Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Win2008 DC checklist
Win2008 DC checklist [message #156745] Wed, 24 June 2009 14:06 Go to next message
southpaw  is currently offline southpaw  United States
Messages: 61
Registered: July 2009
Member
Hi all,,

I have successfully added my first Win2008 DC into our single forest/domain
w2k3 environment and have reviewed all logs and ran all the AD health checks
and so far so good. I've also disabled IPv6 and windows firewall and wanted
to know if there are any other services or settings I should make note of .
Perhaps a post checklist for Win2008 DC would be nice .

TIA
Re: Win2008 DC checklist [message #156753 is a reply to message #156745] Wed, 24 June 2009 16:32 Go to previous messageGo to next message
meiweb(nospam)  is currently offline meiweb(nospam)  Germany
Messages: 1307
Registered: July 2009
Senior Member
Hello southpaw,

Move at least the PDCEmulator role to the 2008 DC, better all FSMO roles.
They should be always on the newest OS version, for example a new security
group will built with moving the PDCEmulator role, "Terminal Server License
Servers".

Also run the diagnostic tools dcdiag /v, netdiag /v and repadmin /showrepl
to check for problems. Netdiag.exe copy from the 2003 DC to the 2008, same
location. It works the same way, is not included in 2008.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi all,,
>
> I have successfully added my first Win2008 DC into our single
> forest/domain w2k3 environment and have reviewed all logs and ran all
> the AD health checks and so far so good. I've also disabled IPv6 and
> windows firewall and wanted to know if there are any other services
> or settings I should make note of . Perhaps a post checklist for
> Win2008 DC would be nice .
>
> TIA
>
Re: Win2008 DC checklist [message #156860 is a reply to message #156745] Wed, 24 June 2009 20:33 Go to previous message
Marcin  is currently offline Marcin  United States
Messages: 273
Registered: July 2009
Senior Member
In addition to advice from Meinolf, make sure that you designate the new DC
as a GC (and configure all other domain controllers as GCs as well)
You might want to also designate it as a DNS server to take advantage of new
features/enhacements introduced in Windows Server 2008 (background zone
loading, GlobalNames zone, etc.)

hth
Marcin

"southpaw" <southpaw@nospam.com> wrote in message
news:%23RGJMaP9JHA.5780@TK2MSFTNGP03.phx.gbl...
> Hi all,,
>
> I have successfully added my first Win2008 DC into our single
> forest/domain w2k3 environment and have reviewed all logs and ran all the
> AD health checks and so far so good. I've also disabled IPv6 and windows
> firewall and wanted to know if there are any other services or settings I
> should make note of . Perhaps a post checklist for Win2008 DC would be
> nice .
>
> TIA
>
>
>
Previous Topic:New AD tree or AD forest?
Next Topic:Mapped Drives using Group Policy Issue
Goto Forum:
  


Current Time: Sat Oct 21 19:10:54 EDT 2017

Total time taken to generate the page: 0.04752 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software