Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Windows Server General Help » Adding server 2008 64bit to an existing server 2003 32bit
Adding server 2008 64bit to an existing server 2003 32bit [message #164330] Sat, 20 June 2009 08:50 Go to next message
kamoliolusola  is currently offline kamoliolusola  United States
Messages: 6
Registered: July 2009
Junior Member
Hello everyone

I am having a 32bit window server 2003, holding exchange server 2003
and I want to upgrade my Exchange to exchange 2007, which I believe run
on a 64bit hardware. I have a new window server 2008 64bit software and
hardware. and I have installed the new window server 2008 64bit on the
new 64bit hardware.but I try to join this new server 2008 on the network
as additional domain controller.it does't.

Please can anyone help me on how to Transition my exchange from 2003 to
2007 from 32bit server to 64bit server


--
kamoliolusola
------------------------------------------------------------ ------------
kamoliolusola's Profile: http://forums.techarena.in/members/107357.htm
View this thread: http://forums.techarena.in/windows-server-help/1200807.htm

http://forums.techarena.in
Re: Adding server 2008 64bit to an existing server 2003 32bit [message #164335 is a reply to message #164330] Sat, 20 June 2009 13:03 Go to previous messageGo to next message
Dusko Savatovic  is currently offline Dusko Savatovic  Croatia
Messages: 323
Registered: July 2009
Senior Member
Don't make the new 64-bit computer a domain controller (DC) if you intend to
run Exchange on it. This scenario is not recommended.
Just join the computer to your domain as a member server.
Install Exchange in your existing Exchange organization.
Configure Storage group(s) and Mailbox Store(s)
Move mailboxes from Exchange 2003 to 2007.

If you intend to add Win2008 as a DC, you must first upgrade AD schema and
domain (adprep /forestprep, adprep /domainprep)
http://www.petri.co.il/windows-server-2008-adprep.htm



"kamoliolusola" <kamoliolusola.3u2zfb@DoNotSpam.com> wrote in message
news:kamoliolusola.3u2zfb@DoNotSpam.com...
>
> Hello everyone
>
> I am having a 32bit window server 2003, holding exchange server 2003
> and I want to upgrade my Exchange to exchange 2007, which I believe run
> on a 64bit hardware. I have a new window server 2008 64bit software and
> hardware. and I have installed the new window server 2008 64bit on the
> new 64bit hardware.but I try to join this new server 2008 on the network
> as additional domain controller.it does't.
>
> Please can anyone help me on how to Transition my exchange from 2003 to
> 2007 from 32bit server to 64bit server
>
>
> --
> kamoliolusola
> ------------------------------------------------------------ ------------
> kamoliolusola's Profile: http://forums.techarena.in/members/107357.htm
> View this thread:
> http://forums.techarena.in/windows-server-help/1200807.htm
>
> http://forums.techarena.in
>
Re: Adding server 2008 64bit to an existing server 2003 32bit [message #164336 is a reply to message #164330] Sat, 20 June 2009 15:12 Go to previous messageGo to next message
meiweb(nospam)  is currently offline meiweb(nospam)  Germany
Messages: 1307
Registered: July 2009
Senior Member
Hello kamoliolusola,

I agree 100% with Dusko, Exchange should not run on a Domain controller,
installl it on a member server.

See also here about:
http://technet.microsoft.com/en-us/library/aa997407.aspx

For transition from Exchange 2003 to 2007 start here:
http://technet.microsoft.com/en-us/library/bb125224.aspx

http://technet.microsoft.com/en-us/library/bb124008.aspx

http://support.microsoft.com/kb/555854

http://www.msexchange.org/tutorials/Transitioning-Exchange-2 000-2003-Exchange-Server-2007-Part1.html

If you still will install the 2008 as DC you have to prepare the domain with
the new schema:
http://technet.microsoft.com/en-us/library/cc731188.aspx

http://technet.microsoft.com/en-us/library/cc731728.aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello everyone
>
> I am having a 32bit window server 2003, holding exchange server 2003
> and I want to upgrade my Exchange to exchange 2007, which I believe
> run
> on a 64bit hardware. I have a new window server 2008 64bit software
> and
> hardware. and I have installed the new window server 2008 64bit on the
> new 64bit hardware.but I try to join this new server 2008 on the
> network
> as additional domain controller.it does't.
> Please can anyone help me on how to Transition my exchange from 2003
> to 2007 from 32bit server to 64bit server
>
> http://forums.techarena.in
>
Re: Adding server 2008 64bit to an existing server 2003 32bit [message #164381 is a reply to message #164336] Mon, 22 June 2009 06:25 Go to previous messageGo to next message
kamoliolusola  is currently offline kamoliolusola  United States
Messages: 6
Registered: July 2009
Junior Member
Hello Dusko Savatovic, I appreciate your response together with the good
materials from Meinolf Weber links.

Thanks, I already know that it is not recommeded to install exchange on
a domaain controller. but the problem I have now when installing the
exchange from the member server 2008 64bit, it is prompting me for
EXCHANGE ORGANISATION name which I believe should not be prompted or is
it fine to continue like that. please I need your response on time.


--
kamoliolusola
------------------------------------------------------------ ------------
kamoliolusola's Profile: http://forums.techarena.in/members/107357.htm
View this thread: http://forums.techarena.in/windows-server-help/1200807.htm

http://forums.techarena.in
Re: Adding server 2008 64bit to an existing server 2003 32bit [message #164382 is a reply to message #164381] Mon, 22 June 2009 07:27 Go to previous messageGo to next message
meiweb(nospam)  is currently offline meiweb(nospam)  Germany
Messages: 1307
Registered: July 2009
Senior Member
Hello kamoliolusola,

Before going on with the installation i suggest you read the documentation
how to transition from Exchange 2003 to 2007.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello Dusko Savatovic, I appreciate your response together with the
> good materials from Meinolf Weber links.
>
> Thanks, I already know that it is not recommeded to install exchange
> on a domaain controller. but the problem I have now when installing
> the exchange from the member server 2008 64bit, it is prompting me for
> EXCHANGE ORGANISATION name which I believe should not be prompted or
> is it fine to continue like that. please I need your response on time.
>
> http://forums.techarena.in
>
Re: Adding server 2008 64bit to an existing server 2003 32bit [message #164413 is a reply to message #164382] Mon, 22 June 2009 17:39 Go to previous messageGo to next message
kamoliolusola  is currently offline kamoliolusola  United States
Messages: 6
Registered: July 2009
Junior Member
Hello Meinolf Weber [MVP-DS]

I have gone through the documentation and it was able to resolve few of
my errors but the one I have left yet to be solve is the below error
after running Exchange best practise analyzer.

1.

-*Link state suppression is not enable
Before introducing Exchange Server 2007 into this topology, the
'SuppressStateChanges' configuration parameter should be set to '1' on
server DC1. This parameter is essential if you plan to create multiple
connectors to the dedicated Exchange 2007 routing group.*-


2.
Window server 2003 domain controller
Domain controller 'DC2' is running Windows Server 2003 (original
release). Exchange Server 2007 will only use domain controllers running
Windows Server 2003 Service Pack 1 or later.

I will be glad to here from you soon.

Thanks


--
kamoliolusola
------------------------------------------------------------ ------------
kamoliolusola's Profile: http://forums.techarena.in/members/107357.htm
View this thread: http://forums.techarena.in/windows-server-help/1200807.htm

http://forums.techarena.in
Re: Adding server 2008 64bit to an existing server 2003 32bit [message #164420 is a reply to message #164413] Tue, 23 June 2009 01:42 Go to previous messageGo to next message
meiweb(nospam)  is currently offline meiweb(nospam)  Germany
Messages: 1307
Registered: July 2009
Senior Member
Hello kamoliolusola,

See here:
1.
http://technet.microsoft.com/en-us/library/aa996728.aspx

2. The solution stand in the error message, install at least SP1 but before
isntalling exchange i suggest you update to SP2 and the latest patches via
MS update.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Link state suppression is not enable
>
Re: Adding server 2008 64bit to an existing server 2003 32bit [message #164700 is a reply to message #164420] Tue, 30 June 2009 08:24 Go to previous messageGo to next message
kamoliolusola  is currently offline kamoliolusola  United States
Messages: 6
Registered: July 2009
Junior Member
Meinolf Weber [MVP-DS]

I have been able to join one of the server as a domain controller, the
second server that I am plannning to install exchange is bring this
following Error.

EXCHANGE FAIL TO INITIALIZE THE LOG FILE: ACCESS TO THE PATH
'C:\EXCHANGESETUPLOGS\EXCHANGESETUP.LOG' IS DENIED. SETUP WILL NOT
CONTINUE

Any time I tried to start the installation, it prompt this message, I
am installing it on server 2008 and I am transitioning from exchange
2003 to 2007.
Also I need to run ADSIEDIT on my server and when I tried to open it
from run, it doesn't open, is there any tools needed to run it.

Please kindly assist me as this is taking too much of my time.


--
kamoliolusola
------------------------------------------------------------ ------------
kamoliolusola's Profile: http://forums.techarena.in/members/107357.htm
View this thread: http://forums.techarena.in/windows-server-help/1200807.htm

http://forums.techarena.in
Re: Adding server 2008 64bit to an existing server 2003 32bit [message #164702 is a reply to message #164700] Tue, 30 June 2009 09:29 Go to previous messageGo to next message
meiweb(nospam)  is currently offline meiweb(nospam)  Germany
Messages: 1307
Registered: July 2009
Senior Member
Hello kamoliolusola,

I assume you use not the administrator account but a domain admin account?
Then run the setup.exe with RUN AS function or disable UAC on the server.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Meinolf Weber [MVP-DS]
>
> I have been able to join one of the server as a domain controller, the
> second server that I am plannning to install exchange is bring this
> following Error.
>
> EXCHANGE FAIL TO INITIALIZE THE LOG FILE: ACCESS TO THE PATH
> 'C:\EXCHANGESETUPLOGS\EXCHANGESETUP.LOG' IS DENIED. SETUP WILL NOT
> CONTINUE
>
> Any time I tried to start the installation, it prompt this message, I
> am installing it on server 2008 and I am transitioning from exchange
> 2003 to 2007.
> Also I need to run ADSIEDIT on my server and when I tried to open it
> from run, it doesn't open, is there any tools needed to run it.
> Please kindly assist me as this is taking too much of my time.
>
> http://forums.techarena.in
>
Re: Adding server 2008 64bit to an existing server 2003 32bit [message #165107 is a reply to message #164330] Fri, 10 July 2009 09:59 Go to previous messageGo to next message
kamoliolusola  is currently offline kamoliolusola  United States
Messages: 6
Registered: July 2009
Junior Member
Thanks Meinolf Weber [MVP-DS]

I appreciate it, after following those steps of yours, it work, now My
concern is how to make my client system connect to the internet, I have
ISP connected to one of the server having a domain controller and ISA
2004, and on my network am using DHCP, but I can browse on that server
alone, my client cannot browse.
and formally all are browsing with ISA server 2004, now I have
uninstall the ISA 2004 and I which to install ISA 2006, but yet client
system cannot browse. please any way to help me out please. I need
step-by-step approach.

When ever I tried to open internet explorer from client system, it
display cannot find server or DNS ERROR.

I am waiting for your response.

Thanks.


--
kamoliolusola
------------------------------------------------------------ ------------
kamoliolusola's Profile: http://forums.techarena.in/members/107357.htm
View this thread: http://forums.techarena.in/windows-server-help/1200807.htm

http://forums.techarena.in
Re: Adding server 2008 64bit to an existing server 2003 32bit [message #165110 is a reply to message #165107] Fri, 10 July 2009 10:36 Go to previous messageGo to next message
kamoliolusola  is currently offline kamoliolusola  United States
Messages: 6
Registered: July 2009
Junior Member
Meinolf Weber [MVP-DS]

At the event viewer this are what I got, The event ID: 4515, 6702,
4004, 4015

The zone 1.168.192.in-addr.arpa was previously loaded from the
directory partition MicrosoftDNS but another copy of the zone has been
found in directory partition ForestDnsZones.DC.local. The DNS Server
will ignore this new copy of the zone. Please resolve this conflict as
soon as possible.

If an administrator has moved this zone from one directory partition to
another this may be a harmless transient condition. In this case, no
action is necessary. The deletion of the original copy of the zone
should soon replicate to this server.

If there are two copies of this zone in two different directory
partitions but this is not a transient caused by a zone move operation
then one of these copies should be deleted as soon as possible to
resolve this conflict.

I am waiting
Thanks


--
kamoliolusola
------------------------------------------------------------ ------------
kamoliolusola's Profile: http://forums.techarena.in/members/107357.htm
View this thread: http://forums.techarena.in/windows-server-help/1200807.htm

http://forums.techarena.in
Re: Adding server 2008 64bit to an existing server 2003 32bit [message #165113 is a reply to message #165110] Fri, 10 July 2009 11:44 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"kamoliolusola" <kamoliolusola.3v46bc@DoNotSpam.com> wrote in message news:kamoliolusola.3v46bc@DoNotSpam.com...
>
> Meinolf Weber [MVP-DS]
>
> At the event viewer this are what I got, The event ID: 4515, 6702,
> 4004, 4015
>
> The zone 1.168.192.in-addr.arpa was previously loaded from the
> directory partition MicrosoftDNS but another copy of the zone has been
> found in directory partition ForestDnsZones.DC.local. The DNS Server
> will ignore this new copy of the zone. Please resolve this conflict as
> soon as possible.
>
> If an administrator has moved this zone from one directory partition to
> another this may be a harmless transient condition. In this case, no
> action is necessary. The deletion of the original copy of the zone
> should soon replicate to this server.
>
> If there are two copies of this zone in two different directory
> partitions but this is not a transient caused by a zone move operation
> then one of these copies should be deleted as soon as possible to
> resolve this conflict.
>
> I am waiting
> Thanks

Hello Kamoliolusola,

It appears that there is a duplicate DNS zone in the AD database. Please read and follow the instructions in my blog below concerning this error. You will need to be an Enterprise Admin to run these tasks.

============================================================ ==========================================
Conflicting or duplicate AD Integrated DNS zones
By Ace Fekay, MCSE 2003, MCT

You may have a duplicate zone if a zone either exists in both the Domain NC and one of the Application Partitions, if you get an unusal error message stating, "The name limit for the local computer network adapter card was exceeded," or you installed DNS on another DC and manually created the AD zone and didn't wait for it to automatically populate.

Dupe zone errata:
A quick explanation: When you have an AD integrated zone, the DNS data is stored in the actual AD database and is replicated to all DCs and will be available to any DC that has DNS installed, depending on the zone replication scope setting. If rep scope is set to the bottom button, it will be store in the DomainNC partition of the AD database and compatible with Windows 2000. If the middle button, it will be stored in the DomainDnsZones and only works with Windows 2003 and newer DCs. These two scope types will be replicated to all DCs only in the domain it exists in. The third type, the top buttton, is stored in the ForestDnsZones application partition and is available to ALL DCs in the whole forest. The data in any of the AD integrated zone types are truly secured since you can;t get at them without the proper tools.

If you have an AD integrated zone existing on a DC and you install DNS on another DC in the domain or forest, depending what zone type, it will automatically appear on the new DNS installation without any interaction on your part. If you attempted to manually create the zone, then you pretty much just introduced a duplicate in the AD database, which will cause problems and other issues as well.

A Primary or Secondary zone that is not stored in AD is stored in a text file in the system32\dns folder. This type of zone storage has nothing to do with the above types ONLY unless it is truly a secondary with the Master being a DC transferring a copy of the zone. This types of zone storage is obviously not secure.

Now **IF** you did manually create a zone on one DC while it already existed on another DC, then you may have a duplicate. If this is the case, you can use ADSI Edit and look for zone data that starts with a "CNF..." in front of it. Delete them and you;re good to go.

Under Windows 2000, the physcial AD database is broken up into 3 logical partitions, the DomainNC (Domain Name Context, or some call the Domain Name Container), the Configuration Partition, and the Schema Partition. The Schema and Config partitions replicate to all DCs in a forest. However, the DomainNC is specific only to the domain the DC belongs to. That's where a user, domain local or global group is stored. The DomainNC only replicates to the DCs of that specific domain. When you create an AD INtegrated zone in Win 2000, it gets stored in the DomainNC. This causes a limitation if you want this zone to be available on a DC/DNS server that belongs to a different domain. The only way to get around that is for a little creative designing using either delegation, or secondary zones. This was a challenge for the _msdcs zone, which must be available forest wide to resolve the forest root domain, which contains the Schema and Domain Name Masters FSMO roles.

In Windows 2003, there were two additional partitions added, they are called the DomainDnsZones and ForestDnsZones Application Partitions, specifically to store DNS data. They were conceived to overcome the limitation of Windows 2000's AD Integrated zones. Now you can store an AD Integrated zone in either of these new partitions instead of the DomainNC. If stored in the DomainDnsZones app partition, it is available only in that domain's DomainDnsZones partition. If you store it in the ForestDnsZones app partition, it will be available to any DC/DNS server in the whole forest. This opens many more design options. It also ensures the availability of the _msdcs zone to all DCs in the forest. By default in Win 2003, the _msdcs zone is stored in the ForestDnsZones application partition.

When selecting a zone replication scope in Win2003, in the zone's properties, click on the "Change" button. Under that you will see 3 options:
To choose the ForestDnsZones:
"To all DNS servers in the AD forest example.com"

To choose DomainDnsZones:
"To all DNS servers in the AD domain example.com"

To choose the DomainNC (only for compatibility with Win2000):
"To all domain controllers in the AD domain example.com"


If you have a duplicate, that's indicating there is a zone that exists in the DomainNC and in the DomainDnsZones Application partition. This means at one time, or currently, you have a mixed Win2000/2003 environment and you have DNS installed on both operating systems. On Win2000, if the zone is AD Integrated, it is in the DomainNC, and should be set the same in Win2003's DC/DNS server to keep compatible. Someone must have attempted to change it in Win2003 DNS to put it in the DomainDnsZones partition no realizing the implications, hence the duplicate. In a scenario such as this where you want to use the Win2003 app partitions, you then must insure the zone on the Win2003 is set to the DomainNC, then uninstall DNS off the Win2000 machine, then once that's done, you can then go to the Win2003 DNS and change the partition's replication scope to one of the app partitions.

In ADSI Edit, you can view all five partitions. You were viewing the app partitions, but not the main partitions. You need to add the DomainNC partition in order to delete that zone. But you must uninstall DNS off the Win2000 server first, unless you want to keep the zone in the DomainNC. But that wouldn't make much sense if you want to take advantage of the _msdcs zone being available forest wide in the ForestDnsZones partition, which you should absolutley NOT delete. I would just use the Win2003 DNS servers only.

In ADSI Edit, rt-click ADSI Edit, connect to, in the Connection Point click on "Well known Naming Context", then in the drop-down box, select "Domain". Drill down to CN=System. Under that you will see CN=MicrosoftDNS. You will see the zone in there.

But make sure to decide FIRST which way to go before you delete anything.

To view the DomainDnsZones or the ForestDnsZones partitions, follow these steps:

[ForestDNSZones]
Click Start, click Run, type adsiedit.msc, and then click OK.
In the console tree, right-click ADSI Edit, and then click Connect to.
Click Select or type a Distinguished Name or Naming Context, type the following text in the list, and then click OK:
DC=ForestDNSZones, DC=contoso, DC=com
In the console tree, double-click DC=ForestDNSZones, DC=contoso, DC=com.
Double-click CN=MicrosoftDNS, and click the zone (contoso.com). You should now be able to view the DNS records which exist in this DNS partition. If you desire to remove this partition, right-click on contoso.com and then click Delete.

Note Deleting a zone is a destructive operation. Please confirm that a duplicate zone exists before you perform a deletion.
If you have deleted a zone, restart the DNS service. To do this, follow these steps:
Click Start, point to All Programs, point to Administrative Tools, and then click DNS.
In the console tree, right-click contoso.com, point to All Tasks, and then click Restart.

[DomainDNSZones]
Click Start, click Run, type adsiedit.msc, and then click OK.
In the console tree, right-click ADSI Edit, and then click Connect to.
Click Select or type a Distinguished Name or Naming Context, type the following text in the list, and then click OK: DC=DomainDNSZones,DC=contoso,DC=com.
In the console tree, double-click DC=DomainDNSZones,DC=contoso,DC=com
Double-click CN=MicrosoftDNS, and click the zone (contoso.com). You should now be able to view the DNS records which exist in this DNS partition. If you desire to remove this partition, right-click on contoso.com and then click Delete.

Note Deleting a zone is a destructive operation. Please confirm that a duplicate zone exists before you perform a deletion.
If you have deleted a zone, restart the DNS service. To do this, follow these steps:
Click Start, point to All Programs, point to Administrative Tools, and then click DNS.
In the console tree, right-click contoso.com, point to All Tasks, and then click Restart.

