Windows 2000 to Windows 2003 migration-Files and apps on DC

Posted on 2011-04-29
Last Modified: 2012-05-11
We have recently aquired another organization and we are in the process of upgrading their domain from Windows 2000 to Windows 2003, so we can eventually move them to our domain.  The problem that I am experiencing is that the two Domain Controllers are also DNS, DHCP, application servers, and fileservers.  The organization is also a 24 hour shop that accesses critical data from the DC's, so they cannot be shut down.  I am trying to find a way that I can upgrade the domain and check the schema upgrade before replicating it to the two DC's that hold apps, data etc.  In addition to the fact that they hold other roles then just the DC roles, there are two DHCP zones.  One zone on each DC. I am planning to:
Create an additional Windows 2000 DC that has been patched to SP4, and enable schema upgrade.
Add the DHCP roles for both zones to the new Win 2000 server. (this would be a temporary solution)
Create a secondary DNS on the 2000 DC and replicate the DNS information to all of the clients. (If I remember correctly, this can be done via the DHCP server, correct?)
Move the FSMO to the new Win 2000 server.
Check replication, and event logs for any issues.
Disable outbound replication on the DC where the upgrade will be performed. (How long can replication be disabled before the DC is no longer recognized, or is this an issue since inbound replication is still allowed?)
Run adprep /forest and ad prep /domain on the new 2000 DC.
Check logs for any issues in logs.
Turn outbound replication on.  Are there any additional steps I should take, or are there any other ideas about the best way to do this upgrade?
Question by:ExpertAssist
    LVL 57

    Accepted Solution

    You would really have to test it in the lab.  Trying to isolate the schema master is not really supported

    To answer some questions

    1.  When you install DNS on your new 2000 DC DNS will automatically replicate to it (AD integrated)
    2.  Replication can be disabled up to the tombstone lifetime (60 days in a 2000 domain)

    Is there a way to isolate a DC in order to do an AD Schema upgrade? I cannot find any documentation on how to do this.




    Author Closing Comment

    Thank you Mike.  This is helpful information. I am reading the Forest Recovery doc now. I think I may steer away from turning off replication.  If I can't find a better solution, I will definitely test in the test environment.
    LVL 57

    Expert Comment

    by:Mike Kline
    Good work getting them off Windows 2000.. Microsoft doesn't even support that anymore

    Author Comment

    Yes, it has been a challenge.  I will be glad when this project has been completed and they have been migrated to our forest. Thanks for your help.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    This is my first article in EE and english is not my mother tongue so any comments you have or any corrections you would like to make, please feel free to speak up :) For those of you working with AD, you already are very familiar with the classi…
    I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

    733 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now