy the messages between servers. From the dovecot configuration file on my server: By adding master=yes setting inside a passdb you make the passdb a ...


3

Your DNS TTL on your address record is set to 86400 (seconds, which is one day). Thus, when you make a change, resolvers on the Internet which have cached the old record may not update it until as long as a day has passed. It's best practice to shorten the TTL to as low as possible (usually 60 seconds) in advance of the actual change of IP address, so that ...


2

Got it. Apache 2.4 has additional security features. I needed to add this to /etc/httpd/conf/http.conf and restart the service. <Directory "/www/virtualhosts/example.com"> Options Indexes FollowSymLinks AllowOverride None Require all granted </Directory> I can haz website. Also, I moved the default 00-ssl.conf file ...


2

This is fairly fundamental. Remove DC from domain using the normal procedure. DC becomes a member server in the domain. Remove member server from domain. Create new domain using the normal procedure. Job done. I'd personally be considerably happier if "re-image server" was included as a middle step to ensure that any info/cruft on the server didn't ...


2

Turns out Server 2012 R2 Essentials is not compatible with AAD Connect. Essentials has a built in Azure directory sync however, which appears to do a similar job.


2

Domain rename worked just fine using Microsoft's rendom.exe utility (I'd say it was easy, perhaps because there was no exchange server involved). Service logons were changed for SQL Services and everything worked smoothly.


2

disclaimer: I work for Linode To migrate your stuff, there're a few ways you can do it. You can make an image of your entire disk (this is EVERYTHING, including data files, DB, OS, etc). One popular way to do this is to boot into Rescue Mode (Finnix) and dump your disk to an IMG file used DD. You can then download the image over SSH - Block-level Backup ...


2

I think you are confused about what components are involved and what you have paid for. ESXi is the hypervisor that runs on the hardware. vSphere is the software used to manage ESXi hosts. When you use the free version, you get a single ESXi license that you can manage with vSphere. When you purchase the software you are able to run more that one instance ...


2

We can't help you with licensing here, but I can offer a couple tips with SQL. You will want to take note of the SQL features you have installed on your SBS 2003 box, and setup the installation the same way on the 2012 machine (features, instance name, etc). You can script out the stored procedures and run them on the new instance, and restore your ...


2

Does /usr/bin/pygrub file really exist on your Dom0? Have you tried to run it without PyGrub? Remove bootloader and add kernel = '/vmlinuz' ramdisk = '/initrd.img' to use host system's kernel. If you haven't configured GRUB on the guest system properly, PyGrub will not be able to boot. Also check this ...


2

You can enable IP forwarding and then do forwarding of the traffic at the IP level (see http://www.debuntu.org/how-to-redirecting-network-traffic-to-a-new-ip-using-iptables/ for an example). I believe this has a benefit over proxying because you maintain the IP address of who is connecting to the website and that's logged properly.


2

I've replicated this way before. It's just a zone transfer, really. I had to do it as part of a migration to new 2008 DC's in preparation for raising the functional level and replacing old hardware. The issue I had with 2003 was ad-integrated DNS not playing nicely. May have simply been because this domain had been an upgrade from NT 4.0 -> win2k -> ...


2

Edit: Please note the below only transfers A records and no other so you would still need to manually input remaining. I've never done the above, but another alternative would be to: export your A records and zones from 2003. Save it - c:\dnsrecords.txt re-importing into Server 2012. Replicate other 2003 settings on 2012 that covers external lookups. ...


2

You need to start from scratch on Office 365 and perform a cutover migration following the detailed step-by-step instructions here. You will need to obtain a valid public SSL certificate and ensure that autodiscover and outlook anywhere (RPC over https) are correctly set up and working. You can test this at http://exrca.com. If you're unable to make this ...


2

The hard evidence is lack of support coming in very soon. But migrating a complicated set of servers to a new platform is a tricky business - so the sooner you start it, the better. You might want to try it on one machine first, and build up on your experience. And since R2 has been out for some time, now is the time to do it.


2

AFAIK, The CPU difference won't stop you from adding the host to your vCenter server. I have a client that has three vSphere 4.1 hosts in a vCenter server cluster all with different CPU's. You could migrate the powered off virtual machines to a new host without connecting this host to the storage array if you have a local datastore on the other hosts that's ...



Only top voted, non community-wiki answers of a minimum length are eligible