Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1585
  • Last Modified:

Active Directory Migration Rollback

We are planning to upgrade our active Directory and we are looking for a rollback plan, we are thinking of taking one of the Domain controllers off and do the upgrade, if anything goes wrong we unplug the other DC's and bring the 2003 DC on, would this work? as far as I understand nothing changes at the client side, am I right?
0
Maroin
Asked:
Maroin
  • 5
  • 4
  • 2
2 Solutions
 
snusgubbenCommented:
If you are planning a upgrade from 2003 to 2008 AD, then you'll have to take one DC offline and run a Metadata cleanup of the DC you took out. If/when the upgrade goes fine, you can never add the "offline" DC back in.

(If you're extending the schema all DCs needs to be online).

If this is what you are doing, I think this is not a risky job that's worth doing the above task...
0
 
Mike KlineCommented:
It is actually worse than what snus stated; if you did have to rollback you would have to do a forest recovery.

In the past people would try to isolate the schema master but that is not really recommended anymore.  The DS team answered a question about this too:

http://blogs.technet.com/b/askds/archive/2010/04/16/friday-mail-sack-i-live-again-edition.aspx

See:  

Question

Is there a way to isolate a DC in order to do an AD Schema upgrade? I cannot find any documentation on how to do this.


Like snus said...test in a lab if you can...but the upgrade to 2008 or 2008 R2 has been done thousands of times and I've not heard of a forest recovery being needed.

Thanks

Mike
0
 
MaroinAuthor Commented:
Thanks for the replies, yes, we are migrating from 2003 to 2008 R2, we have a couple of critical custem apps that we can't test in the lab in advance, so we need to have a backout plan in case any application stops working,

We only have one domain with 3 domain controllers
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
MaroinAuthor Commented:
Still no one answered my question by the way, thought I will repeat it :D

"as far as I understand nothing changes at the client side, am I right? "

to explain, let's say I virtualize the 3 DC's and turn the physical ones off, do the upgrade using the virtual servers and if an application stops working turn the new set of DC's off and start the old 3 DC's, should this work? or some of the colients will stop working with 2003 after the migration?
0
 
snusgubbenCommented:
Do the custom apps have any custom domain partitions (application partition)?

The vendor of those apps should be able to say if a schema/domain upgrade will affect their app.

Like Mike says, introducing 2008R2 DCs is a "routine" job. If your DCDIAGs are clean and the app vendors say go, you're doomed to succeed :)
0
 
snusgubbenCommented:

"as far as I understand nothing changes at the client side, am I right? "

Correct.

If you have VM hosts you can make a lab and do the testing. Leaving the prod.environment up and running.
0
 
MaroinAuthor Commented:
We know nothing about how these apps work, and there is no one to support them, we've tried to move them to the lab with no success, so our only option is to move ahead and rollbak if they stop working

Thanks Snusgubben, are you assuming... talking from experience or do you have any official source?

Can any one confirm that clients are indpendant from the version of the AD?
0
 
Mike KlineCommented:
Did those apps make any schema modifications?
0
 
snusgubbenCommented:
I'm not assuming :)

When you prepare you forest/domain for 2008 R2 you make the forest ready to raise the functional level (FL). This has nothing to do with the clients, and they will not be aware that you prepare your domain.

If your functional level is 2003 at the moment, you can see here what happens when you raise the level to 2008/2008R2:

http://technet.microsoft.com/en-us/library/understanding-active-directory-functional-levels(WS.10).aspx

If your Apps don't have their custom Application NC, I can't see it's likely raising the FL will do any harm.


Can any one confirm that clients are indpendant from the version of the AD?

I guess mkline71 can confirm.


0
 
snusgubbenCommented:
* assuming you don't have any NT4 clients
0
 
MaroinAuthor Commented:
Thanks everyone for the wonderfull support
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

  • 5
  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now