DBA Sensation

March 17, 2010

How to migrate sql cluster between domains

Filed under: 3. MS SQL Server — Tags: , , , — zhefeng @ 4:54 pm

Migrating SQL Server 2005/2000 cluster from one domain to the other domain is not supported by Microsoft. However, here is the way how to do that.
i used this way to migrate our production cluster sucessfully.

1. Current settings (active – passive mode)
Cluster name: clustest
Cluster management IP: 10.0.0.142
Virtual server Name: clustestvip1.test.com
VIP: 10.0.0.144
Service account: test\service.product
Cluster group: test\sqlcluster
Node1:
Name –dbnode1.test.com
Physical IP: 10.0.0.140

Node2:
Name – dbnode2.test.com
Physical IP: 10.0.0.204

2. Objective
(1). To change the domain from test.com to test1.com
(2). To change the service account from test\service.acc to test1\service.act
(3). Make sure the sql cluster is still functional after changing

3. Testing steps
(1). Take all cluster resources offline (except the quorum, which cannot be taken offline)
(2). Stop the cluster service on both nodes and change startup type to “manual”
(3). Change the domain of each machine to the new domain and reboot
(4). After reboot, on each machine, change the cluster and SQL service accounts to accounts in the new domain (test\service.acc ->test1\service.act).
Note: according to MSKB 915846 it should be “On one of the cluster nodes, use SQL Server Configuration Manager to change the service account to the new account.”
That’s not true, and you got error from there, have to do it on both nodes in services.msc.
(5). Add the cluster and SQL service accounts to the local Adminstrators group.
(6). Run gpedit.msc to grant the following rights to the new service account:
Path: “Local Computer Policy” -> “Windows Settings” -> “Security Settings” -> “Local Policies” ->”User Rights Assignment”
*Act as part of the operating system
*Adjust memory quotas for a process
*Back up files and directories.
*Debug programs
*Increase scheduling priority
*Increase quotas (not in windows 2003).
*Load and unload device drivers.
*Lock pages in memory
*Log on as a batch job
*Log on as a service
*Manage auditing and security log
*Replace a process level token
*Restore files and directories
7). Update the domain groups SID for cluster services (sql 2000 skip this step)
There are domain groups related to old domain name as below which couldn’t be changed in AD(you can’t find them! They only appear in register as SID at this branch: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\MSSQL.X\Setup).
So what we need to do is just find the old group sid in registry and replace it with new group sid. Here are the steps:
a. find old cluster group sid by logging in as old service account, then run “whoami /groups” in dos prompt
b. in this case, the service account is service.acc, and cluster group is : test\sqlcluster
c. find the sid for test\sqlcluster is:
S-1-5-21-1679026800-3574736516-1101542067-14559
d. same way to find the new group sid for test1\sqlcluster is:
S-1-5-21-2789037367-2132044359-1364708090-24619
e: replace the old sid with new sid under branch (do a small search there) : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\
8). Reboot both nodes
9). Start the cluster service on both machines (put them back to “automatic” mode again)
10). Bring cluster resources online

Reference:
1. Changing the Domain for a SQL 2005 Cluster
http://nyc-dba.blogspot.com/2007/01/changing-domain-for-sql-2005-cluster.html

2. How to move a Windows Server cluster from one domain to another
http://support.microsoft.com/kb/269196

3. Best practices that you can use to set up domain groups and solutions to problems that may occur when you set up a domain group when you install a SQL Server 2005 failover cluster
http://support.microsoft.com/kb/915846

Advertisements

25 Comments »

  1. Hi there,

    May I know if anyone has tried this on SQL2008 cluster?

    Thx.

    Comment by Chee Heng — March 11, 2011 @ 1:05 am

    • never tried this on 2008.
      shouldn’t be much difference.
      i will do the test on VM someday

      Comment by zhefeng — March 11, 2011 @ 3:23 pm

  2. Dear sir,
    I neet to change server domain, but using the same account, do I need to update the SID?
    my example : Old domain migrate to New domain
    Old : test\Server 1 using Ntest\Account
    New : Ntest\Server 1 using Ntest\Account

    thanks

    Comment by Yiping — September 13, 2012 @ 10:03 pm

  3. Everything is very open with a really clear explanation of the
    challenges. It was definitely informative. Your website is
    useful. Many thanks for sharing!

    Comment by a hair straightener — September 9, 2013 @ 1:20 pm

  4. Right away I am ready to do my breakfast, afterward having my breakfast coming over again
    to read further news.

    Comment by www.serpaz.org — September 10, 2013 @ 4:29 am

  5. I’m extremely inspired with your writing abilities and also with the structure on your blog.

    Is that this a paid theme or did you modify it yourself?
    Anyway stay up the nice quality writing, it’s uncommon to peer a great weblog like this one today..

