Microsoft KB Archive/319016

= How to change domains for a SQL Server 2000 failover cluster =

Article ID: 319016

Article Last Modified on 12/19/2006

-

APPLIES TO


 * Microsoft SQL Server 2000 Enterprise Edition

-



This article was previously published under Q319016



IN THIS TASK
SUMMARY
 * Step 1: SQL Server 2000 Setup program
 * Step 2: Cluster Administrator
 * Migrations to Windows Server 2003 Service Pack 1 domains

REFERENCES Important This article contains information about how to modify the registry. Make sure that you back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows registry



SUMMARY
This step-by-step article describes the steps you must use to change domains for an existing SQL Server 2000 Failover Cluster.

Important Before you change the Cluster Domain, take the SQL Server resource offline by using the Cluster Administrator. After you take the SQL Server resource offline, you are ready to move the cluster to a new domain by using the guidelines in the following Microsoft Knowledge Base Article:

269196 How to move a Windows Cluster Server from one domain to another

If you have other clustered servers, you must determine what requirements they have before you move the cluster.

back to the top

Step 1: SQL Server 2000 Setup program
After you move the Microsoft Cluster Server (MSCS) to the new domain, start the SQL Server 2000 Setup program.


 * 1) In the SQL Server Introduction dialog box, click Next.
 * 2) In the text box that is located on the Computer Name dialog box, type the virtual server name of the Virtual SQL Server you are moving to a new domain. If you have multiple servers, decide which server you want to move first. Click to select the Virtual Server option, and then click Next.
 * 3) In the Installation Selection dialog box, click to select Advanced Options, and then click Next.
 * 4) In the Advanced Options dialog box, Maintain a Virtual Server for Failover Clustering is selected. Click Next.
 * 5) In the Failover Clustering dialog box, click to select the existing IP address. Make sure that the IP address you select is the old one, and then click Remove.
 * 6) In the IP address: text box, type the new IP address for the new domain, and then click Add. Click Next.

Important If your domain move does not require you to change the IP address of the server, you do not have to remove and re-add the current address. Just click Next.
 * 1) Unless you have to modify the Cluster Definition, click Next.
 * 2) In the input text boxes, type the new:
 * 3) * User Name
 * 4) * Password
 * 5) * Domain Name
 * 6) Click Next.
 * 7) Click Finish.

back to the top

Step 2: Cluster Administrator
Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall the operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.  Start the Cluster Administrator. Verify that the Virtual SQL Server you reconfigured in step 1 contains only one SQL Server IP Address resource, if the group contains more than one resource:  Verify the resource properties of each IP Address resource. Delete the resource that is configured for the OLD IP Address.

 Run regedt32, do not use regedit, and then navigate to this registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSSQLServer\Cluster for a default Virtual SQL Server HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\%Instance Name%\Cluster for a Virtual SQL Server with a named instance where %Instance Name% would be the name of the instance being modified. Modify the ClusterIPAddr value to only contain the current valid IP Address for the Virtual SQL Server</ol> </li> While SQL Server 2000 Virtual Server is offline use the Control Panel applet to change the virtual SQL Servers startup accounts to the new domain account for the SQL Server and SQL Agent.

Note Create the SQL Server startup accounts. Make sure that you add the appropriate permissions and user rights to the SQL Server startup accounts.

To enable the SQL Server service account to establish SPNs correctly on startup, follow these steps: <ol style="list-style-type: lower-alpha;"> Click Start, click Run, type Adsiedit.msc, and then click OK.</li> In the ADSI Edit window, expand Domain [ ], expand DC= , expand CN=Users, right-click CN= , and then click Properties.

Notes <ul>  represents the name of the domain.</li>  is a placeholder for the name of the root domain.</li>  represents the account that you specify to start the SQL Server service.</li> If you have specified Local System to start the SQL Server service,  represents the account that you use to log on to Microsoft Windows.</li> If you have specified a domain user account for the SQL Server service,  represents the domain user account.</li></ul> </li> In the CN= Properties dialog box, click the Security tab.</li> On the Security tab, click Advanced.</li> In the Advanced Security Settings dialog box, make sure that the SELF user is listed under Permission entries. If the SELF user is not listed, click Add, and then add the SELF user.</li> Under Permission entries, click SELF, and then click Edit.</li> In the Permission Entry dialog box, click the Properties tab.</li> On the Properties tab, click This object only in the Apply onto list, and then make sure that the following permissions are selected under Permissions: <ul> Read servicePrincipalName</li> Write servicePrincipalName</li></ul> </li> <li>Click OK three times, and then close the ADSI Edit window.</li></ol>

For more information, click the following article number to view the article in the Microsoft Knowledge Base:

283811 How to change the SQL Server or SQL Server Agent Service account without using SQL Enterprise Manager in SQL Server 2000

</li> <li>Bring the Virtual SQL Server you reconfigured in step 1 online.</li> <li>Repeat step 1 and step 2 for any other Virtual SQL Servers that are installed on the cluster.</li></ol>

back to the top

Migrations to Windows Server 2003 Service Pack 1 domains
The migration process for Windows Server 2003 Service Pack 1(SP1) domains is the same as the migration process for Windows 2000 domains. However, there is one exception. If the SQL Server clients are using Microsoft Distributed Transaction Coordinator (MS DTC) for communications and are not at least running Windows Server 2003 SP1, you must change the security settings for MS DTC. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

899191 New functionality in the Distributed Transaction Coordinator service in Windows Server 2003 Service Pack 1 and in Windows XP Service Pack 2

827805 MSDTC fails to mutually authenticate when computers do not run in the same domain

Additionally, the Windows Server 2003 SP1 nodes should have the following hotfix rollup package installed:

912818 Availability of Windows Server 2003 Post-Service Pack 1 COM+ 1.5 Hotfix Rollup Package 8

<div class="references_section">