Link to home
Start Free TrialLog in
Avatar of chencharlie1
chencharlie1

asked on

Detailed Steps to upgrade Windows 2000 AD to Windows 2003 AD

Dear Expert,

We are still using windows 2000 Active Directory within our company (only one location).
There are two separate w2k Domain controllers in one forest and two separate exchange 2003 enterprise servers (installed on windows 2003 standard servers)

We would like to only upgrade to windows 2003 Active Directory without touching Exchange 2003 servers.

Can you give us some guidelines and detailed steps on how to perform this upgrade?
We do not want to touch the exchange 2003 environment.

Do we need to do any migration like ADMT for our existing objects such as desktops and other resource servers
or it is transparant in one shot.

I would like to just upgrade to windows 2003 AD and have the least changes in our existing environment without touching our existing exchange 2003 servers, desktops or other resouce servers.

Thanks a lot,

Charlie
SOLUTION
Avatar of nettek0300
nettek0300

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of chencharlie1
chencharlie1

ASKER

Hi expert,
Please review my steps below and let me know if I miss any steps:

Upgrade Methologhy: Installing a windows 2003-based member server into existing windows 2000 domain

1) Insert "windows 2003 CD" into existing "win2k Schema Master"; Run "adprep /forestprep" in the "I386 Directory"
2) Insert "windows 2003 CD" into existing "win2k Infrastructure Master"; Run "adprep /domainprep" in the "I386 Directory"
3) Add a new windows 2003-based member server "Win2003-Server" into existing win2k domain
4) Run "Dcpromo" on this new Win2003-Server to create the first Windows server 2003-based domain controller
5) Perform In-Place upgrade on the existing win2k "naming Master" and "PDC Emulator" domain controllers
6) Disable SMB packet annd secure channel signing enforcement on Win2003-Server Domain controllers

I have the following questions:
a) After step (4), the new win2003 domain controller created:  Does that mean that we have 2 win2k old domain controllers that
    coexist with this newly created win2003 domain controller.  At this point, which domain controller is performing the user authentication.  For example, when users log into the domain, are they authenticated by win2k or win2003 domain?
b) If the step (4) fails to create win2003 domain controller for any reason, are we still keeping the existing win2k domain infrastructure?
c) I have done "Setup /forestprep" and "setup /doaminprep" when I installed exchange 2003 server years ago, do I still need to run "adprep /forestprep" and "adprep /domainprep"?
d) After step (6), Can our existing computers(windows xp, resource servers, exchange servers) and users automatically authenticate and communicate with win2003 domain?  Do we have to take any actions?

Thanks,

Charlie
SOLUTION
Avatar of Jian An Lim
Jian An Lim
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial