Domain Controller - GPO Sync

makaveli0936 · 2024-04-01T17:01:22.945Z

Hello community,
I have a question regarding a new DC installation.

I have a DC on Win2012 and installed a new one as Win2019.
I configured the DNS, DHCP, GPO, etc. and other things to replicate.

When I turn off the old DC, clients get IP from the new DC and th internet works. But they still look connected to the old DC and File Server shares and Gpo related things like desktop background don’t work.

What can be the issue?

dwo1064 · 2024-04-01T17:26:04.139Z

What do you mean “They still look connected to the old DC” ?
Did you Demote the old DC or just turn it off?
After promoting the new DC, did you give it enough time to replicate everything before shutting down the old DC (hopefully demoting it)

It almost sounds like the new DC did not complete the promotion - no login script for file shares, no GPOs applied ?

makaveli0936 · 2024-04-01T17:30:06.609Z

I check with cmd command to see which domain controller clients are connected and it shows DC01.

I did not demote the old one and both servers are working together from a couple of months. When I create a New GPO and edit existing rule, it’s syncing with the other server.
I turn off the old one to test if the new one works properly. I don’t have any login scripts and all configured with GPO.

Samael1 · 2024-04-02T07:17:20.502Z

I would still have demoted the old server before shutting it down.

makaveli0936 · 2024-04-02T07:23:11.516Z

I’ll do that if the new one works fine.

Internet_Schneider · 2024-05-16T20:26:15.043Z

Have you migrated FRS to DFSR on your server 2012?

PatrickFarrell · 2024-05-16T21:30:32.708Z

Just remember that AD replication and GPO replication are separate (as is DNS replication).

First you want to make sure active directory is replicating correctly.

Repadmin /showrepl See if it has errors.

Run a dcdiag /e /v and see if there are errors.

Check your DNS settings on your domain controllers and your clients: Active Directory DNS Refresher

lastly, you will need to check your GPOs if they have drive maps in them and those locations have changed, the GPOs will need to be changed to the new locations.