domain upgrade to 2008 by adding new 2008 server

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Gueorgui Dimov - 25 Jun 2008 11:50 GMT

need to upgrade a domain windows 2000 with 2 DCs to windows 2008 and I will
be adding a brand new server for the 2008 DC. I found few valuable tips from
Meinolf Weber, but have few additional questions:

- the phase when the schema is prepared for 2008 - how disruptive will this
be? do I need to have all member servers fully shutdown? can the schema be
prepared in advance? I suppose I am trying to find out if I can minimize the
maintenance window...

- if RRAS is in use as VPN server in the 2000 domain (located on a member
server) - will that continue to work under 2008 provided the two initial DCs
will be left as they are for some time?

Thanks in advance

George

Reply to this Message

Paul Bergson [MVP-DS] - 25 Jun 2008 13:45 GMT

Inline

Signature

Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

> need to upgrade a domain windows 2000 with 2 DCs to windows 2008 and I
> will be adding a brand new server for the 2008 DC. I found few valuable
[quoted text clipped - 4 lines]
> schema be prepared in advance? I suppose I am trying to find out if I can
> minimize the maintenance window...

I would run a system state backup of one of your dc's and then you can
extend the domain and forest with your adprep. It shouldn't impact your
original dc you apply this to but depending on the number and connectivity
of other dc's, replication might take a bit of time. I would recommend
doing at the end of the day.

> - if RRAS is in use as VPN server in the 2000 domain (located on a member
> server) - will that continue to work under 2008 provided the two initial
> DCs will be left as they are for some time?

Since they are on a member server it shouldn't matter it 2000, 2003 or 2008.

> Thanks in advance
>
> George

Reply to this Message

Gueorgui Dimov - 25 Jun 2008 15:04 GMT

thank you Paul,

much appreciated

> Inline
>
[quoted text clipped - 23 lines]
>>
>> George

Reply to this Message

Meinolf Weber - 25 Jun 2008 18:07 GMT

Hello Gueorgui,

You can upgrade the schema without problem in running systems. Create a system
state backup before for the case that something goes wrong.Shouldn't have
any effect on the member server, even if you change functional levels, that
only effects Domain controllers not member servers.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> need to upgrade a domain windows 2000 with 2 DCs to windows 2008 and I
> will be adding a brand new server for the 2008 DC. I found few
[quoted text clipped - 12 lines]
>
> George

Reply to this Message

markm75 - 30 Jul 2008 17:26 GMT

> Hello Gueorgui,
>
[quoted text clipped - 29 lines]
>
> - Show quoted text -

I had similar concerns in going from our 2003 domain to 2008 domain..
i wasnt sure if doing so would affect non-DC 2003 servers.. we have
about 40 users.. 5 servers, 2 of them are DC's which hold DNS and DCHP
and print server roles (these are virtual servers)...

Could i just run the adprep commands.. install a 2008 server, then
promote it, while the old 2003 DCs are still DCs for 2003?

The 2003 member servers would be ok at the 2008 forest level (once
2003 DCs are gone)?

Would i need to migrate the DNS/DCHP roles (install on the new DCs
before promoting them to 2008 DC) first? Or can they live on the 2003
DCs until those boxes get demoted to member status (and eventually
taken offline)..

I see most say to wait till end of day to promote the domain.. i'm
guessing this is a safer bet..

Any tips on this that can be added/commented on?

Reply to this Message

markm75 - 30 Jul 2008 17:27 GMT

> > Hello Gueorgui,
>
[quoted text clipped - 52 lines]
>
> - Show quoted text -

I should add that we run 2007 exchange on a 2003 member server.. so
i'm a bit nervous about making the 2008 domain move, hoping nothing
gets hosed in this regards, especially.

Reply to this Message

Meinolf Weber - 30 Jul 2008 17:45 GMT

Hello markm75,

Should not be effected. Only if you like to install Exchange 2007 on a 2008
server you need Exchange 2007 with SP1. But to be sure i would post to an
exchange NG.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

>>> Hello Gueorgui,
>>>
[quoted text clipped - 58 lines]
> i'm a bit nervous about making the 2008 domain move, hoping nothing
> gets hosed in this regards, especially.

Reply to this Message

Meinolf Weber - 30 Jul 2008 17:39 GMT

Hello markm75,

See inline.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

>> Hello Gueorgui,
>>
[quoted text clipped - 36 lines]
> about 40 users.. 5 servers, 2 of them are DC's which hold DNS and DCHP
> and print server roles (these are virtual servers)...

No, they will still work.

> Could i just run the adprep commands.. install a 2008 server, then
> promote it, while the old 2003 DCs are still DCs for 2003?

Yes.

> The 2003 member servers would be ok at the 2008 forest level (once
> 2003 DCs are gone)?

Yes.

> Would i need to migrate the DNS/DCHP roles (install on the new DCs
> before promoting them to 2008 DC) first? Or can they live on the 2003
> DCs until those boxes get demoted to member status (and eventually
> taken offline)..

No, they can stay there, but you can also export and import the database
to 2008.

> I see most say to wait till end of day to promote the domain.. i'm
> guessing this is a safer bet..
>
> Any tips on this that can be added/commented on?

Make DNS Active directory integrated zones if not done, so it uses AD replication.
Also before starting run dcdiag /v, netdiag /v and repadmin /showrepl to
check for errors. The tools are int he suptools.msi on the 2003 install disk
under support\tools folder.

AND DO NOT FORGET TO BACKUP YOUR DATA BEFORE STARTING, IN CASE SOMETHING
FAILS!!!

Reply to this Message