Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 382
  • Last Modified:

Active Directory Upgrade Question

I have an existing domain in 2003 native mode. I want to transfer all my FSMO roles to a Windows 2008 server, decommission my local DC's, and be ready to upgrade the domain to 2008 when i've replaced all the other DC's. What tasks need to be performed and in what order?
0
leviatdr
Asked:
leviatdr
2 Solutions
 
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
In Summary (simplified)

1. Build new WIn2k8 servers.
2. Join to Domain.
3. Run adprep
4. Run DCPROMO on both Win2k8 machines to create DC's
5. Transfer Roles.
6. Decommision Win2k3 servers.


see Microsoft kb here

http://technet.microsoft.com/en-us/library/cc771433(WS.10).aspx

and EE solution here

http://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/Q_26550108.html
0
 
Adam BrownSr Solutions ArchitectCommented:
Basically, you'll transfer the FSMO roles. Then demote your old DC by running DCPromo. Once that's done, you may want to run a metadata cleanup to make sure everything about the old DC is gone. Once that's done, you can Update the Domain Functional Level and then the Forest Functional level.

FSMO Transfer: http://support.microsoft.com/kb/255690
Metadata cleanup: http://www.petri.co.il/delete_failed_dcs_from_ad.htm
You can raise the Domain Functional level from ADUC by right clicking the domain and clicking Raise Domain Functional Level
Forest Functional Level is managed through Active Directory Domains and Trusts by right clicking "Active Directory Domains and Trusts" and selecting Raise forest functional level.
0
 
RickSheikhCommented:
Don't forget the DNS either. If there are any non-AD integrated zones, make sure you migrated them from older DC/DNS to new. Also check the standard forwarders and the conditional forwarders on new DC/DNS server and make sure they align with that what they were on older DNS boxes.

What about the time sync?

The PDCe syncs with an external time source, have you already taken care of that ?

http://technet.microsoft.com/en-us/library/cc784553%28WS.10%29.aspx
0
 
leviatdrAuthor Commented:
A comment was added at the last minute and i selected it by mistake. Solution should have been for hanccocka and acbrown2010.
0

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now