Some reading for you...

Directory Partitions:
http://www.microsoft.com/resources/documentation/Windows/200 0/server/reskit/en-us/distrib/dsbg_dat_favt.asp

kbAlertz- (867464) - Explains how to use ADSI Edit to resolve app partitions issues:
http://www.kbalertz.com/kb_867464.aspx


How to fix it?
-------------

What I've done in a few cases with my clients that have issues with
'duplicate' zone entries in AD (because the zone name was in the Domain NC
(Name Container) Partition, and also in the DomainDnsZones App partition),
was first to change the zone on one of the DCs to a Primary zone, and
allowed zone transfers. Then I went to the other DCs and changed the zone to
a Secondary, and using the first DC as the Master. Then I went into ADSI
Edit, (from memory) under the Domain NC, Services, DNS, and deleted any
reference to the domain name. Then I added the DomainDnsZones partition to
the ADSI Edit console, and deleted any reference to the zone name in there
as well. If you see anything saying something to the extent of a phrase that says
"In Progress...." or "CNF" with a long GUID number after it, delete them too. Everytime
you may have tried tochange the replication scope, it creates one of them.
Delete them all.

Then I forced replication. If there were Sites configured, I juggled around
the servers and subnet objects so all of the servers are now in one site,
then I forced replication (so I didn't have to wait for the next site
replication schedule). Once I've confirmed that replication occured, and the
zones no longer existed in either the Domain NC or DomainDnsZones, then I
changed the zone on the first server back to AD Integrated, choosing the
middle button for it's replication scope (which puts it in the
DomainDnsZones app partition). Then I went to the other servers and changed
the zone to AD Integrated choosing the same replication scope. Then I reset
the sites and subnet objects, and everything was good to go.

Keep in mind, I left the _msdcs... zone alone, since that wasn't causing any
problems and is located in the ForestDnsZones (default) in all of my client
cases I've come across with so far.

It seems like alot of steps, but not really. Just read it over a few times
to get familiar with the procedure. You may even want to change it into a
numbered step by step list if you like. If you only have one DC, and one
Site, then it's much easier since you don't have to mess with secondaries or
play with the site objects.

I hope that helps!
============================================================ ==========================================

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and confers no rights.

Please reply back to the newsgroup/forum to benefit from collaboration among responding engineers, as well as to help others benefit from your resolution.

Ace Fekay, MCT, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging
Microsoft Certified Trainer
aceman@mvps.RemoveThisPart.org
http://twitter.com/acefekay

For urgent issues, you may want to contact Microsoft PSS directly. Please check http://support.microsoft.com for regional support phone numbers.

Re: Adding server 2008 64bit to an existing server 2003 32bit [message #165115 is a reply to message #165107] Fri, 10 July 2009 11:52 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"kamoliolusola" <kamoliolusola.3v43jb@DoNotSpam.com> wrote in message news:kamoliolusola.3v43jb@DoNotSpam.com...
>
> Thanks Meinolf Weber [MVP-DS]
>
> I appreciate it, after following those steps of yours, it work, now My
> concern is how to make my client system connect to the internet, I have
> ISP connected to one of the server having a domain controller and ISA
> 2004, and on my network am using DHCP, but I can browse on that server
> alone, my client cannot browse.
> and formally all are browsing with ISA server 2004, now I have
> uninstall the ISA 2004 and I which to install ISA 2006, but yet client
> system cannot browse. please any way to help me out please. I need
> step-by-step approach.
>
> When ever I tried to open internet explorer from client system, it
> display cannot find server or DNS ERROR.
>
> I am waiting for your response.
>

Hello Kamoliolusola,

I believe the better newsgroup to post an ISA question is the ISA newsgroups. The experts at that group can help you with step by steps. For future reference, if you decide to use a true newsreader, such as Outlook Express, Vista's Windows Mail, or any other true third party newsreader, the newsgroups to subscribe and post to are:

microsoft.public.isa
microsoft.public.isaserver

Because you are posting from a web-based service (Techarena), which Techarena unfortunately may not give you the ability to access these specific newsgroups directly, I've cross-posted it for your convenience. Just check back here for responses.

