win2003额外域控制器升级为主域控制器2010-03-1923:46:46标签:控制器win2003额外域控制器升级为主域控制器公司Test.com(虚拟)有一台主域控制器DC-01.test.com,还有一台额外域控制器DC-02.test.com。现主域控制器(DC-01.test.com)由于硬件故障突然损坏,事先又没有DC-01.test.com的系统状态备份,没办法通过备份修复主域控制器(DC-01.test.com),我们怎么让额外域控制器(DC-02.test.com)替代主域控制器,使ActivateDirectory继续正常运行,并在损坏的主域控制器硬件修理好之后,如何使损坏的主域控制器恢复。如果你的第一台DC坏了,还有额外域控制器正常,需要在一台额外域控制器上夺取这五种FMSO,并需要把额外域控制器设置为GC。---------------------------------------------------------------一、从AD中清除主域控制器DC-01.test.com对象3.1在额外域控制器(DC-02.test.com)上通过ntdsutil.exe工具把主域控制器(DC-01.test.com)从AD中删除;c:>ntdsutilntdsutil:metadatacleanupmetadatacleanup:selectoperationtargetselectoperationtarget:connectionsserverconnections:connecttoDomaintest.comserverconnections:quitselectoperationtarget:listsitesFound1site(s)0-CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=comselectoperationtarget:selectsite0Site-CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=comNocurrentdomainNocurrentserverNocurrentNamingContextselectoperationtarget:ListdomainsinsiteFound1domain(s)0-DC=test,DC=comFound1domain(s)0-DC=test,DC=comselectoperationtarget:selectdomain0Site-CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=comDomain-DC=test,DC=comNocurrentserverNocurrentNamingContextselectoperationtarget:ListserversfordomaininsiteFound2server(s)0-CN=DC-01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=com1-CN=DC-02,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=comselectoperationtarget:selectserver0selectoperationtarget:quitmetadatacleanup:Removeselectedserver出现对话框,按“确定“删除DC-01主控服务器。metadatacleanup:quitntdsutil:quit3.2使用ADSIEDIT工具删除ActiveDirectoryusersandcomputers中的Domaincontrollers中DC-01服务器对象,ADSIEDIT是Windows2000supporttools中的工具,你需要安装Windows2000supporttool,安装程序在windows2000光盘中的support\tools目录下。打开ADSIEDIT工具,展开DomainNC[DC-02.test.com],展开OU=Domaincontrollers,右击CN=DC-01,然后选择,把DC-01服务器对象删除,如图1:Delete3.3在ActiveDirectorySitesandService中删除DC-01服务器对象打开Administrativetools中的ActiveDirectorySitesandService,展开Sites,展开Default-First-Site-Name,展开Servers,右击DC-01,选择Delete,单击Yes按钮,如图2:--------------------------------------------------------------------------------二、在额外域控制器上通过ntdsutil.exe工具执行夺取五种FMSO操作c:>ntdsutilntdsutil:rolesfsmomaintenance:Selectoperationtargetselectoperationtarget:connectionsserverconnections:connecttodomaintest.comserverconnections:quiteselectoperationtarget:listsitesFound1site(s)0-CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=comselectoperationtarget:selectsite0Site-CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=comNocurrentdomainNocurrentserverNocurrentNamingContextselectoperationtarget:ListdomainsinsiteFound1domain(s)0-DC=test,DC=comselectoperationtarget:selectdomain0Site-CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=comDomain-DC=test,DC=comNocurrentserverNocurrentNamingContextselectoperationtarget:Listservers...