Upgrade Windows 2003 AD to Windows 2008

garywinn
garywinn used Ask the Experts™
on
Best method for upgrading Windows 2003 Activdirectory to windows 2008
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Commented:
You have not given much to work on so links would have to suffice.

Upgrading Active Directory Domains to Windows Server 2008 and Windows Server 2008 R2 AD DS Domains
http://technet.microsoft.com/en-us/library/cc731188(WS.10).aspx.

If you can be more specific, it would help in providing a better answer.
Below is a copy of a checklist I'm writing to prepare for our move to 2008 R2 AD.  Formatting is a little wonky...

CHECKLIST
LICENSING
1.      Purchase Windows 2008 R2 licenses x 2.

DISASTER RECOVERY
1.      Backup system state from Win2k3 DC.
2.      Ensure Active Directory restore mode password is available
3.      Restore test of Active Directory

ACTIVE DIRECTORY HEALTH CHECKS
1.      Microsoft IT Environment Health Scanner
2.      Verify AD replication
     a.      REPADMIN /REPLSUM /BYSRC /BYDEST /SORT:DELTA
3.      Verify Active Directory health with DCDIAG.
     a.      DCDIAG.EXE /e /test:frssysvol
4.      Examine the event log on all DCs for problems stemming from the following:
     a.      physical connectivity
     b.      network connectivity
     c.      name registration
     d.      name resolution
     e.      authentication
     f.      Group Policy
     g.      security policy
     h.      disk subsystem
     i.      schema
     j.      topology
     k.      replication engine

INITIAL ACTIVE DIRECTORY PREP
1.      Run adprep.exe /forestprep from the Schema Master.
2.      Run adprep.exe /domainprep from the Infrastructure Master.
3.      Run adprep.exe /domainprep /gpprep from the Infrastructure Master.

PREPARE 2008 SERVERS
1.      Install Win2k8 DC1
2.      Install Win2k8 DC2

INSTALL 2008 ACTIVE DIRECTORY
1.      DCPROMO 2008 servers
     a.      DCPROMO Win2k8 DC1
     b.      DCPROMO Win2k8 DC2
     c.      Check logs
      i.      Dcpromo.log
      ii.      Dcpromogui.log
      iii.      Event Viewer
2.      Move Operations Masters roles
     a.      Schema Master
     b.      Domain Naming Master
     c.      Infrastructure Master
     d.      RID Master
     e.      PDC Emulator
3.      Enable Global Catalog roles

INFRASTRUCTURE SERVICES
1.      DHCP
2.      DNS
3.      IAS (now called NPS)
4.      Certificate Authority
5.      Modify DHCP scope options
6.      Setups
7.      Group Policy

INITIAL TEST PHASE
1.      Turn off Win2k3 DCs.
2.      Test domain functionality
     a.      Login (non-cached)
     b.      GPO update
     c.      Replication

RETIRE 2003 DOMAIN CONTROLLERS
1.      DCPROMO Win2k3 DCs

FINAL TEST PHASE
1.      Login (non-cached)
2.      GPO update
3.      Replication

BACKUPS
1.      Add Win2k8 DCs
2.       Remove Win2k3 DCs

FINAL ACTIVE DIRECTORY PREP
1.      Raise domain level functionality to 2008.
2.      Raise forest level functionality to 2008.
How to Generate Services Revenue the Easiest Way

This Tuesday! Learn key insights about modern cyber protection services & gain practical strategies to skyrocket business:

- What it takes to build a cloud service portfolio
- How to determine which services will help your unique business grow
- Various use-cases and examples

Commented:
Can Windows Server 2008 and Windows Server 2008 R2 co-exists?
I have a mix of 32 and 64 bit servers and I will not be able to upgrade all of them to R2 at one time/
Yes both servers can coexist, and 32bit of 64 bit doesn't matter.

Commented:
Oops I think I did not ask the right question.
Can I have a Domain Controller running on Windows Server 2008 32 bit AD and another Domain Contrioller running Windows Server 2008 R2 AD?
I am planning to upgrade my 32 bit 2003 AD to 2008 but I do not know if I I can have DCs running Winodws Server 2003 32 and Windows Server 2008 r2 at the same time.
yes you can have 2 dc's in the same domain with 2003 and 2008R2. The domain will just be in mixed mode until all dc's in the domain are upgraded to the same version.

Commented:
Ok then I will do an in-place upgrade to all my DC to their respective platforms.
All 64 bit I will install a Server 2008 r2
All 32 bit I will install a Server 2008
Are the DC's just DC's or do they have other programs?

Commented:
They have DNS and WINS and DHCP
Why dont you transferl all roles to the 64 bit DC then demote the 32 bit DC. Scrap the 32 bit DC and install fresh W2008R2 then promote to DC? THis way you can have a native w2008R2 domain.

Commented:
Can I transfer roles from. 32 bit windows 2003 dc to a windows server 2008 dc?

Commented:
Can I transfer roles from. 32 bit windows 2003 dc to a windows server 2008 dc?

Commented:
Does it affect if I have exchange 2003?
No. Both server will have the same schema attributes as they are both DC's in a common domain.
Exchange is on a seperate server right?

Commented:
Yes exchange is on another box
what about the fsmo roles
If exchange is on another box completely (not a dc) then you're home free. Transfer fsmo roles, demote and scrap the 32 bit server. Install a clean install of W2008R2 with the same host name and ip address as before, this way it minimizes the changes needed.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial