Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Active Directory Migration (to Windows Server 2008)
Active Directory Migration (to Windows Server 2008) [message #306174] Tue, 03 November 2009 01:17 Go to next message
NAJMUSSAQIB  is currently offline NAJMUSSAQIB
Messages: 4
Registered: November 2009
Junior Member
Dear All,

Consider the following scenario:

1. FOREST: MAHYKHOORY.CO.AE
2. Domain Controller: PROXY.MAHYKHOORY.CO.AE
3. Child Domain Controller: APPSRVR.MAHYKHOORY.CO.AE
4. Operating System: Windows Server 2003 SP2

DNS services are running on both in terms of Primary and Secondary. DHCP
service is running on a Child D.C. FSMO and Global Catalog resides on
PROXY.MAHYKHOORY.CO.AE. MS EXCHANGE 2000 is running on a seperate box i.e.
mail.mahykhoory.co.ae. We have a internet gateway as
netsrvr.mahykhoory.co.ae (MS ISA 2004).

Since, we have two domain controllers (PDC and Child DC) and they contain
the exact replica of an AD, it will be easy for us to offline PDC and let
Child DC handles the operations for the time being. In the meantime, we will
make the a new PDC with the same hostname as of current PDC and migrate AD
to Windows 2008 AD (from Child DC). Also, is it possible to keep PDC on
Windows 2008 and Child DC on Windows 2003?

A step by step procedure will be much appreciated (including the tools ).

Thanks,

- NAJMUSSAQIB
Re: Active Directory Migration (to Windows Server 2008) [message #306182 is a reply to message #306174] Tue, 03 November 2009 01:37 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello NAJMUSSAQIB,

1.
Just to clarify your terms, child domain controller is an additional DC in
the same domain according to your naming list and not belonging to a real
child domain?

2.
Secondary DNS is a real secondary DNS zone or a second DNS server?

Also PDC/BDC is since Windows 2000 not longer used as terms, all DCs are
the same, the differences belong to the 5 FSMO roles and there placement.

According that 1 is additional and 2 is just a second DNS server in the domain
you can follow the next steps:

!!!NEVER START BEFORE HAVING CREATED AND TESTED A BACKUP OF YOUR DATA/MACHINE!!!

- For Exchange control if this applies, shouldn't but just check:
http://support.microsoft.com/?id=314649

- Also if you use Exchange 2000 in the domain see this for adding 2008 DCs
to the domain, ONLY Exchange 2000 SP3 is allowed with RESTRICTIONS:
http://msexchangeteam.com/archive/2007/08/16/446709.aspx

- On the old server open DNS management console and check that you are running
Active directory integrated zone (easier for replication, if you have more
then one DNS server)

- run replmon from the run line or repadmin /showrepl(only if more then one
DC exist), dcdiag and netdiag from the command prompt on the old machine
to check for errors, if you have some post the complete output from the command
here or solve them first. For this tools you have to install the support\tools\suptools.msi
from the 2003 installation disk.

- run adprep /forestprep and adprep /domainprep and adprep /rodcprep from
the 2008 installation disk against the 2003 schema master(forestprep) / infrastructure
master(domainprep/rodcprep), with an account that is member of the Schema/Enterprise/Domain
admins, to upgrade the schema to the new version (44) or 2008 R2 (47)

- you can check the schema version with "schupgr" or "dsquery * cn=schema,cn=configuration,dc=domainname,dc=local
-scope base -attr objectVersion" without the quotes in a command prompt

- Install the new machine as a member server in your existing domain

- configure a fixed ip and set the preferred DNS server to the old DNS server
only, think about disabling IPv6 if you are not using it, some known problems
exist with it. Follow ( http://blogs.dirteam.com/blogs/paulbergson/archive/2009/03/1 9/disabling-ipv6-on-windows-2008.aspx)
to disable it

- run dcpromo and follow the wizard to add the 2008 server to an existing
domain, make it also Global catalog and DNS server.

- for DNS give the server time for replication, at least 15 minutes. Because
you use Active directory integrated zones it will automatically replicate
the zones to the new server. Open DNS management console to check that they
appear

- if the new machine is domain controller and DNS server run again replmon,
dcdiag and netdiag (copy the netdiag from the 2003 to 2008, will work) on
both domain controllers

- Transfer, NOT seize the 5 FSMO roles to the new Domain controller (http://support.microsoft.com/kb/324801
applies also for 2008), FSMO should always be on the newest OS DC

- you can see in the event viewer (Directory service) that the roles are
transferred, also give it some time

- reconfigure the DNS configuration on your NIC of the 2008 server, preferred
DNS itself, secondary the old one

- if you use DHCP do not forget to reconfigure the scope settings to point
to the new installed DNS server

- if needed export and import of DHCP database for 2008 choose "netshell
dhcp backup" and "netshell dhcp restore" command (http://technet.microsoft.com/en-us/library/cc772372.aspx)



Demoting the old DC

- reconfigure your clients/servers that they not longer point to the old
DC/DNS server on the NIC

- to be sure that everything runs fine, disconnect the old DC from the network
and check with clients and servers the connectivity, logon and also with
one client a restart to see that everything is ok

- then run dcpromo to demote the old DC, if it works fine the machine will
move from the DC's OU to the computers container, where you can delete it
by hand. Can be that you got an error during demoting at the beginning, then
uncheck the Global catalog on that DC and try again

- check the DNS management console, that all entries from the machine are
disappeared or delete them by hand if the machine is off the network for ever

- also you have to start AD sites and services and delete the old servername
under the site, this will not be done during demotion

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Dear All,
>
> Consider the following scenario:
>
> 1. FOREST: MAHYKHOORY.CO.AE
> 2. Domain Controller: PROXY.MAHYKHOORY.CO.AE
> 3. Child Domain Controller: APPSRVR.MAHYKHOORY.CO.AE
> 4. Operating System: Windows Server 2003 SP2
> DNS services are running on both in terms of Primary and Secondary.
> DHCP service is running on a Child D.C. FSMO and Global Catalog
> resides on PROXY.MAHYKHOORY.CO.AE. MS EXCHANGE 2000 is running on a
> seperate box i.e. mail.mahykhoory.co.ae. We have a internet gateway as
> netsrvr.mahykhoory.co.ae (MS ISA 2004).
>
> Since, we have two domain controllers (PDC and Child DC) and they
> contain the exact replica of an AD, it will be easy for us to offline
> PDC and let Child DC handles the operations for the time being. In the
> meantime, we will make the a new PDC with the same hostname as of
> current PDC and migrate AD to Windows 2008 AD (from Child DC). Also,
> is it possible to keep PDC on Windows 2008 and Child DC on Windows
> 2003?
>
> A step by step procedure will be much appreciated (including the tools
> ).
>
> Thanks,
>
> - NAJMUSSAQIB
>
Re: Active Directory Migration (to Windows Server 2008) [message #306183 is a reply to message #306174] Tue, 03 November 2009 01:42 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello NAJMUSSAQIB,

Forget to answer a question, 2008 and 2003 DCs can coexist without any problem,
BUT you are not able to raise the forest/domain functional levels and get
the advantage of new features coming with 2008.

Also you can NOT use the same name of a DC when the machine was not demoted
from the domain.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Dear All,
>
> Consider the following scenario:
>
> 1. FOREST: MAHYKHOORY.CO.AE
> 2. Domain Controller: PROXY.MAHYKHOORY.CO.AE
> 3. Child Domain Controller: APPSRVR.MAHYKHOORY.CO.AE
> 4. Operating System: Windows Server 2003 SP2
> DNS services are running on both in terms of Primary and Secondary.
> DHCP service is running on a Child D.C. FSMO and Global Catalog
> resides on PROXY.MAHYKHOORY.CO.AE. MS EXCHANGE 2000 is running on a
> seperate box i.e. mail.mahykhoory.co.ae. We have a internet gateway as
> netsrvr.mahykhoory.co.ae (MS ISA 2004).
>
> Since, we have two domain controllers (PDC and Child DC) and they
> contain the exact replica of an AD, it will be easy for us to offline
> PDC and let Child DC handles the operations for the time being. In the
> meantime, we will make the a new PDC with the same hostname as of
> current PDC and migrate AD to Windows 2008 AD (from Child DC). Also,
> is it possible to keep PDC on Windows 2008 and Child DC on Windows
> 2003?
>
> A step by step procedure will be much appreciated (including the tools
> ).
>
> Thanks,
>
> - NAJMUSSAQIB
>
Re: Active Directory Migration (to Windows Server 2008) [message #306336 is a reply to message #306174] Tue, 03 November 2009 06:20 Go to previous messageGo to next message
pbbergs  is currently offline pbbergs  United States
Messages: 1024
Registered: July 2009
Senior Member
I have articles on both Decommissioning a DC and Upgrading your forest at:
http://www.pbbergs.com/windows/articles.htm

