|
server
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
Validation for 2000 to 2003 upgradeHere is our situation, we have a windows 2000 Mixed mode Active Directory, on 4 physical site. We also have Microsoft Exchange 2000 but it is no longer use, we use Lotus Domino. The 5 FSMO role are on 2 DC located in the main site data center. we have 1 DC on each site, for a total of 5. The Exchange server is located on another machine. all DC are Windows 2000 SP4, we only have one remaining member server which is NT4. This server won't be needed anymore after april 15. My goal are: - Get rid of the Exchange server. - Upgrade to AD Scheme 2003. - Upgrade the two main DC (the one with FSMO) to Win 2003. - Upgrade later the remaining DC to 2003. 1) Get rid of Exchange Server - Backup the server - Uninstall Exchange using the Wizard add/remove program. - Use DCPromo to Demote the server to Member server (not sure it is, the server appear in Site and Service, do i need to demote it?) - Remove the server from the domain. - Check with ADSI Edit if anything referring to the Exchange server and delete it? 2) - Upgrade to AD 2003. - Had previously set the domain to native mode. - Backup all system state of all dc. - Use the PDC DC with Windows 2003 CDROM. - DCPromo /ForestPrep - DCPromo /DomainPrep - Do i have to upgrade this Machine using the Win 2003 CDROM, or can i use a Windows 2003 Member server, do DCPromo and then move the FSMO Role to this server? 3) Upgrade the remaining DC. - I will replace the old DC with new machine, so i will simply add new DC from Windows 2003 Member server and demote old one. Should i consider Windows Active directory 2008, is it safer to do the step to the AD 2003 before upgrading to 2008? Is there any catch up that can bring a crash that i should look before proceeding witht the upgrade? Thank you. -- Guillaume Genest Network Administrator Howdie!
Guillaume Genest wrote: > 2) - Upgrade to AD 2003. Getting Active Directory to a 2003-Schema and updating a DC to 2003 are > - Had previously set the domain to native mode. > - Backup all system state of all dc. > - Use the PDC DC with Windows 2003 CDROM. > - DCPromo /ForestPrep > - DCPromo /DomainPrep > - Do i have to upgrade this Machine using the Win 2003 CDROM, or > can i use a Windows 2003 Member server, do DCPromo and then move the FSMO > Role to this server? two distinct things. Before you introduce a 2003-DC into the network, you need to update the schema first. So executing adprep /forestprep and adprep /domainprep from a Server 2003-CD is a requirement. After that, you can go introduce a new 2003-DC to your environment. Critial as DCs are, I'd not use a OS inplace upgrade mechanism but set up a new machine with Server 2003, patch it, protect it, dcpromo it to a DC and move the roles. Then, when everything's tested, unpromote one of the 2000-DCs and set it up with 2003 and re-promote it (given the hardware is capable and it makes sense to re-use it). > 3) Upgrade the remaining DC. Yeah, that's what I would recommend. Once everything is running smootly, > - I will replace the old DC with new machine, so i will simply add new > DC from Windows 2003 Member server and demote old one. you can demote the 2000-DCs. Finally, when all 2000-DCs are gone, you can change the Forest Functional and Domain Functional Level. > Should i consider Windows Active directory 2008, is it safer to do the step No need to put the 2008 to the current DCs already.> to the AD 2003 before upgrading to 2008? > Is there any catch up that can bring a crash that i should look before Make sure you adprep the DCs in the datacenter when they're on lighter > proceeding witht the upgrade? load and not during peak hours. Make sure replication is working fine and reliable and links between the sites are ok prior to adprepping. Schema and Config changes need some bandwidth to replicate. Cheers, Florian -- Microsoft MVP - Group Policy eMail: prename [at] frickelsoft [dot] net. blog: http://www.frickelsoft.net/blog. Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste Hello Guillaume,
