Link to home
Start Free TrialLog in
Avatar of heze54
heze54Flag for Spain

asked on

Upgrading forrest and domain level adding a new 2008 r2 AWS server

Hi,

Customer enviroment

3 servers:
     2x2008
     1x2003 R2

Then, I want to add a new server at AWS existing VPC with windows 2008 R2.

AD Data:

Func. level 2003
Forrest. leves 2000

Question:

Help needed step by step to accomplish this task

Regards
Avatar of arnold
arnold
Flag of United States of America image

Please clarify what you mean.
There is nothing needed if you are adding a member server.
adprep /domain, /forest, /schema are the only thing needed if you want to add the first  windows 2008 R2 as a DC.

You can not upgrade the domain/forest level above 2003 Native as long as you have a windows 2003 DC.
Domain functional level number should be the same as that of the Domain Controller's (DC server)  with the lowest windows version.
eg. Domain functional level in your case is 2003 (as given in AD Data) so the DC's version of 2003 or above can exist without raising the domain functional level. Domain functional level applies to DCs only not the other servers.
If you are not adding any new DC in your case then  nothing to change just add it.
Avatar of heze54

ASKER

HI,

This operation should be accomplished in several steps

-adding a new member with 2008r2
-adding  a new dc with 2008 r2 OS and do not rise the level
-eliminate de 2003 r2 server and rise the level to 2008

Is this correct?

Regards
SOLUTION
Avatar of arnold
arnold
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of heze54

ASKER

HI,

Right now, I only have 2 windows 2008 servers and, domain and forrest at 2008 level.

When I run dcpromo at windows 2008 r2 server to add to the existing domain, same result

"Run adprep /forrest"

Any ideas?

Regards
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of heze54

ASKER

HI,

I ran adprep /forestprep with R2 32bit and the cmd windows said "informacion already updated " 
but... at windows 2008 R2 machine with dcpromo... same message
On which system did you run it, check dcdiag to make sure your DC ad is in sync.

Check which DC name server is listed on the member server before you run dcpromo/add ad DC role.
Avatar of heze54

ASKER

HI,

Looking at ADSIEdit I can see,

-CN=ActiveDirectoryUpdate value=2 because my servers are 2008. New server will be 2008 r2
-objectVersion = 44 for windows 2008.

repadmin /replsum /bysrc /bydest /sort:delta ran and no errors shown

Any idea?

Regards
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of heze54

ASKER

Nice posts!!!


Regards