Solved

Moving up to Windows 2008 Server Domain

Posted on 2012-03-19
1
269 Views
Last Modified: 2012-05-03
Dear Experts,

I currently have Windows 2003 domain that is currently running 2000/2003 AD mode.
Since the initial setup, Windows 2000 server has been removed and windows server 2008 member servers have been added to the network.

I have two 2003 domain controllers right now. Both running WINS and DNS.  

The goal is to upgrade to make 2008 server by adding a new 2008 to the network and taking over the AD role. (obviously it will be in 2003/2008 mixed mode AD)

what would be the steps to change to server 2008 network?  Any problems in doing this?

Thanks,
0
Comment
Question by:TechGoingSolo
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 3

Accepted Solution

by:
IT-Shrek earned 500 total points
ID: 37737982
Hello,

this is a Standard Change with normal impact and low risk, but be sure to make System State Backups of your AD at any step.

- Cleanup your current Active Directory (Delete old, unused objects, remove orphaned DCS with NTDSUtil)
- Install Windows Server 2008 R2 as Domain Member
- Run Schema Update on old DC (http://blogs.technet.com/b/danstolts/archive/2011/03/05/upgrading-a-windows-2003-domain-to-windows-server-2008-r2-functional-level-domain.aspx)
- Run DC Promo on new Server to upgrade to Domain Controller
- Install DNS und WINS on the 2008 R2 Server
- Change DHCP and static IP Configurations to use new DNS Server
- Run DCPromo on old DC to demote to domain Member
- Change Domain and Forest Functional Level to 2008 R2
- If you use more than one DC: Upgrade AD Replication to DFS instead of FRS with DFSMIG
- Activate new Features like AD Recycle Bin (http://technet.microsoft.com/en-us/library/dd379481(v=ws.10).aspx)
- Check TombStoneLifetime (https://msmvps.com/blogs/ulfbsimonweidner/archive/2010/02/10/adjusting-the-tombstone-lifetime.aspx)
- Implement new Server to your Backup-Infrastructure
- Implement AV on new DC with exclusions described in http://support.microsoft.com/kb/822158

Microsoft Guides:
http://technet.microsoft.com/en-us/library/ee522994(WS.10).aspx
http://technet.microsoft.com/en-us/library/cc731188(v=ws.10).aspx

Non Microsoft Guide:
http://blogs.dirteam.com/blogs/sanderberkouwer/archive/2008/04/08/upgrading-your-active-directory-to-windows-server-2008.aspx

Checklist:
http://kendrickcoleman.com/index.php?/Tech-Blog/migrating-from-2003-to-2008-r2-domain-controller.html

Shrek
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
Configuring Remote Assistance for use with SCCM
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

751 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question