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"NAJMUSSAQIB" <saqib@mahykhoory.com> wrote in message
news:74AD5319-7EDC-4351-AE73-FF18DF2CFEA0@microsoft.com...
> Dear All,
>
> Consider the following scenario:
>
> 1. FOREST: MAHYKHOORY.CO.AE
> 2. Domain Controller: PROXY.MAHYKHOORY.CO.AE
> 3. Child Domain Controller: APPSRVR.MAHYKHOORY.CO.AE
> 4. Operating System: Windows Server 2003 SP2
>
> DNS services are running on both in terms of Primary and Secondary. DHCP
> service is running on a Child D.C. FSMO and Global Catalog resides on
> PROXY.MAHYKHOORY.CO.AE. MS EXCHANGE 2000 is running on a seperate box i.e.
> mail.mahykhoory.co.ae. We have a internet gateway as
> netsrvr.mahykhoory.co.ae (MS ISA 2004).
>
> Since, we have two domain controllers (PDC and Child DC) and they contain
> the exact replica of an AD, it will be easy for us to offline PDC and let
> Child DC handles the operations for the time being. In the meantime, we
> will make the a new PDC with the same hostname as of current PDC and
> migrate AD to Windows 2008 AD (from Child DC). Also, is it possible to
> keep PDC on Windows 2008 and Child DC on Windows 2003?
>
> A step by step procedure will be much appreciated (including the tools ).
>
> Thanks,
>
> - NAJMUSSAQIB
>
>
>
>
>
>
>
Re: Active Directory Migration (to Windows Server 2008) [message #306562 is a reply to message #306174] Tue, 03 November 2009 09:58 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"NAJMUSSAQIB" <saqib@mahykhoory.com> wrote in message
news:74AD5319-7EDC-4351-AE73-FF18DF2CFEA0@microsoft.com...
> Dear All,
>
> Consider the following scenario:
>
> 1. FOREST: MAHYKHOORY.CO.AE
> 2. Domain Controller: PROXY.MAHYKHOORY.CO.AE
> 3. Child Domain Controller: APPSRVR.MAHYKHOORY.CO.AE
> 4. Operating System: Windows Server 2003 SP2
>
> DNS services are running on both in terms of Primary and Secondary. DHCP
> service is running on a Child D.C. FSMO and Global Catalog resides on
> PROXY.MAHYKHOORY.CO.AE. MS EXCHANGE 2000 is running on a seperate box i.e.
> mail.mahykhoory.co.ae. We have a internet gateway as
> netsrvr.mahykhoory.co.ae (MS ISA 2004).
>
> Since, we have two domain controllers (PDC and Child DC) and they contain
> the exact replica of an AD, it will be easy for us to offline PDC and let
> Child DC handles the operations for the time being. In the meantime, we
> will make the a new PDC with the same hostname as of current PDC and
> migrate AD to Windows 2008 AD (from Child DC). Also, is it possible to
> keep PDC on Windows 2008 and Child DC on Windows 2003?
>
> A step by step procedure will be much appreciated (including the tools ).
>
> Thanks,
>
> - NAJMUSSAQIB
>

Meinolf and Paul have provided excellent links and suggestions. I am curious
to your responses to Meinolf's questions, because that will affect your
procedures. I also have one more question:

The domain controller called "PROXY.MAHYKHOORY.CO.AE," is that a Proxy
server or ISA installed on it?
Does it have multiple NICs and/or IP addresses on it?

If so, this is not a suggested nor recommended configuration for a domain
controller. It's guaranteed to introduce problems and complexities with
functionality, especially if ISA is installed on it.


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.
Re: Active Directory Migration (to Windows Server 2008) [message #306570 is a reply to message #306174] Tue, 03 November 2009 10:01 Go to previous messageGo to next message
Jorge Silva  is currently offline Jorge Silva
Messages: 398
Registered: July 2009
Senior Member
Hi NAJMUSSAQIB,
If I understand you correctly, You have 2 DCs in a single Domain/Forest
right?