You're plan sounds ok. Some basic points now, that you have to keep in mind. Upgrading takes time and should be done in times with lower user activity if possible. NT4 member servers will coexist, even with 2008. Exchange, even if you will remove the server from the domain the schema is and will stay changed so you have to check this one: http://support.microsoft.com/?id=314649 Inplace upgrade will work without problem from 2000 to 2003, if you like to do it that way. Instead of doing an inplace upgrade from the 2000 DC's, i prefer to add a fresh installed 2003 member to the domain and promote it as additional DC, move the FSMO roles to it, make it Global catalog and DNS server. This way you can be sure no old installation parts are interfere with the 2003 DC. You can NOT do an inplace upgrade from a 2000 DC to a 2008 DC, therefore you have to add the 2008 as a member to the domain and promote it as additional DC. You don't have to go over 2003 to 2008, not needed. Also check on all DC's that they are healthy and that replication is working, therefore install the support\tools\suptools.msi from the 2000/2003 installation disk and run "dcdiag /v", "netdiag /v" and "repadmin /showrepl" from a command prompt on all DC's. Also you can start "replmon" from the run line, a GUI based tool to check replication. For DNS i would switch to AD integrated zones, if not done, so all DC/DNS servers are writable and have the same DNS information through AD replication. You're steps: 1. - exchange has to be removed BEFORE demoting - if you remove exchange, as told before the schema changes will stay, no problem if you check/change with the article above. - if you demote a domain controller and it works correct, the AD database will be cleaned from it - always give time for replication of that to the other DC's after such major steps - demoting a DC will not delete it from AD sites and services, you have to do it manual - also you have to check all zones in DNS and the DNS server list that the server is cleared if it was DNS server - no need for using ADSIedit 2. - the adprep /forestprep command you have to run on the schema master for the schema change to version 30(2003) or if you use 2003 R2 to version 31 from the second R2 disk - the adprep /domainprep command you have to run on the infrastructure master after adprep /forestprep command has been run succesful, also give time for replication - also see here about http://technet.microsoft.com/en-us/library/cc755958.aspx - if you think about 2008 you should also run adprep /rodcprep which prepare for read-only domain controllers http://technet.microsoft.com/en-us/library/cc731728.aspx - all adprep commands has to run from the newer OS version installation disk on the appropriate DC which has the needed FSMO role, check with "netdom query fsmo" from a command prompt 3. - ok, make sure the changes are all replicated to the other DC's with the tools above Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm Show quoteHide quote > Hi, > Here is our situation, we have a windows 2000 Mixed mode Active > Directory, on 4 physical site. We also have Microsoft Exchange 2000 > but it is > no longer use, we use Lotus Domino. The 5 FSMO role are on 2 DC > located in the main site data center. we have 1 DC on each site, for a > total of 5. The Exchange server is located on another machine. all DC > are Windows 2000 SP4, we only have one remaining member server which > is NT4. This server won't be needed anymore after april 15. > > My goal are: > - Get rid of the Exchange server. > - Upgrade to AD Scheme 2003. > - Upgrade the two main DC (the one with FSMO) to Win 2003. > - Upgrade later the remaining DC to 2003. > 1) Get rid of Exchange Server > - Backup the server > - Uninstall Exchange using the Wizard add/remove program. > - Use DCPromo to Demote the server to Member server (not sure it > is, the > server appear in Site and Service, do i need to demote it?) > - Remove the server from the domain. > - Check with ADSI Edit if anything referring to the Exchange > server and > delete it? > 2) - Upgrade to AD 2003. > - Had previously set the domain to native mode. > - Backup all system state of all dc. > - Use the PDC DC with Windows 2003 CDROM. > - DCPromo /ForestPrep > - DCPromo /DomainPrep > - Do i have to upgrade this Machine using the Win 2003 > CDROM, or > can i use a Windows 2003 Member server, do DCPromo and then move the > FSMO > Role to this server? > > 3) Upgrade the remaining DC. > - I will replace the old DC with new machine, so i will simply > add new > DC from Windows 2003 Member server and demote old one. > Should i consider Windows Active directory 2008, is it safer to do the > step to the AD 2003 before upgrading to 2008? > > Is there any catch up that can bring a crash that i should look before > proceeding witht the upgrade? > > Thank you. > Thank you Meinolf for all the good information.
Concerning the Exchange attribute in schema that will get duplicate during the forestprep. I could follow the scenario 2 Step but i'm wondering. We won't use Exchange anymore on our domain, should i look to completely remove it from schema instead of preparing it so it will upgrade to 2003? I don't want to have to run the adprep from the exchange server cdrom before upgrading... In fact i don't have any media for Exchange 2003. Thank you, -- Show quoteHide quoteGuillaume Genest Network Administrator "Meinolf Weber [MVP-DS]" wrote: > Hello Guillaume, > > You're plan sounds ok. Some basic points now, that you have to keep in mind. > > Upgrading takes time and should be done in times with lower user activity > if possible. > > NT4 member servers will coexist, even with 2008. > > Exchange, even if you will remove the server from the domain the schema is > and will stay changed so you have to check this one: > http://support.microsoft.com/?id=314649 > > Inplace upgrade will work without problem from 2000 to 2003, if you like > to do it that way. Instead of doing an inplace upgrade from the 2000 DC's, > i prefer to add a fresh installed 2003 member to the domain and promote it > as additional DC, move the FSMO roles to it, make it Global catalog and DNS > server. This way you can be sure no old installation parts are interfere > with the 2003 DC. > > You can NOT do an inplace upgrade from a 2000 DC to a 2008 DC, therefore > you have to add the 2008 as a member to the domain and promote it as additional > DC. You don't have to go over 2003 to 2008, not needed. > > Also check on all DC's that they are healthy and that replication is working, > therefore install the support\tools\suptools.msi from the 2000/2003 installation > disk and run "dcdiag /v", "netdiag /v" and "repadmin /showrepl" from a command > prompt on all DC's. Also you can start "replmon" from the run line, a GUI > based tool to check replication. > > For DNS i would switch to AD integrated zones, if not done, so all DC/DNS > servers are writable and have the same DNS information through AD replication. > > You're steps: > 1. > - exchange has to be removed BEFORE demoting > - if you remove exchange, as told before the schema changes will stay, no > problem if you check/change with the article above. > - if you demote a domain controller and it works correct, the AD database > will be cleaned from it > - always give time for replication of that to the other DC's after such major > steps > - demoting a DC will not delete it from AD sites and services, you have to > do it manual > - also you have to check all zones in DNS and the DNS server list that the > server is cleared if it was DNS server > - no need for using ADSIedit > > 2. > - the adprep /forestprep command you have to run on the schema master for > the schema change to version 30(2003) or if you use 2003 R2 to version 31 > from the second R2 disk > - the adprep /domainprep command you have to run on the infrastructure master > after adprep /forestprep command has been run succesful, also give time for > replication > - also see here about http://technet.microsoft.com/en-us/library/cc755958.aspx > - if you think about 2008 you should also run adprep /rodcprep which prepare > for read-only domain controllers http://technet.microsoft.com/en-us/library/cc731728.aspx > - all adprep commands has to run from the newer OS version installation disk > on the appropriate DC which has the needed FSMO role, check with "netdom > query fsmo" from a command prompt > > 3. > - ok, make sure the changes are all replicated to the other DC's with the > tools above > > > Best regards > > Meinolf Weber > Disclaimer: This posting is provided "AS IS" with no warranties, and confers > no rights. > ** Please do NOT email, only reply to Newsgroups > ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > > > > Hi, > > Here is our situation, we have a windows 2000 Mixed mode Active > > Directory, on 4 physical site. We also have Microsoft Exchange 2000 > > but it is > > no longer use, we use Lotus Domino. The 5 FSMO role are on 2 DC > > located in the main site data center. we have 1 DC on each site, for a > > total of 5. The Exchange server is located on another machine. all DC > > are Windows 2000 SP4, we only have one remaining member server which > > is NT4. This server won't be needed anymore after april 15. > > > > My goal are: > > - Get rid of the Exchange server. > > - Upgrade to AD Scheme 2003. > > - Upgrade the two main DC (the one with FSMO) to Win 2003. > > - Upgrade later the remaining DC to 2003. > > 1) Get rid of Exchange Server > > - Backup the server > > - Uninstall Exchange using the Wizard add/remove program. > > - Use DCPromo to Demote the server to Member server (not sure it > > is, the > > server appear in Site and Service, do i need to demote it?) > > - Remove the server from the domain. > > - Check with ADSI Edit if anything referring to the Exchange > > server and > > delete it? > > 2) - Upgrade to AD 2003. > > - Had previously set the domain to native mode. > > - Backup all system state of all dc. > > - Use the PDC DC with Windows 2003 CDROM. > > - DCPromo /ForestPrep > > - DCPromo /DomainPrep > > - Do i have to upgrade this Machine using the Win 2003 > > CDROM, or > > can i use a Windows 2003 Member server, do DCPromo and then move the > > FSMO > > Role to this server? > > > > 3) Upgrade the remaining DC. > > - I will replace the old DC with new machine, so i will simply > > add new > > DC from Windows 2003 Member server and demote old one. > > Should i consider Windows Active directory 2008, is it safer to do the > > step to the AD 2003 before upgrading to 2008? > > > > Is there any catch up that can bring a crash that i should look before > > proceeding witht the upgrade? > > > > Thank you. > > > > > Hello Guillaume,
It is just to check that the attributes are ok, can make trouble during adprep. You can not remove the schema changes. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm Show quoteHide quote > Thank you Meinolf for all the good information. > > Concerning the Exchange attribute in schema that will get duplicate > during the forestprep. I could follow the scenario 2 Step but i'm > wondering. > > We won't use Exchange anymore on our domain, should i look to > completely remove it from schema instead of preparing it so it will > upgrade to 2003? > > I don't want to have to run the adprep from the exchange server cdrom > before upgrading... In fact i don't have any media for Exchange 2003. > > Thank you, > > "Meinolf Weber [MVP-DS]" wrote: > >> Hello Guillaume, >> >> You're plan sounds ok. Some basic points now, that you have to keep >> in mind. >> >> Upgrading takes time and should be done in times with lower user >> activity if possible. >> >> NT4 member servers will coexist, even with 2008. >> >> Exchange, even if you will remove the server from the domain the >> schema is and will stay changed so you have to check this one: >> http://support.microsoft.com/?id=314649 >> >> Inplace upgrade will work without problem from 2000 to 2003, if you >> like to do it that way. Instead of doing an inplace upgrade from the >> 2000 DC's, i prefer to add a fresh installed 2003 member to the >> domain and promote it as additional DC, move the FSMO roles to it, >> make it Global catalog and DNS server. This way you can be sure no >> old installation parts are interfere with the 2003 DC. >> >> You can NOT do an inplace upgrade from a 2000 DC to a 2008 DC, >> therefore you have to add the 2008 as a member to the domain and >> promote it as additional DC. You don't have to go over 2003 to 2008, >> not needed. >> >> Also check on all DC's that they are healthy and that replication is >> working, therefore install the support\tools\suptools.msi from the >> 2000/2003 installation disk and run "dcdiag /v", "netdiag /v" and >> "repadmin /showrepl" from a command prompt on all DC's. Also you can >> start "replmon" from the run line, a GUI based tool to check >> replication. >> >> For DNS i would switch to AD integrated zones, if not done, so all >> DC/DNS servers are writable and have the same DNS information through >> AD replication. >> >> You're steps: >> 1. >> - exchange has to be