Solved

Upgrade domain from NT to WIndows 2003

Posted on 2006-06-29
28
265 Views
Last Modified: 2010-04-18
I have to find the "easiest" way to upgrade an NT 4.0 sp4 domain to Windows 2003 SBS (with Exchange). The NT server is still operational. Can I install the 2003 server in the NT domain as a member server, copy the files over to the 2003 server, and then migrate the user/computer accounts and security settings into an active directory structure?
Thank you for any help I can get.
0
Comment
Question by:effincomputers
  • 19
  • 6
  • 3
28 Comments
 
LVL 13

Expert Comment

by:itcoza
ID: 17014560
Nope...  Server 2003 cannot be subordinate to Nt4... We would have to look at a process where you first upgrade the NT4 to 2003... then you have Active Directory.  Then you can follow the instructions on how to install a SBS 2003 into an existing domain so that you can transfer the accounts ... and then decommission the old box.
0
 
LVL 13

Expert Comment

by:itcoza
ID: 17014573
0
 
LVL 13

Expert Comment

by:itcoza
ID: 17014580
Do you need more information?
0
Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

 
LVL 95

Expert Comment

by:Lee W, MVP
ID: 17014591
Easiest way is to use the Active Directory Migration Tool - ADMT - http://www.microsoft.com/downloads/details.aspx?FamilyId=6F86937B-533A-466D-A8E8-AFF85AD3D212&displaylang=en

For the record, a 2003 system can be a member server in an NT4 domain just fine.  BUT, an SBS 2003 system cannot.
0
 

Author Comment

by:effincomputers
ID: 17014640
Thank you, everybody.
Hi leew, I was thinking about using the ADMT tool. Would I have to create a new domain, and then migrate everything over with that tool? The reason why I ask is that I don't want to have to configure all client computers to log into the new domain, because I don't want to have to recreate each user's  working environment. Thanks.
0
 
LVL 13

Expert Comment

by:itcoza
ID: 17014641
The other way would be to Setup your SBS and have it running smoothly and then do the files and settings transfer thing described in your Question => 21904261.  :)
0
 
LVL 13

Expert Comment

by:itcoza
ID: 17014643
ADMT will not work as you can not create a trust with the SBS server.
0
 
LVL 13

Expert Comment

by:itcoza
ID: 17014650
See... Now you do have a solution that will work.

By the way, the addcomputer wizard will also retain your desktop settings for you... if I am not mistaken...
0
 
LVL 13

Expert Comment

by:itcoza
ID: 17014676
Still the best way would be to upgrade the NT4 box to 2003.... and then to add the 2003 SBS to the (nt4)2003 domain...
No computer changes... users log on as normal...  http://support.microsoft.com/?kbid=884453

The shortest path...
0
 
LVL 13

Expert Comment

by:itcoza
ID: 17014687
You do know that both your questions are actually SBS questions and would have been better answered there....
0
 
LVL 95

Expert Comment

by:Lee W, MVP
ID: 17014695
Itcoza - explain something please - if ADMT requires a trust to migrate between domains, explain this (last sentence):
"After the migration is complete, users are prompted to create a new password the first time they log on. If you want to migrate user passwords without requiring users to recreate new passwords, follow the instructions in article 326480 “How to Use Active Directory Migration Tool Version 2 to Migrate from Windows 2000 to Windows Server 2003” in the Knowledge Base at the Microsoft Web site (http://go.microsoft.com/fwlink/?LinkId=20167). In the article, disregard any references to establishing a trust relationship because this is not used for migrating to Windows SBS."

The above is from page 28 of:
http://download.microsoft.com/download/6/d/c/6dccf9b4-d915-4c95-b5af-100b89e02add/SBS_MigratingSBS2k.doc
0
 
LVL 13

Expert Comment

by:itcoza
ID: 17014715
Well then... it is a good thing this is the Internet, else I would have a very red face right now from that slap in it.

