Solved

Underscore in domain name, sync issues & application access & migratie to Win2008 new domain

Posted on 2008-10-01
4
440 Views
Last Modified: 2008-10-02
There is an underscore in our domain name (i.e. domain_dity.org) which I believe is causing sync issues in DNS and some application access.  Plus our IP scheme is 91.0.0.0 which is a pubic IP range that belongs to some other country and is causing weird stuff to show up in DNS.  There 2 local domain controllers, 6 remote domain controllers all Win2003 Enterprise, 1 Exchange server, SQL, Oracle and a buch of other sequal apps.  I've been given the ok to upgrade to Win2008 and Exchange 2007.  I'm thinking of migrating everything to a new forest and domain (i.e domaincity.org) and a new IP scheme of 172.16.1.0/16 to 172.22.1.0/16.  I'm having a hard time figuring out where to start.  I know that I have to create a trust between the old and the new forest but how do I set up the new IP scheme and DNS so that all the users can continue access the resources while I migrate 700+ users, workstations.  I was thinking of using ADMT and the Exchange Migration Wizard.  I'm probably taking on more that I can chew but can someone help me get started?
0
Comment
Question by:cwojcicki1099
  • 2
  • 2
4 Comments
 
LVL 70

Accepted Solution

by:
Chris Dent earned 125 total points
ID: 22616184

That is quite a big project, but far from impossible.

You just need to break your plan down a bit into requirements:

1. IP Routing

In order to use both IP Ranges at the same time you need something to route between each. That device needs to be fairly capable, after all, it's going to have 700 users going through it while you shift services.

Shifting the IP range in one go, for an organisation of your size, is possible but likely to be more problematic than setting up routing.

Do you have something that can take care of routing between subnets for you?

2. Domain Trust

Once you have your routing up, establish your new domain on that range and configure a Trust with the old domain.

The default settings in MS DNS means it is happy working with underscores, you'll just get a warning about it.

To establish the trust you need to configure name resolution between domains. Conditional forwarders are ideal for this. That should be done on every DNS server used on each domain (even if the PDC Emulator is most important).

3. AD Migration

With the trust up and running a small amount of configuration will give you ADMT. I  highly recommend you disable SID filtering on the trust to allow migrated accounts access to systems using their own SID.

4. Exchange Migration

And finally :) The Exchange Migration Wizard should work well with accounts shifted using ADMT. If anything becomes a problem you, of course, still have ExMerge to fall back on.

Chris
0
 

Author Comment

by:cwojcicki1099
ID: 22625143
Is this the correct syntax to turn off SID filtering where the trusting domain is my old Windows 2003 that I'm migrating from and the trusted domain is the new Windows 2008 that I'm migrating to?

Netdom trust  TrustingDomainName /domain:TrustedDomainName /quarantine:No /userD:domainadministratorAcct /passwordD:domainadminpwd
0
 
LVL 70

Assisted Solution

by:Chris Dent
Chris Dent earned 125 total points
ID: 22625222

Yes, that's right :)

Chris
0
 

Author Comment

by:cwojcicki1099
ID: 22625923
Thank you so much.
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Join & Write a Comment

New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now