Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Functional Levels
Functional Levels [message #156143] Wed, 10 June 2009 22:16 Go to next message
TSAM  is currently offline TSAM
Messages: 6
Registered: July 2009
Junior Member
Hello,

I have a Windows 2003 domain with all 2003 domain controllers. We run
Exchange 2003, SQL 2003/ 2005 etc. We have some Windows 2000 member servers
hosting some custom applications.

I am planning to install Windows 2008 additional domain controllers in our
forest. Current forest and domain functional level is on Windows 2000. I like
to get the functional level moved up to Windows 2003 as we don't have any
Windows 2000 domain controllers in our forest. I am positive that this will
not cause an issue to our Windows 2000 member servers as functional levels
are tied to domain controllers. Is that right? Or should I keep forest and
domain functional levels in Windows 2000 for 2000 member servers to function
properly.

TIA
Re: Functional Levels [message #156147 is a reply to message #156143] Wed, 10 June 2009 22:53 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"TSAM" <TSAM@discussions.microsoft.com> wrote in message
news:7F2DEC18-AC7A-4C75-8D1B-DC973DC871B5@microsoft.com...
> Hello,
>
> I have a Windows 2003 domain with all 2003 domain controllers. We run
> Exchange 2003, SQL 2003/ 2005 etc. We have some Windows 2000 member
> servers
> hosting some custom applications.
>
> I am planning to install Windows 2008 additional domain controllers in our
> forest. Current forest and domain functional level is on Windows 2000. I
> like
> to get the functional level moved up to Windows 2003 as we don't have any
> Windows 2000 domain controllers in our forest. I am positive that this
> will
> not cause an issue to our Windows 2000 member servers as functional levels
> are tied to domain controllers. Is that right? Or should I keep forest and
> domain functional levels in Windows 2000 for 2000 member servers to
> function
> properly.
>
> TIA


You are right. Functional levels are directly tied to domain controller
versions. It is save to raise your domain level to 2003, then your forest
level to 2003.

Do you need assistance with your 2008 implementation into your 2003 domain?

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer
aceman@mvps.RemoveThisPart.org

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

"Efficiency is doing things right; effectiveness is doing the right
things." - Peter F. Drucker
http://twitter.com/acefekay
Re: Functional Levels [message #156152 is a reply to message #156143] Thu, 11 June 2009 05:02 Go to previous messageGo to next message
florian  is currently offline florian  Switzerland
Messages: 484
Registered: July 2009
Senior Member
Howdie!

"TSAM" wrote:
> I am planning to install Windows 2008 additional domain controllers in our
> forest. Current forest and domain functional level is on Windows 2000. I
> like
> to get the functional level moved up to Windows 2003 as we don't have any
> Windows 2000 domain controllers in our forest. I am positive that this
> will
> not cause an issue to our Windows 2000 member servers as functional levels
> are tied to domain controllers. Is that right?

You are correct. The functional level is an indication of what feature DCs
can use. It only affects the domain controllers, so legacy member servers
can still be used.

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
Re: Functional Levels [message #156154 is a reply to message #156147] Thu, 11 June 2009 08:20 Go to previous messageGo to next message
TSAM  is currently offline TSAM
Messages: 6
Registered: July 2009
Junior Member
Thanks Ace and Florain.

Ace, thanks very much for offering assistance for 2008 implementation. Yes,
if you have any documented materials/ KB's / technotes I could use will be
very helpful.
Thanks

"Ace Fekay [Microsoft Certified Trainer]" wrote:

> "TSAM" <TSAM@discussions.microsoft.com> wrote in message
> news:7F2DEC18-AC7A-4C75-8D1B-DC973DC871B5@microsoft.com...
> > Hello,
> >
> > I have a Windows 2003 domain with all 2003 domain controllers. We run
> > Exchange 2003, SQL 2003/ 2005 etc. We have some Windows 2000 member
> > servers
> > hosting some custom applications.
> >
> > I am planning to install Windows 2008 additional domain controllers in our
> > forest. Current forest and domain functional level is on Windows 2000. I
> > like
> > to get the functional level moved up to Windows 2003 as we don't have any
> > Windows 2000 domain controllers in our forest. I am positive that this
> > will
> > not cause an issue to our Windows 2000 member servers as functional levels
> > are tied to domain controllers. Is that right? Or should I keep forest and
> > domain functional levels in Windows 2000 for 2000 member servers to
> > function
> > properly.
> >
> > TIA
>
>
> You are right. Functional levels are directly tied to domain controller
> versions. It is save to raise your domain level to 2003, then your forest
> level to 2003.
>
> Do you need assistance with your 2008 implementation into your 2003 domain?
>
> --
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
> Microsoft Certified Trainer
> aceman@mvps.RemoveThisPart.org
>
> For urgent issues, you may want to contact Microsoft PSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> "Efficiency is doing things right; effectiveness is doing the right
> things." - Peter F. Drucker
> http://twitter.com/acefekay
>
>
>
Re: Functional Levels [message #156157 is a reply to message #156143] Thu, 11 June 2009 08:25 Go to previous messageGo to next message
pbbergs  is currently offline pbbergs  United States
Messages: 1024
Registered: July 2009
Senior Member
Take two good backups on two seperate Domain Controllers and raise the
level, you should be fine. :-)

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"TSAM" <TSAM@discussions.microsoft.com> wrote in message
news:7F2DEC18-AC7A-4C75-8D1B-DC973DC871B5@microsoft.com...
> Hello,
>
> I have a Windows 2003 domain with all 2003 domain controllers. We run
> Exchange 2003, SQL 2003/ 2005 etc. We have some Windows 2000 member
> servers
> hosting some custom applications.
>
> I am planning to install Windows 2008 additional domain controllers in our
> forest. Current forest and domain functional level is on Windows 2000. I
> like
> to get the functional level moved up to Windows 2003 as we don't have any
> Windows 2000 domain controllers in our forest. I am positive that this
> will
> not cause an issue to our Windows 2000 member servers as functional levels
> are tied to domain controllers. Is that right? Or should I keep forest and
> domain functional levels in Windows 2000 for 2000 member servers to
> function
> properly.
>
> TIA
Re: Functional Levels [message #156161 is a reply to message #156154] Thu, 11 June 2009 10:08 Go to previous message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"TSAM" <TSAM@discussions.microsoft.com> wrote in message
news:11B5B43F-E881-4B49-8BC5-99EE863FA3F0@microsoft.com...
> Thanks Ace and Florain.
>
> Ace, thanks very much for offering assistance for 2008 implementation.
> Yes,
> if you have any documented materials/ KB's / technotes I could use will be
> very helpful.
> Thanks


Here you go...

============================================================ ==========================================
============================================================ ==========================================
Windows 2003 to 2008 Upgrade

In summary, the things to take note is that prior to introducing a 2008 DC,
the domain and forest needs to be prepped to update the 2003 Schema to 2008.
After promoting the 2008 machine, you'll want to transfer the DNM, Schema
Master and PDC Emulator roles to the 2008 server. You'll also want to make
it a GC (Global Catalog). As for the GC, if you only have one domain in the
forest, make all DCs a GC. If you have more than one domain, do not make the
DC holding the IM role a DC.

The following are links to help guide you before you get started. The first
link is pretty comprehensive, so read it thoroughly to understand what's
involved.

Migrate Forest from 2003 to 2008
http://social.technet.microsoft.com/Forums/en-US/winserverMi gration/thread/9179e0d5-8584-4024-ad2d-6ca943278de8

Installing an Additional 2008 Domain Controller
http://technet.microsoft.com/en-us/library/cc733027.aspx

Information and resources to use when you plan to upgrade Windows ...This
article contains information and resources to use when you plan to upgrade
from Windows Server 2003 to Windows Server 2008. ...
http://support.microsoft.com/kb/948070

What information is available when UPGRADING from W2K/E2K to W2K3 (R2)/E2K3?
http://blogs.dirteam.com/blogs/jorge/archive/2005/11/19/What -information-is-available-when-UPGRADING-from-W2K_2F00_E2K-t o-W2K3-_2800_R2_29002F00_E2K3_3F00_.aspx

Windows Server Longhorn - Installing, Removing and Upgrading to AD (this is
a little older, but basically the same):
http://blogs.dirteam.com/blogs/jorge/archive/2007/03/18/wind ows-server-longhorn-installing-removing-and-upgrading-to-ad. aspx
============================================================ ==========================================
============================================================ ==========================================

Ace
Re: Functional Levels [message #156165 is a reply to message #156143] Thu, 11 June 2009 09:57 Go to previous message
Meinolf Weber MVP-DS  is currently offline Meinolf Weber MVP-DS  Germany
Messages: 129
Registered: July 2009
Senior Member
Hello TSAM,

You are correct, when no earlier OS version DC exist you can raise the levels
even when member servers exist.

For additional 2008 DCs in the domain check this one:

!!!NEVER START BEFORE HAVING CREATED AND TESTED A BACKUP OF YOUR DATA/MACHINES!!!

- On the old server open DNS management console and check that you are running
Active directory integrated zone (easier for replication, if you have more
then one DNS server on DC)

- run replmon from the run line or repadmin /showrepl(only if more then one
DC exist), dcdiag /v and netdiag from the command prompt on the old machine
to check for errors, if you have some post the complete output from the command
here or solve them first. For this tools you have to install the support\tools\suptools.msi
from the 2003 installation disk.

- run adprep /forestprep and adprep /domainprep and adprep /rodcprep from
the 2008 installation disk against the 2003 schema master, with an account
that is member of the Schema admins, to upgrade the schema to the new version
(44), you can check the version with "schupgr" in a command prompt.

- Install the new machine as a member server in your existing domain

- configure a fixed ip and set the preferred DNS server to the old DNS server
only

- run dcpromo and follow the wizard to add the 2008 server to an existing
domain, make it also Global catalog and DNS server.

- for DNS give the server time for replication, at least 15 minutes. Because
you use Active directory integrated zones it will automatically replicate
the zones to the new server. Open DNS management console to check that they
appear

- if the new machine is domain controller and DNS server run again replmon,
dcdiag and netdiag (copy the netdiag from the 2003 to 2008, will work) on
all domain controllers

- Transfer, NOT seize the 5 FSMO roles to the new Domain controller (http://support.microsoft.com/kb/324801
applies also for 2008), FSMO should always be on the newest OS DC

- you can see in the event viewer (Directory service) that the roles are
transferred, also give it some time

- reconfigure the DNS configuration on your NIC of the 2008 server, preferred
DNS itself, secondary the old one

- if you use DHCP do not forget to reconfigure the scope settings to point
to the new installed DNS server

- export and import of DHCP database for 2008 choose "netshell dhcp backup"
and "netshell dhcp restore" command (http://technet.microsoft.com/en-us/library/cc772372.aspx)



Demoting the old DCs (if needed, but at least have 2 DC/DNS/GC in a domain)

- reconfigure your clients/servers that they not longer point to the old
DC/DNS server on the NIC

- to be sure that everything runs fine, disconnect the old DC from the network
and check with clients and servers the connectivity, logon and also with
one client a restart to see that everything is ok

- then run dcpromo to demote the old DC, if it works fine the machine will
move from the DC's OU to the computers container, where you can delete it
by hand. Can be that you got an error during demoting at the beginning, then
uncheck the Global catalog on that DC and try again

- check the DNS management console, that all entries from the machine are
disappeared or delete them by hand if the machine is off the network for ever

- also you have to start AD sites and services and delete the old servername
under the site, this will not be done during demotion

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello,
>
> I have a Windows 2003 domain with all 2003 domain controllers. We run
> Exchange 2003, SQL 2003/ 2005 etc. We have some Windows 2000 member
> servers hosting some custom applications.
>
> I am planning to install Windows 2008 additional domain controllers in
> our forest. Current forest and domain functional level is on Windows
> 2000. I like to get the functional level moved up to Windows 2003 as
> we don't have any Windows 2000 domain controllers in our forest. I am
> positive that this will not cause an issue to our Windows 2000 member
> servers as functional levels are tied to domain controllers. Is that
> right? Or should I keep forest and domain functional levels in Windows
> 2000 for 2000 member servers to function properly.
>
> TIA
>
Previous Topic:unable to logon to server 2003
Next Topic:Linking GPO from another domain
Goto Forum:
  


Current Time: Fri Oct 20 10:01:32 EDT 2017

Total time taken to generate the page: 0.08782 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software