I bow to your superior knowledge... and say thank you... I have learned something today.   :{
0
 
LVL 95

Expert Comment

by:Lee W, MVP
ID: 17014723
To put another way - SBS cannot have trusts to or from.  So if that's the case, how is that Microsoft Explicitly lists SBS 2K3 as a compatible product?
"Supported Operating Systems: Windows Server 2003; Windows Server 2003 Service Pack 1; Windows Server 2003 Service Pack 1 for Itanium-based Systems; Windows Server 2003, Datacenter Edition for 64-Bit Itanium-Based Systems; Windows Server 2003, Datacenter x64 Edition; Windows Server 2003, Enterprise Edition for Itanium-based Systems; Windows Server 2003, Enterprise x64 Edition; Windows Server 2003, Standard x64 Edition; Windows Small Business Server 2003"

Excerpt from System Requirements section:
http://www.microsoft.com/downloads/details.aspx?familyid=6F86937B-533A-466D-A8E8-AFF85AD3D212&displaylang=en
0
 
LVL 13

Expert Comment

by:itcoza
ID: 17014724
Sorry... EffinComputers  - ADMT would be the best way to go then.   Nice work Leew  -  I will use this one in my work in the future... I did not know that they had upgraded the tool to not require trust relationships to have the tool work.  But then the last time I used it was a very long time ago...
0
 

Author Comment

by:effincomputers
ID: 17014727
Thanks itcoza. Are you suggesting to upgrade the NT to 2003, and then install the new server with 2003? Then "promote" the newer 2003 server to handle all active directory responsibilities?
0
 
LVL 13

Expert Comment

by:itcoza
ID: 17014728
Hay... I said sorry... ;(
0
 
LVL 95

Expert Comment

by:Lee W, MVP
ID: 17014735
Sorry if you want to take it as a "slap in the face" - you said you couldn't do it.  All indications are that you can.  I can understand why you would say that - I have seen several things stating a trust is required, but I don't see how it's necessary if SBS can otherwise use the tool.
0
 
LVL 13

Expert Comment

by:itcoza
ID: 17014736
I don't know if Leew will approve as he has more points than me, but yes.
I will type you a list of steps if you like.
0
 
LVL 95

Accepted Solution

by:
Lee W, MVP earned 250 total points
ID: 17014746
What does points have to do with this?

You can do as itcoza suggests and upgrade the NT4 domain to 2003 - but this is potentially complicated and expensive.  You need a license for a 2003 server.  If your NT server is old you probably wouldn't want to upgrade that.  You should always take precautions and have another BDC (so that would mean an additional system or virtual system).  that solution, again, is feasible - but costly.
0
 
LVL 13

Expert Comment

by:itcoza
ID: 17014749
Leew,  I used ADMT a long time ago and then it did require trusts between the two domains... maybe MS has changed it since then to work around the problem of trusts in the case of SBS.  And by the way... I have a thick hide... slaps don't faze me.  I can only learn... and that is what this is all about.
0
 
LVL 95

Expert Comment

by:Lee W, MVP
ID: 17014753
Whatever method you choose you really should run some tests first on a test network of old machines.  If you must, spend $500 on 5 500 MHz or so systems on ebay, like Dell GX110s with 10 GB hard drives and 256 MB of RAM - make a test network out of these.
0
 
LVL 13

Expert Comment

by:itcoza
ID: 17014766
LOL  I am having fun here.  Effin,  If ADMT will work, and Leew would know better than me,  then it would be the better way to go as you need to do nothing much to your Nt4 baby.  The other way has risks, but also great rewards. You get to keep everything basically the same... except you will be totally 2003... SBS  

At the end of the day you need to way up the risks to the business in the process you go for.
0
 
LVL 13

Expert Comment

by:itcoza
ID: 17014768
I agree totally with Leew... and by the way.. I feel just like Leew does about getting points once a question has been answered.  You better give them to someone... elso there are slaps for you, Effin.   Or would it be Effin Slaps for your?  
0
 
LVL 13

Expert Comment

by:itcoza
ID: 17014778
This was the best question for the day.... I liked this... even have something that I need to go and test now.
0
 
LVL 13

Assisted Solution

by:itcoza
itcoza earned 250 total points
ID: 17014861
I have tested it in Virtual environment and Yes... the new ADMT works just fine... It's even on the CD - and I didn't even know it.

Have a look here for more instructions on how to use the ADMT: http://sbsbook.packtpub.com/chapter3.htm

ADMT should be your best bet.  Thanx Leew.
0
 
LVL 13

Expert Comment

by:itcoza
ID: 17014863
Also see your Server 2003 question... The ADMT stuff is there... and this will be your best bet.

Regards
M
0
 

Author Comment

by:effincomputers
ID: 17015241
Thanks itcoza and Leew.
When you ran the test in the virtual lab, itcoza, did the ADMT tool work in the scenario I described without a trust?

Thanks
0
 
LVL 13

Expert Comment

by:itcoza
ID: 17015974
Nope... All it needed was an account on the NT4 domain with the right level of access.  

Regards,
M
0

Featured Post

VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question