    Comment by mold cleaners — September 14, 2013 @ 6:05 pm

  6. Since the admin of this site is working, no hesitation very soon it will be renowned, due to its feature contents.

    Comment by Chicago Senior Living — September 14, 2013 @ 6:17 pm

  7. Thanks a bunch for sharing this with all people you really understand
    what you are speaking about! Bookmarked. Please
    additionally talk over with my website =). We
    could have a hyperlink change agreement among us

    Comment by chicago il in home health care — September 14, 2013 @ 6:21 pm

  8. Hi there, this weekend is good designed for me, because this point in time
    i am reading this fantastic educational paragraph here at my residence.

    Comment by austin tx black mold inspection — September 14, 2013 @ 6:21 pm

  9. Nothing beats a big booty ebony

    Comment by whooty — September 18, 2013 @ 3:59 am

  10. I wass curious if you eveer considered changing the pae layout oof your blog?
    Its very well written; I ove what youve got to say.
    But maybe you could a little more in the way of content so people could connecct with
    it better. Youve got an awful lot of text for only having onne
    or two pictures. Maybe yoou could space iit out better?

    Comment by keurig coffee maker — October 17, 2013 @ 6:34 pm

  11. I read this post completely concerning the resemblance of most up-to-date
    and preceding technologies, it’s awesome article.

    Comment by Deneen — October 17, 2013 @ 10:59 pm

  12. Thanks for some other informative website. Where else may I
    am getting that kind of info written in such an ideal means?
    I’ve a undertaking that I’m simply now operating on, and I’ve been at the glance out for such info.

    Comment by chicagoilassistedliving.weebly.com — October 17, 2013 @ 11:00 pm

  13. My brother recommended I would possibly like this web site.
    He was totally right. This post actually made my day.
    You cann’t imagine simply how much time I had
    spent for this info! Thank you!

    Comment by Mellisa — November 26, 2013 @ 7:12 pm

  14. Hey I know this is off topic but I was wondering if you knew of any widgets I could add
    to my blog that automatically tweet my newest twitter updates.

    I’ve been looking for a plug-in like this for quite some time and was hoping
    maybe you would have some experience with something like
    this. Please let me know if you run into anything. I truly enjoy reading
    your blog and I look forward to your new updates.

    Comment by Venus — January 8, 2014 @ 9:03 pm

  15. Do you have a spam problem on this site; I also am a blogger, and I was wondering
    your situation; we have developed some nice methods and we are looking to trade techniques with other
    folks, be sure to shoot me an email if interested.

    Comment by geoff MCKAY — January 10, 2014 @ 12:59 am

  16. I visited many web sites except the audio feature for audio songs present
    at this site is really marvelous.

    Comment by Wizard101 Crown Generator No Password No Survey — January 16, 2014 @ 12:19 am

  17. Hello! I know this is kind of off-topic but I had to ask.
    Does managing a well-established website like yours
    take a massive amount work? I am completely new to running a blog
    but I do write in my diary everyday. I’d like to start a blog so I will be able to share my personal experience
    and feelings online. Please let me know if you have any recommendations or tips for new aspiring
    blog owners. Thankyou!

    Comment by Xavier — January 28, 2014 @ 3:13 am

  18. Just desire to say your article is as astonishing. The clarity to
    your put up is just nice and that i can assume you are an expert on this subject.
    Well with your permission allow me to seize your RSS feed
    to stay up to date with forthcoming post. Thank you 1,000,000 and please carry on
    the gratifying work.

    Comment by Danilo — January 28, 2014 @ 8:35 am

  19. mensajes de cumpleaños

    How to migrate sql cluster between domains | DBA Sensation

    Trackback by mensajes de cumpleaños — September 18, 2014 @ 4:02 pm

  20. Howdy! I could have sworn I’ve been to your blog before but after looking at some of the articles I realized it’s new to
    me. Anyways, I’m certainly pleased I discovered it and I’ll be bookmarking it and checking back frequently!

    Comment by Tim — September 22, 2014 @ 4:50 pm

  21. Thanks for finally talking about >How to migrate sql cluster between domains | DBA Sensation <Loved it!

    Comment by portable generators home depot — October 7, 2014 @ 9:07 pm

  22. casino solera machines a sous gratuites

    How to migrate sql cluster between domains | DBA Sensation

    Trackback by casino solera machines a sous gratuites — November 11, 2014 @ 5:01 pm

  23. こんにちは。うちはおしゃれが趣味で、最近は毎日オシャレ雑誌を読んでいます。今買いたいのは、財布とボディバッグです。財布は人気のブランドではなく、素材重視で見つけたいです。ブランドならエルメスやミュウミュウが有名ですが、私はココマイスターとか質が良くて欲しいですね。今度の誕生日にでも買ってみようかな。革は豚革がいいですね。変わったものでは象革(エレファントレザー)の財布も独自で面白そうですね。バッグは自分は、20代なので年齢に見合ったボストンバッグも視野に入れています。コンパクトで軽いバッグが好みです。男性なら吉田カバンも良さそうなブランドではないでしょうか。このような財布とリュックサックとかを持ってオシャレな街に遊びに行ってみようと思います。

    Comment by ココマイスター — February 6, 2017 @ 5:39 pm


RSS feed for comments on this post. TrackBack URI

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

Create a free website or blog at WordPress.com.

%d bloggers like this: