Loading

×Sorry to interrupt
CSS Error

Refresh

Cookie Preference Center

General Information on cookies

When you visit our website, we use cookies to ensure that we give you the best experience. This information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies by clicking on the different category headings to find out more and change your settings. However, blocking some types of cookies may impact your experience on the site and the services we are able to offer. Further information can be found in our

Cookie Policy.

Strictly Necessary

Strictly Necessary

Always Active

Strictly Necessary

Strictly necessary cookies are always enabled since they are essential for our website to function. They enable core functionality such as security, network management, and website accessibility. You can set your browser to block or alert you about these cookies, but this may affect how the website functions. For more information please visit www.aboutcookies.org or www.allaboutcookies.org.

Cookie Details‎

Performance

Performance

Performance

Performance cookies are used to analyze the user experience to improve our website by collecting and reporting information on how you use it. They allow us to know which pages are the most and least popular, see how visitors move around the site, optimize our website and make it easier to navigate.

Cookie Details‎

Please confirm your settings by refreshing the page.

Functional

Functional

Functional

Functional cookies help us keep track of your past browsing choices so we can improve usability and customize your experience. These cookies enable the website to remember your preferred settings, language preferences, location and other customizable elements such as font or text size. If you do not allow these cookies, then some or all of these services may not function properly.

Cookie Details‎

Advertising

Advertising

Advertising

Advertising cookies are used to send you relevant advertising and promotional information. They may be set through our site by third parties to build a profile of your interests and show you relevant advertisements on other sites. These cookies do not directly store personal information, but their function is based on uniquely identifying your browser and internet device.

Cookie Details‎

Advertising Cookies

Consent Leg.Interest

Select All Vendors

Select All Vendors

Select All Hosts

Select All

Clear Filters

Information storage and access

Apply

Confirm My Choices Reject All Allow All

Skip to main content

My Subscriptions

Loading

Knowledge Base

Virtualizing existing domain controllers in VMware vCenter Converter (1006996)

Last Updated: 3/20/2024Categories: InformationalTotal Views: 267507Language:
Chinese (Simplified)Portuguese (European)JapaneseSpanishEnglish

11 like this article

Subscribe to get an email
newsletter with new updates

11 people found this helpful Please provide article feedback:

Symptoms

A converted domain controller does not synchronize.

The DNS services on a converter domain controller does not bind to the network interface.

The local domain database file NTDS.DIT is corrupted in the new virtual machine.

The domain controller becomes tombstoned in Active Directory and does not synchronize.

Synchronization is unreliable with other domain controllers.

Newly created or removed objects are changed on the virtual machine or source reappear in Active Directory.

The update or serial number changes unexpectedly on the domain controller.

Kerberos authentication or trust failures.

DNS lookup failures.

You see these errors:

LSASS.EXE - System Error, security accounts manager initialization failed because of the following error: Directory Services cannot start. Error status 0xc00002e1.
Event ID: 1103
Description: "The windows directory services database could not be initialized and returned error 1032. Unrecoverable error, the directory can't continue."
Event ID 2042: It has been too long since this machine last replicated with the named source machine. The time between replications with this source has exceeded the tombstone lifetime. Replication has been stopped with this source.

Purpose

This article provides information on techniques and best practices for converting a Domain Controller using VMware Converter.

Resolution

Introduction

A virtual machine created from an active domain controller may exhibit unexpected behavior. Domain controllers are very sensitive to hardware changes. When a physical server is virtualized, the hardware presented to the operating system may be different. Also, it is possible that a virtualized domain controller and an identical physical domain controller are running simultaneously, which may result in unpredictable replication issues across Active Directory or even a tombstone condition. If you are using Windows NT, these changes may prevent the directory or DNS servers from binding to the network connection.

Use one of these solutions depending on your environment:

Windows 2000, 2003, 2008, and 2012 Servers

Decommission the existing domain controller using dcpromo, and provision a new domain controller during the installation of new Windows Server in a new virtual machine. Do not perform the conversion, but use the source server's host name and IP address. (recommended)

Ensure another domain controller is online on the network and properly synchronized. If one is not available, provision a new domain controller as a virtual machine and promote it. Demote the domain controller using dcpromo. Set any static IP addresses to DHCP prior to conversion. When converted power off the source server, reassign static IP address, and promote the virtualized server.

Notes:

Always start using the new virtual machine as soon as possible after decommissioning the physical or source server. Failure to do so leads to a tombstone condition.

Never use the customization option in the Conversion Wizard. Using this process destroys the server on the destination.

Ensure that the source server is powered off or decommissioned before starting the new virtual machine with the network cards connected.

If the server to be virtualized holds any FSMO roles, transfer the roles to an existing and running domain controller. If a problem happens during the conversion process, you can provision new domain controllers in Active Directory and perform other AD operations without having to seize roles from the unavailable domain controller. For more information on FSMO roles in Windows Server 2003, see the Microsoft Knowledge Base article 324801.

For current Windows Server 2003 Active Directory domains with one Windows Server 2008 R2 domain controller, validate the domain/forest functionality by running the dcdiag /c /v /e command. Before beginning, run the repadmin and showreps commands to check for errors.

Avoid converting Windows NT domain controllers, if possible.

Before attempting conversion, always be sure another domain controller is online and properly synchronized.

Always ensure that the source server is powered off or decommissioned before starting the new virtual machine with the network cards connected.

Do not perform ONLINE physical-to-virtual (P2V) conversions. For more information, see Microsoft Technet Blog Article: How to Virtualize Active Directory Domain Controllers (Part 1).

Related Information

Note: VMware does not recommend to take a snapshot of the virtual machine running as a Domain Controller. In Windows Server 2012, there are changes to support creating a snapshot. For more information, see the Microsoft TechNet article, Introduction to Active Directory Domain Services (AD DS) Virtualization (Level 100). If the virtual machine is running a Windows Domain Controller, then snapshots are not supported by Microsoft. For more information, see Virtualizing a Windows Active Directory Domain Infrastructure white paper.

For more information, see Microsoft Knowledge Base articles 888794 and 875495.

For more information, see the Virtualize Business Critical Applications and Virtualizing Active Directory Domain Services on VMware vSphere.

Disclaimer: VMware is not responsible for the reliability of any data, opinions, advice, or statements made on third-party websites. Inclusion of such links does not imply that VMware endorses, recommends, or accepts any responsibility for the content of such sites.

CD-ROM or networking does not work on the virtual machine after converting a physical Windows NT server
Virtualização de controladores de domínio existentes
Virtualizar controladores de dominio existentes
在 VMware vCenter Converter 中虚拟化现有域控制器
Hot-cloning of Windows Server 2012 Domain Controllers is not supported
VMware vCenter Converter の既存のドメイン コントローラの仮想化

Detectable by VMware SkylineTM

Actions

Copy

link to clipboard
copied!

Print

Language:
Chinese (Simplified)Portuguese (European)JapaneseSpanishEnglish

Attachments

Additional Resources

KB
•
End Of General Availability of the Free vSphere Hypervisor (ESXi 7.x and 8.x) (2107518)

KB
•
Download and Install VMware Fusion (2014097)

Results 1-2 of 2

Ask The Community

Get answers quickly from VMware experts in the community

Post Subject

CONTINUE IN COMMUNITIES

Related Products:

VMware vCenter Converter Standalone

VMware vCenter Converter

Related Versions:

VMware vCenter Converter Standalone 6.x

Take Our Survey

Was this article helpful?

YES

NO

Copyright © 2005-2024 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.

Terms of Use

Your California Privacy Rights

Privacy

Accessibility

Cookie Settings

Support Assistant