In preparation for my move I’ve had to make a bunch of changes.

The only effect the outside world should notice is all my certificates have changed, long story short is I made my domain controller and certificate server have been converted to a virtual machine. My goal is to be able to take my whole network infrastructure with me on the plane. I should just be able to plug it in when I arrive and go.

It turned out to be a lot more work than I had anticipated. For some reason dcpromo croaked when I attempted to demote my original domain controller.

Apparently something was messed up and I had to use ntdsutil to forcibly remove the old domain controller and promote the new DC. What I didn’t know about was the notion of a root domain controller, apparently their are a few settings that point directly to the root domain controller and are not exposed via and of the active directory management tools.

—– Rom

Reference Articles: