Windows 10: Active Directory - 2012 to 2019 Migration - Error ID 481

Greetings All,We recently migrated our domain controller from 2012 to 2019 server. We are now getting errors reading our AD database file during a reboot and also having issues with our DNS and DHCP services coming online. We have been able to get our AD to work fine on a 2012 again but still get errors on 2019 on reboot, although it appears to function fine. There had been some work done on our login scripts and group policies around the time we started seeing this reporting. Below is the error we are being advised by a third party that states we need to totally overhaul our domain contro

:)

 

Active Directory upgrade

Hello,

We are working on Active directory upgrade from 2012 R2 to 2019. There is a trust relationship that exist between the primary domain and other domains (around 15). With some of them the trust is bidirectional and with some inbound/outbound. The concern is
when we promote new 2019 domain controllers or demote old 2012 r2 domain controllers will it effect the trust relationship between domains ?

Please, Suggest.

Thanks,

Pranay.

 

Active Directory Migration - SBS 2011 to Windows 2019

Hi All,

I am doing a migration from SBS 2011 to Windows Server 2019. I have moved all AD roles to the Windows 2019 server and on the last step, I tried to run dcpromo on the SBS server but received an error message that Certificate Services would need to be removed
first.

I used certutil to backup the database from SBS 2011 and then removed Certificate Services. Then, on Windows 2019 server, I used certutil to restore the database.

On The 2019 server, I have two certificates that imported and both show they expired in 2017. When I try to add a new certificate, it says Certificate types not available.

When I run dcdiag, all tests show success however I keep getting the following message:

A warning event occurred. EventID: 0x00009016

Time Generated: 04/07/2020 13:47:49

Event String:

No suitable default server credential exists on this system. This will prevent server applications that expect to make use of the system default credentials from accepting SSL connections. An example of such an application is the directory server.
Applications that manage their own credentials, such as the internet information server, are not affected by this.

The 2019 server will be the only AD server in the domain. Is this something I should pursue further? How can I get the certificates to function properly on the 2019 server?

Thanks,

drdx

 

Active Directory Migration from server 2012 to server 2016

Hi Fardeen. I"m Greg, an installation specialist, 9 year Windows MVP and Independent Advisor, here to help you.

There is a guide here:

https://newhelptech.wordpress.com/2017/06/24/st...

If that's not enough I'd ask at TechNet Forums here:
https://social.technet.microsoft.com/Forums/en-... which is our sister site for IT Professionals.

I hope this helps. Feel free to ask back any questions and keep me posted. If you'll wait to rate whether my post helped you, I will keep working with you until it's resolved.

________________________________________________________

Standard Disclaimer: There are links to non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on the sites that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly
research any product advertised on the sites before you decide to download and install it.