Upgrading from windows 2003 to windows 2008.
in [Active Directory]
|
From: guv on 28 Jul 2009 10:40 We are running a naive windows 2003 domain, and now want to upgrade to windows 2008. We have one forest with 2 domains and have several sites and each site has several domain controllers. My question is how do we upgrade to windows 2008 domain. Is there any schema update we do , if so what is the procedure. Also what functional levels are there in windows 2008 and what features we would get with w2008 DC's running in a windows 2003 domain. Also are there any known issues with upgrading from w2003 to w2008, or with doing any schema updates. Thanks
From: Meinolf Weber [MVP-DS] on 28 Jul 2009 10:52 Hello guv, You have to upgrade the schema on the schema master with an account of the schema admins. 2008 will be schme aversion 44 and 2008 R2 needs also a schema upgrade to version 47. You can check with "schupgr" in a command line the version. As long as you not raise the functional levels to Windows server 2008/Windows server 2008 R2 you wan't have additional options for DCs, but you have additional functionalities like group policy preferences also with having 2008 member servers. Fine grained password policies for example requires all DCs to be 2008 and functional levels as Windows server 2008. Active directory recycle bin for example requires Windows server 2008 R2. You should install additioanl DCs instead of using in-place upgrade in my opinion. It is always better to use a fresh install with clean OS version. Adprep 2008: http://technet.microsoft.com/en-us/library/cc731728(WS.10).aspx Functional levels 2008: http://technet.microsoft.com/en-us/library/cc771132(WS.10).aspx See here for starting with a new installed DC: !!!NEVER START BEFORE HAVING CREATED AND TESTED A BACKUP OF YOUR DATA/MACHINE!!! - On the old server open DNS management console and check that you are running Active directory integrated zone (easier for replication, if you have more then one DNS server) - run replmon from the run line or repadmin /showrepl(only if more then one DC exist), dcdiag and netdiag from the command prompt on the old machine to check for errors, if you have some post the complete output from the command here or solve them first. For this tools you have to install the support\tools\suptools.msi from the 2003 installation disk. - run adprep /forestprep and adprep /domainprep and adprep /rodcprep from the 2008 installation disk against the 2003 schema master, with an account that is member of the Schema admins, to upgrade the schema to the new version (44), you can check the version with "schupgr" in a command prompt. - Install the new machine as a member server in your existing domain - configure a fixed ip and set the preferred DNS server to the old DNS server only - run dcpromo and follow the wizard to add the 2008 server to an existing domain, make it also Global catalog and DNS server. - for DNS give the server time for replication, at least 15 minutes. Because you use Active directory integrated zones it will automatically replicate the zones to the new server. Open DNS management console to check that they appear - if the new machine is domain controller and DNS server run again replmon, dcdiag and netdiag (copy the netdiag from the 2003 to 2008, will work) on both domain controllers - Transfer, NOT seize the 5 FSMO roles to the new Domain controller (http://support.microsoft.com/kb/324801 applies also for 2008), FSMO should always be on the newest OS DC - you can see in the event viewer (Directory service) that the roles are transferred, also give it some time - reconfigure the DNS configuration on your NIC of the 2008 server, preferred DNS itself, secondary the old one - if you use DHCP do not forget to reconfigure the scope settings to point to the new installed DNS server - export and import of DHCP database for 2008 choose "netshell dhcp backup" and "netshell dhcp restore" command (http://technet.microsoft.com/en-us/library/cc772372.aspx) Demoting the old DC - reconfigure your clients/servers that they not longer point to the old DC/DNS server on the NIC - to be sure that everything runs fine, disconnect the old DC from the network and check with clients and servers the connectivity, logon and also with one client a restart to see that everything is ok - then run dcpromo to demote the old DC, if it works fine the machine will move from the DC's OU to the computers container, where you can delete it by hand. Can be that you got an error during demoting at the beginning, then uncheck the Global catalog on that DC and try again - check the DNS management console, that all entries from the machine are disappeared or delete them by hand if the machine is off the network for ever - also you have to start AD sites and services and delete the old servername under the site, this will not be done during demotion Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > We are running a naive windows 2003 domain, and now want to upgrade to > windows 2008. We have one forest with 2 domains and have several > sites and > each site has several domain controllers. My question is how do we > upgrade > to windows 2008 domain. Is there any schema update we do , if so what > is > the procedure. > Also what functional levels are there in windows 2008 and what > features we > would get with w2008 DC's running in a windows 2003 domain. > Also are there any known issues with upgrading from w2003 to w2008, or > with doing any schema updates. > > Thanks >
From: guv on 29 Jul 2009 08:31 Thanks for the great explanation. Just few questions, for w2008 R2 do i need to another schema update, after I have done one for w2008, or is it best I do the w2008 R2 only ( if its released yet). Also I have 2 domains, so I have to do a domainprep for each domain. Also does it affect our exchange upgrade, as we want to upgrade from exchange 2003 to exchange 2007. As I know there are schema updates required there. "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message news:ff16fb662b32b8cbddbafb07d6d6(a)msnews.microsoft.com... > Hello guv, > > You have to upgrade the schema on the schema master with an account of the > schema admins. 2008 will be schme aversion 44 and 2008 R2 needs also a > schema upgrade to version 47. You can check with "schupgr" in a command > line the version. > > As long as you not raise the functional levels to Windows server > 2008/Windows server 2008 R2 you wan't have additional options for DCs, but > you have additional functionalities like group policy preferences also > with having 2008 member servers. > > Fine grained password policies for example requires all DCs to be 2008 and > functional levels as Windows server 2008. > > Active directory recycle bin for example requires Windows server 2008 R2. > > You should install additioanl DCs instead of using in-place upgrade in my > opinion. It is always better to use a fresh install with clean OS version. > > Adprep 2008: > http://technet.microsoft.com/en-us/library/cc731728(WS.10).aspx > > Functional levels 2008: > http://technet.microsoft.com/en-us/library/cc771132(WS.10).aspx > > > See here for starting with a new installed DC: > !!!NEVER START BEFORE HAVING CREATED AND TESTED A BACKUP OF YOUR > DATA/MACHINE!!! > > - On the old server open DNS management console and check that you are > running Active directory integrated zone (easier for replication, if you > have more then one DNS server) > > - run replmon from the run line or repadmin /showrepl(only if more then > one DC exist), dcdiag and netdiag from the command prompt on the old > machine to check for errors, if you have some post the complete output > from the command here or solve them first. For this tools you have to > install the support\tools\suptools.msi from the 2003 installation disk. > > - run adprep /forestprep and adprep /domainprep and adprep /rodcprep from > the 2008 installation disk against the 2003 schema master, with an account > that is member of the Schema admins, to upgrade the schema to the new > version (44), you can check the version with "schupgr" in a command > prompt. > > - Install the new machine as a member server in your existing domain > > - configure a fixed ip and set the preferred DNS server to the old DNS > server only > > - run dcpromo and follow the wizard to add the 2008 server to an existing > domain, make it also Global catalog and DNS server. > > - for DNS give the server time for replication, at least 15 minutes. > Because you use Active directory integrated zones it will automatically > replicate the zones to the new server. Open DNS management console to > check that they appear > > - if the new machine is domain controller and DNS server run again > replmon, dcdiag and netdiag (copy the netdiag from the 2003 to 2008, will > work) on both domain controllers > > - Transfer, NOT seize the 5 FSMO roles to the new Domain controller > (http://support.microsoft.com/kb/324801 applies also for 2008), FSMO > should always be on the newest OS DC > > - you can see in the event viewer (Directory service) that the roles are > transferred, also give it some time > > - reconfigure the DNS configuration on your NIC of the 2008 server, > preferred DNS itself, secondary the old one > > - if you use DHCP do not forget to reconfigure the scope settings to point > to the new installed DNS server > > - export and import of DHCP database for 2008 choose "netshell dhcp > backup" and "netshell dhcp restore" command > (http://technet.microsoft.com/en-us/library/cc772372.aspx) > > > > Demoting the old DC > > - reconfigure your clients/servers that they not longer point to the old > DC/DNS server on the NIC > > - to be sure that everything runs fine, disconnect the old DC from the > network and check with clients and servers the connectivity, logon and > also with one client a restart to see that everything is ok > > - then run dcpromo to demote the old DC, if it works fine the machine will > move from the DC's OU to the computers container, where you can delete it > by hand. Can be that you got an error during demoting at the beginning, > then uncheck the Global catalog on that DC and try again > > - check the DNS management console, that all entries from the machine are > disappeared or delete them by hand if the machine is off the network for > ever > > - also you have to start AD sites and services and delete the old > servername under the site, this will not be done during demotion > > Best regards > > Meinolf Weber > Disclaimer: This posting is provided "AS IS" with no warranties, and > confers no rights. > ** Please do NOT email, only reply to Newsgroups > ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > >> We are running a naive windows 2003 domain, and now want to upgrade to >> windows 2008. We have one forest with 2 domains and have several >> sites and >> each site has several domain controllers. My question is how do we >> upgrade >> to windows 2008 domain. Is there any schema update we do , if so what >> is >> the procedure. >> Also what functional levels are there in windows 2008 and what >> features we >> would get with w2008 DC's running in a windows 2003 domain. >> Also are there any known issues with upgrading from w2003 to w2008, or >> with doing any schema updates. >> >> Thanks >> > >
From: Meinolf Weber [MVP-DS] on 29 Jul 2009 18:49 Hello guv, 2008 R2 requires again a schema update on the 2008 schema master. Therefore you find adprep32.exe(32bit) and adprep.exe(64bit) on the 2008 R2 installation disk, so you can use the needed version depending on your current OS architecture. Exchange upgrade requires also a schema update from the exchange 2007 installation disk, just follow the wizard when you insert the disk. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > Thanks for the great explanation. > > Just few questions, for w2008 R2 do i need to another schema update, > after I have done one for w2008, or is it best I do the w2008 R2 only > ( if its released yet). Also I have 2 domains, so I have to do a > domainprep for each domain. > > Also does it affect our exchange upgrade, as we want to upgrade from > exchange 2003 to exchange 2007. As I know there are schema updates > required > there. > "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message > news:ff16fb662b32b8cbddbafb07d6d6(a)msnews.microsoft.com... >> Hello guv, >> >> You have to upgrade the schema on the schema master with an account >> of the schema admins. 2008 will be schme aversion 44 and 2008 R2 >> needs also a schema upgrade to version 47. You can check with >> "schupgr" in a command line the version. >> >> As long as you not raise the functional levels to Windows server >> 2008/Windows server 2008 R2 you wan't have additional options for >> DCs, but you have additional functionalities like group policy >> preferences also with having 2008 member servers. >> >> Fine grained password policies for example requires all DCs to be >> 2008 and functional levels as Windows server 2008. >> >> Active directory recycle bin for example requires Windows server 2008 >> R2. >> >> You should install additioanl DCs instead of using in-place upgrade >> in my opinion. It is always better to use a fresh install with clean >> OS version. >> >> Adprep 2008: >> http://technet.microsoft.com/en-us/library/cc731728(WS.10).aspx >> Functional levels 2008: >> http://technet.microsoft.com/en-us/library/cc771132(WS.10).aspx >> See here for starting with a new installed DC: >> !!!NEVER START BEFORE HAVING CREATED AND TESTED A BACKUP OF YOUR >> DATA/MACHINE!!! >> - On the old server open DNS management console and check that you >> are running Active directory integrated zone (easier for replication, >> if you have more then one DNS server) >> >> - run replmon from the run line or repadmin /showrepl(only if more >> then one DC exist), dcdiag and netdiag from the command prompt on the >> old machine to check for errors, if you have some post the complete >> output from the command here or solve them first. For this tools you >> have to install the support\tools\suptools.msi from the 2003 >> installation disk. >> >> - run adprep /forestprep and adprep /domainprep and adprep /rodcprep >> from the 2008 installation disk against the 2003 schema master, with >> an account that is member of the Schema admins, to upgrade the schema >> to the new version (44), you can check the version with "schupgr" in >> a command prompt. >> >> - Install the new machine as a member server in your existing domain >> >> - configure a fixed ip and set the preferred DNS server to the old >> DNS server only >> >> - run dcpromo and follow the wizard to add the 2008 server to an >> existing domain, make it also Global catalog and DNS server. >> >> - for DNS give the server time for replication, at least 15 minutes. >> Because you use Active directory integrated zones it will >> automatically replicate the zones to the new server. Open DNS >> management console to check that they appear >> >> - if the new machine is domain controller and DNS server run again >> replmon, dcdiag and netdiag (copy the netdiag from the 2003 to 2008, >> will work) on both domain controllers >> >> - Transfer, NOT seize the 5 FSMO roles to the new Domain controller >> (http://support.microsoft.com/kb/324801 applies also for 2008), FSMO >> should always be on the newest OS DC >> >> - you can see in the event viewer (Directory service) that the roles >> are transferred, also give it some time >> >> - reconfigure the DNS configuration on your NIC of the 2008 server, >> preferred DNS itself, secondary the old one >> >> - if you use DHCP do not forget to reconfigure the scope settings to >> point to the new installed DNS server >> >> - export and import of DHCP database for 2008 choose "netshell dhcp >> backup" and "netshell dhcp restore" command >> (http://technet.microsoft.com/en-us/library/cc772372.aspx) >> >> Demoting the old DC >> >> - reconfigure your clients/servers that they not longer point to the >> old DC/DNS server on the NIC >> >> - to be sure that everything runs fine, disconnect the old DC from >> the network and check with clients and servers the connectivity, >> logon and also with one client a restart to see that everything is ok >> >> - then run dcpromo to demote the old DC, if it works fine the machine >> will move from the DC's OU to the computers container, where you can >> delete it by hand. Can be that you got an error during demoting at >> the beginning, then uncheck the Global catalog on that DC and try >> again >> >> - check the DNS management console, that all entries from the machine >> are disappeared or delete them by hand if the machine is off the >> network for ever >> >> - also you have to start AD sites and services and delete the old >> servername under the site, this will not be done during demotion >> >> Best regards >> >> Meinolf Weber >> Disclaimer: This posting is provided "AS IS" with no warranties, and >> confers no rights. >> ** Please do NOT email, only reply to Newsgroups >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm >>> We are running a naive windows 2003 domain, and now want to upgrade >>> to >>> windows 2008. We have one forest with 2 domains and have several >>> sites and >>> each site has several domain controllers. My question is how do we >>> upgrade >>> to windows 2008 domain. Is there any schema update we do , if so >>> what >>> is >>> the procedure. >>> Also what functional levels are there in windows 2008 and what >>> features we >>> would get with w2008 DC's running in a windows 2003 domain. >>> Also are there any known issues with upgrading from w2003 to w2008, >>> or >>> with doing any schema updates. >>> Thanks >>>
|
Pages: 1 Prev: AD restore Next: CSVDE export of users: how to make whenCreated query the curre |