Ace
Re: Adding server 2008 64bit to an existing server 2003 32bit [message #171711 is a reply to message #165115] Sun, 19 July 2009 09:09 Go to previous messageGo to next message
Peter Larsen  is currently offline Peter Larsen  Denmark
Messages: 1
Registered: July 2009
Junior Member
Ace Fekay [Microsoft Certified Trainer] wrote:

>> I appreciate it, after following those steps of yours, it work, now
>> My concern is how to make my client system connect to the internet,
>> I have ISP connected to one of the server having a domain controller
>> and ISA 2004,

You need to use a dedicated windows server 2003 32 bit box for ISA 2006, put
nothing else on it, and get the isa to work in a lab environment prior to
deploying it. NOTE: ISA 2006 should preferably be a domain member as I
recall various reading material. However: conceptually the ISA is a network
device, it is not a gp server. I deployed on a HP ML110 with an extra disk
added for mirroring and 3 gigabyte ram, 4 at first, but max it ever uses is
2.7 gigabyte. Get at least one dual nic, not just a single, currently I have
three legs on the internal network.

>> and on my network am using DHCP, but I can browse on
>> that server alone, my client cannot browse.

I read you to say that you have deployed ISA on a domain controller. It is
not a recommended setup and it is a configuration nightmare.

>> and formally all are browsing with ISA server 2004, now I have
>> uninstall the ISA 2004 and I which to install ISA 2006, but yet
>> client system cannot browse. please any way to help me out please. I
>> need step-by-step approach.

REMOVE isa from domain controller, I would prefer to reinstall the domain
controller to ensure that it gets back to normal.

>> When ever I tried to open internet explorer from client system, it
>> display cannot find server or DNS ERROR.

Yees .... but you see, having the DNS on the ISA gives you the issue that
noboby can see the DNS, unless you enter into an advanced configuration
quest. Keep it simple, keep the ISA a dedicated box, and put nothing else on
it.

>> I am waiting for your response.

I found it to need careful applied logic to get the ISA 2006 to actually
work, out of the shrinkwrap it just forbids everything, you need to actively
permit any connections you need, there is some help along the way, but it
was a very different beast compared to the Proxy2. And it is a wonderful
critter once you get it working including that it warns you if boxed on your
inside net behaves strangely .... it is cautious, so you need then check
whether it is A problem or just something that is so. In principle however I
expect Microsofts ISA to know what a Windows box is supposed to do and NOT
supposed to do.,

> Hello Kamoliolusola,

> I believe the better newsgroup to post an ISA question is the ISA
> newsgroups. The experts at that group can help you with step by
> steps. For future reference, if you decide to use a true newsreader,
> such as Outlook Express, Vista's Windows Mail, or any other true
> third party newsreader, the newsgroups to subscribe and post to are:

> microsoft.public.isa
> microsoft.public.isaserver

Do exactly that.

> Because you are posting from a web-based service (Techarena), which
> Techarena unfortunately may not give you the ability to access these
> specific newsgroups directly, I've cross-posted it for your
> convenience. Just check back here for responses.

Hopefully this vacation delayed follow-up is of some help, and I DO hope
that I analyzed the setup correctly, if not, then my suggestions may be
voided. There is nothing special about adding Server 2008 to a 2003 domain,
but perhaps a bit of domain prepping, depending on domain setup choices, if
it is to be a DC.

> Ace

Kind regards

Peter Larsen
Re: Adding server 2008 64bit to an existing server 2003 32bit [message #171713 is a reply to message #171711] Sun, 19 July 2009 11:11 Go to previous message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"Peter Larsen" <digilyd@hotmail.com> wrote in message
news:OLCJ$IHCKHA.4376@TK2MSFTNGP04.phx.gbl...
>
> Hopefully this vacation delayed follow-up is of some help, and I DO hope
> that I analyzed the setup correctly, if not, then my suggestions may be
> voided. There is nothing special about adding Server 2008 to a 2003
> domain, but perhaps a bit of domain prepping, depending on domain setup
> choices, if it is to be a DC.
>
>> Ace
>
> Kind regards
>
> Peter Larsen
>
>

Thanks, Peter. Hopefully it will help the OP.

Ace
>
Previous Topic:Windows 2003 Enterprise Edition (32 bit) - Unsigned Drivers
Next Topic:Re: Group policy logon script doesn't run
Goto Forum:
  


Current Time: Sat Aug 19 05:12:17 EDT 2017

Total time taken to generate the page: 0.09371 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software