Are you trying to do a clean/new 2008 install, or a direct upgrade in an
existing DC?

--
I hope that the information above helps you.
Have a Nice day.
Jorge Silva
MVP Directory Services

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.



"NAJMUSSAQIB" <saqib@mahykhoory.com> wrote in message
news:74AD5319-7EDC-4351-AE73-FF18DF2CFEA0@microsoft.com...
> Dear All,
>
> Consider the following scenario:
>
> 1. FOREST: MAHYKHOORY.CO.AE
> 2. Domain Controller: PROXY.MAHYKHOORY.CO.AE
> 3. Child Domain Controller: APPSRVR.MAHYKHOORY.CO.AE
> 4. Operating System: Windows Server 2003 SP2
>
> DNS services are running on both in terms of Primary and Secondary. DHCP
> service is running on a Child D.C. FSMO and Global Catalog resides on
> PROXY.MAHYKHOORY.CO.AE. MS EXCHANGE 2000 is running on a seperate box i.e.
> mail.mahykhoory.co.ae. We have a internet gateway as
> netsrvr.mahykhoory.co.ae (MS ISA 2004).
>
> Since, we have two domain controllers (PDC and Child DC) and they contain
> the exact replica of an AD, it will be easy for us to offline PDC and let
> Child DC handles the operations for the time being. In the meantime, we
> will make the a new PDC with the same hostname as of current PDC and
> migrate AD to Windows 2008 AD (from Child DC). Also, is it possible to
> keep PDC on Windows 2008 and Child DC on Windows 2003?
>
> A step by step procedure will be much appreciated (including the tools ).
>
> Thanks,
>
> - NAJMUSSAQIB
>
>
>
>
>
>
>
RE: Active Directory Migration (to Windows Server 2008) [message #307687 is a reply to message #306174] Wed, 04 November 2009 09:09 Go to previous message
JustinHa  is currently offline JustinHa
Messages: 8
Registered: September 2009
Junior Member
Hi,
Some topic on TechNet might help:
Active Directory Domain Services and DNS Server Migration Guide at
http://technet.microsoft.com/en-us/library/dd379558(WS.10).aspx
That guide is useful if you want to migrate data and settings, such as
computer name and IP address, from a current DC to a new DC.

Upgrading Active Directory Domains to Windows Server 2008 AD DS Domains at
http://technet.microsoft.com/en-us/library/cc731188(WS.10).aspx
and
Appendix B: How to Upgrade Domain Controllers to Windows Server 2008 or
Windows Server 2008 R2 at
http://technet.microsoft.com/en-us/library/ee522994(WS.10).aspx

Those topics are better for upgrade scenario.

I hope that helps,
Justin

"NAJMUSSAQIB" wrote:

> Dear All,
>
> Consider the following scenario:
>
> 1. FOREST: MAHYKHOORY.CO.AE
> 2. Domain Controller: PROXY.MAHYKHOORY.CO.AE
> 3. Child Domain Controller: APPSRVR.MAHYKHOORY.CO.AE
> 4. Operating System: Windows Server 2003 SP2
>
> DNS services are running on both in terms of Primary and Secondary. DHCP
> service is running on a Child D.C. FSMO and Global Catalog resides on
> PROXY.MAHYKHOORY.CO.AE. MS EXCHANGE 2000 is running on a seperate box i.e.
> mail.mahykhoory.co.ae. We have a internet gateway as
> netsrvr.mahykhoory.co.ae (MS ISA 2004).
>
> Since, we have two domain controllers (PDC and Child DC) and they contain
> the exact replica of an AD, it will be easy for us to offline PDC and let
> Child DC handles the operations for the time being. In the meantime, we will
> make the a new PDC with the same hostname as of current PDC and migrate AD
> to Windows 2008 AD (from Child DC). Also, is it possible to keep PDC on
> Windows 2008 and Child DC on Windows 2003?
>
> A step by step procedure will be much appreciated (including the tools ).
>
> Thanks,
>
> - NAJMUSSAQIB
>
>
>
>
>
>
>
Previous Topic:Pre-authentication events logged, but not lock-out or auth failure
Next Topic:DFS won't work, get RPC is unavailable
Goto Forum:
  


Current Time: Wed Jan 17 04:12:00 MST 2018

Total time taken to generate the page: 0.04547 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software