removed BEFORE demoting >> - if you remove exchange, as told before the schema changes will >> stay, no >> problem if you check/change with the article above. >> - if you demote a domain controller and it works correct, the AD >> database >> will be cleaned from it >> - always give time for replication of that to the other DC's after >> such major >> steps >> - demoting a DC will not delete it from AD sites and services, you >> have to >> do it manual >> - also you have to check all zones in DNS and the DNS server list >> that the >> server is cleared if it was DNS server >> - no need for using ADSIedit >> 2. >> - the adprep /forestprep command you have to run on the schema master >> for >> the schema change to version 30(2003) or if you use 2003 R2 to >> version 31 >> from the second R2 disk >> - the adprep /domainprep command you have to run on the >> infrastructure master >> after adprep /forestprep command has been run succesful, also give >> time for >> replication >> - also see here about >> http://technet.microsoft.com/en-us/library/cc755958.aspx >> - if you think about 2008 you should also run adprep /rodcprep which >> prepare >> for read-only domain controllers >> http://technet.microsoft.com/en-us/library/cc731728.aspx >> - all adprep commands has to run from the newer OS version >> installation disk >> on the appropriate DC which has the needed FSMO role, check with >> "netdom >> query fsmo" from a command prompt >> 3. >> - ok, make sure the changes are all replicated to the other DC's with >> the >> tools above >> Best regards >> >> Meinolf Weber >> Disclaimer: This posting is provided "AS IS" with no warranties, and >> confers >> no rights. >> ** Please do NOT email, only reply to Newsgroups >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm >>> Hi, >>> Here is our situation, we have a windows 2000 Mixed mode Active >>> Directory, on 4 physical site. We also have Microsoft Exchange 2000 >>> but it is >>> no longer use, we use Lotus Domino. The 5 FSMO role are on 2 DC >>> located in the main site data center. we have 1 DC on each site, for >>> a >>> total of 5. The Exchange server is located on another machine. all >>> DC >>> are Windows 2000 SP4, we only have one remaining member server which >>> is NT4. This server won't be needed anymore after april 15. >>> My goal are: >>> - Get rid of the Exchange server. >>> - Upgrade to AD Scheme 2003. >>> - Upgrade the two main DC (the one with FSMO) to Win 2003. >>> - Upgrade later the remaining DC to 2003. >>> 1) Get rid of Exchange Server >>> - Backup the server >>> - Uninstall Exchange using the Wizard add/remove program. >>> - Use DCPromo to Demote the server to Member server (not sure it >>> is, the >>> server appear in Site and Service, do i need to demote it?) >>> - Remove the server from the domain. >>> - Check with ADSI Edit if anything referring to the Exchange >>> server and >>> delete it? >>> 2) - Upgrade to AD 2003. >>> - Had previously set the domain to native mode. >>> - Backup all system state of all dc. >>> - Use the PDC DC with Windows 2003 CDROM. >>> - DCPromo /ForestPrep >>> - DCPromo /DomainPrep >>> - Do i have to upgrade this Machine using the Win 2003 >>> CDROM, or >>> can i use a Windows 2003 Member server, do DCPromo and then move the >>> FSMO >>> Role to this server? >>> 3) Upgrade the remaining DC. >>> - I will replace the old DC with new machine, so i will simply >>> add new >>> DC from Windows 2003 Member server and demote old one. >>> Should i consider Windows Active directory 2008, is it safer to do >>> the >>> step to the AD 2003 before upgrading to 2008? >>> Is there any catch up that can bring a crash that i should look >>> before proceeding witht the upgrade? >>> >>> Thank you. >>>
After 2000 to 2003 upgrade sysvol is not accessable
What am I missing? Domain Trust issue Group Domain Admins cannot be found Manually removing cert server from AD DNS/DHCP problem while migrating computers using ADMT DC fails when isolated from network GPO Version mismatch in Sysvol Logon issue in a 2 domain trust - Win 2003 Folder Redirection Run Amok |
|||||||||||||||||||||||