SOLVED

Create Test Domain Controller from Production Domain Controller

%3CLINGO-SUB%20id%3D%22lingo-sub-1190055%22%20slang%3D%22en-US%22%3ECreate%20Test%20Domain%20Controller%20from%20Production%20Domain%20Controller%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1190055%22%20slang%3D%22en-US%22%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3EFolks%2C%3C%2FP%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3E%26nbsp%3B%3C%2FP%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3EOne%20of%20my%20customers%20does%20not%20have%20a%20test%20environment.%3C%2FP%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3EThe%20Plan%20is%20to%20have%20a%20Test%20Environment%20with%20the%20same%20LDAP%20structure%20(Different%20%3A%20Domain%20name)%3C%2FP%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3ETherefore%2C%20is%20it%20possible%20to%20create%20Test%20DC%20from%20production%20DC%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1190055%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EActive%20Directory%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%20Server%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1190762%22%20slang%3D%22en-US%22%3ERe%3A%20Create%20Test%20Domain%20Controller%20from%20Production%20Domain%20Controller%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1190762%22%20slang%3D%22en-US%22%3E%3CP%3EOne%20method%20would%20be%20to%20stand%20up%20a%20new%20domain%20controller%20in%20existing%2C%20let%20replication%20complete%2C%20move%20it%20to%20isolated%20test%20network%2C%20then%20on%20test%20DC%20you%20can%20seize%20roles%20and%20perform%20some%20clean%20up.%20(also%20perform%20cleanup%20in%20production%20domain)%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhelp%2F255504%2Fusing-ntdsutil-exe-to-transfer-or-seize-fsmo-roles-to-a-domain-control%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3Ehttps%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhelp%2F255504%2Fusing-ntdsutil-exe-to-transfer-or-seize-fsmo-roles-to-a-domain-control%3C%2FFONT%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows-server%2Fidentity%2Fad-ds%2Fdeploy%2Fad-ds-metadata-cleanup%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows-server%2Fidentity%2Fad-ds%2Fdeploy%2Fad-ds-metadata-cleanup%3C%2FA%3E%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3Ethen%20if%20required%20you%20could%20rename%20the%20test%20domain%20name.%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%3CA%20href%3D%22http%3A%2F%2Fwww.rebeladmin.com%2F2015%2F05%2Fstep-by-step-guide-to-rename-active-directory-domain-name%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.rebeladmin.com%2F2015%2F05%2Fstep-by-step-guide-to-rename-active-directory-domain-name%2F%3C%2FA%3E%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%26nbsp%3B%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1192199%22%20slang%3D%22en-US%22%3ERe%3A%20Create%20Test%20Domain%20Controller%20from%20Production%20Domain%20Controller%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1192199%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F51719%22%20target%3D%22_blank%22%3E%40Dave%20Patrick%3C%2FA%3E%26nbsp%3BThanks%20for%20the%20response%2C%20I%60ve%20gone%20through%20the%20articles%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20I%20Clone%20the%20Prod%20DC%20running%20in%20VWWARE%20to%20the%20TEST%20Network%20then%20I%20guess%20it%20covers%20this%20bit%20%22%3CSPAN%3EOne%20method%20would%20be%20to%20stand%20up%20a%20new%20domain%20controller%20in%20existing%2C%20let%20replication%20complete%2C%20move%20it%20to%20isolated%20test%20network%3C%2FSPAN%3E%22%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20yes%2C%20then%20I%20can%20follow%26nbsp%3B%3CSPAN%3Erename%20the%20test%20domain%20name%20article.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EKindly%20share%20your%20view.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1192358%22%20slang%3D%22en-US%22%3ERe%3A%20Create%20Test%20Domain%20Controller%20from%20Production%20Domain%20Controller%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1192358%22%20slang%3D%22en-US%22%3E%3CP%3EDepending%20on%20what's%20cloned%20you%20may%20still%20need%20to%20seize%20roles%20and%20perform%20the%20cleanup.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E(please%20don't%20forget%20to%20mark%20helpful%20replies)%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Frequent Contributor

Folks,

 

One of my customers does not have a test environment.

The Plan is to have a Test Environment with the same LDAP structure (Different : Domain name)

Therefore, is it possible to create Test DC from production DC?

3 Replies
Highlighted
Best Response confirmed by Admin O365 (Frequent Contributor)
Solution

One method would be to stand up a new domain controller in existing, let replication complete, move it to isolated test network, then on test DC you can seize roles and perform some clean up. (also perform cleanup in production domain)

 

https://support.microsoft.com/en-us/help/255504/using-ntdsutil-exe-to-transfer-or-seize-fsmo-roles-t...

 

https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/ad-ds-metadata-cleanup

 

then if required you could rename the test domain name.

 

http://www.rebeladmin.com/2015/05/step-by-step-guide-to-rename-active-directory-domain-name/

 

 

 

 

  

 

Highlighted

@Dave Patrick Thanks for the response, I`ve gone through the articles 

 

If I Clone the Prod DC running in VWWARE to the TEST Network then I guess it covers this bit "One method would be to stand up a new domain controller in existing, let replication complete, move it to isolated test network"?

 

If yes, then I can follow rename the test domain name article.

 

Kindly share your view.

Highlighted

Depending on what's cloned you may still need to seize roles and perform the cleanup.

 

(please don't forget to mark helpful replies)