Task
Migrate AD controllers from VMware to OpenStack.
Solution
Key points to consider during the migration of AD controllers from VMware to OpenStack with Hystax Acura.
Before the migration
- Run dcdiag and repadmin /showrepl to ensure there are no replication or AD-related errors.
- Address any DNS misconfigurations or lingering objects.
- Consider use the same IP address and hostname in OpenStack if possible.
- Ensure subnet, gateway, and DNS settings are pre-configured in the target environment.
- If the IP changes, update AD Sites and Services and relevant DNS entries.
- Ensure that time sync is in good health: use w32tm /query /status to verify time service health.
During the migration
- Ensure that Hystax replication agent for VMware uses "force" quiesce strategy to take VMware snapshots - this guarantees that VMware calls VMware Tools and VSS inside the VM to take application consistent snapshots.
- Before running Cloud Site for final cutover, use "Power off before final replication mode" to gracefully shut down the source DC to avoid USN rollback.
- Never power on both the source and target DC at the same time to avoid conflicts.
After the migration
- Verify that AD DS, DNS, and SYSVOL services start properly.
- Run dcdiag, repadmin, and check for Event IDs related to SYSVOL and replication.
- Validate authentication, LDAP queries, and group policies are functioning as expected.
FSMO-related notes
- For a single DC migration: no FSMO transfer needed; roles move with the DC.
- For a multi-DC environment: transfer FSMO roles off the migrating DC to another healthy DC before migration.
- After migration, verify roles with netdom query fsmo and optionally reassign as needed.