Solved

Active Directory Migration Rollback

Posted on 2011-02-15
11
1,360 Views
Last Modified: 2013-11-05
We are planning to upgrade our active Directory and we are looking for a rollback plan, we are thinking of taking one of the Domain controllers off and do the upgrade, if anything goes wrong we unplug the other DC's and bring the 2003 DC on, would this work? as far as I understand nothing changes at the client side, am I right?
0
Comment
Question by:Maroin
  • 5
  • 4
  • 2
11 Comments
 
LVL 21

Expert Comment

by:snusgubben
ID: 34898492
If you are planning a upgrade from 2003 to 2008 AD, then you'll have to take one DC offline and run a Metadata cleanup of the DC you took out. If/when the upgrade goes fine, you can never add the "offline" DC back in.

(If you're extending the schema all DCs needs to be online).

If this is what you are doing, I think this is not a risky job that's worth doing the above task...
0
 
LVL 57

Assisted Solution

by:Mike Kline
Mike Kline earned 250 total points
ID: 34898561
It is actually worse than what snus stated; if you did have to rollback you would have to do a forest recovery.

In the past people would try to isolate the schema master but that is not really recommended anymore.  The DS team answered a question about this too:

http://blogs.technet.com/b/askds/archive/2010/04/16/friday-mail-sack-i-live-again-edition.aspx

See:  

Question

Is there a way to isolate a DC in order to do an AD Schema upgrade? I cannot find any documentation on how to do this.


Like snus said...test in a lab if you can...but the upgrade to 2008 or 2008 R2 has been done thousands of times and I've not heard of a forest recovery being needed.

Thanks

Mike
0
 

Author Comment

by:Maroin
ID: 34901645
Thanks for the replies, yes, we are migrating from 2003 to 2008 R2, we have a couple of critical custem apps that we can't test in the lab in advance, so we need to have a backout plan in case any application stops working,

We only have one domain with 3 domain controllers
0
 

Author Comment

by:Maroin
ID: 34901759
Still no one answered my question by the way, thought I will repeat it :D

"as far as I understand nothing changes at the client side, am I right? "

to explain, let's say I virtualize the 3 DC's and turn the physical ones off, do the upgrade using the virtual servers and if an application stops working turn the new set of DC's off and start the old 3 DC's, should this work? or some of the colients will stop working with 2003 after the migration?
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 34901786
Do the custom apps have any custom domain partitions (application partition)?

The vendor of those apps should be able to say if a schema/domain upgrade will affect their app.

Like Mike says, introducing 2008R2 DCs is a "routine" job. If your DCDIAGs are clean and the app vendors say go, you're doomed to succeed :)
0
Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 21

Expert Comment

by:snusgubben
ID: 34901815

"as far as I understand nothing changes at the client side, am I right? "

Correct.

If you have VM hosts you can make a lab and do the testing. Leaving the prod.environment up and running.
0
 

Author Comment

by:Maroin
ID: 34902458
We know nothing about how these apps work, and there is no one to support them, we've tried to move them to the lab with no success, so our only option is to move ahead and rollbak if they stop working

Thanks Snusgubben, are you assuming... talking from experience or do you have any official source?

Can any one confirm that clients are indpendant from the version of the AD?
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 34903112
Did those apps make any schema modifications?
0
 
LVL 21

Accepted Solution

by:
snusgubben earned 250 total points
ID: 34904739
I'm not assuming :)

When you prepare you forest/domain for 2008 R2 you make the forest ready to raise the functional level (FL). This has nothing to do with the clients, and they will not be aware that you prepare your domain.

If your functional level is 2003 at the moment, you can see here what happens when you raise the level to 2008/2008R2:

http://technet.microsoft.com/en-us/library/understanding-active-directory-functional-levels(WS.10).aspx

If your Apps don't have their custom Application NC, I can't see it's likely raising the FL will do any harm.


Can any one confirm that clients are indpendant from the version of the AD?

I guess mkline71 can confirm.


0
 
LVL 21

Expert Comment

by:snusgubben
ID: 34905041
* assuming you don't have any NT4 clients
0
 

Author Closing Comment

by:Maroin
ID: 34907700
Thanks everyone for the wonderfull support
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Resolve DNS query failed errors for Exchange
New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now