Upgrading forrest and domain level adding a new 2008 r2 AWS server

Hi,

Customer enviroment

3 servers:
     2x2008
     1x2003 R2

Then, I want to add a new server at AWS existing VPC with windows 2008 R2.

AD Data:

Func. level 2003
Forrest. leves 2000

Question:

Help needed step by step to accomplish this task

Regards
heze54Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

arnoldCommented:
Please clarify what you mean.
There is nothing needed if you are adding a member server.
adprep /domain, /forest, /schema are the only thing needed if you want to add the first  windows 2008 R2 as a DC.

You can not upgrade the domain/forest level above 2003 Native as long as you have a windows 2003 DC.
0
Raheman M. AbdulSenior Infrastructure Support Analyst & Systems DeveloperCommented:
Domain functional level number should be the same as that of the Domain Controller's (DC server)  with the lowest windows version.
eg. Domain functional level in your case is 2003 (as given in AD Data) so the DC's version of 2003 or above can exist without raising the domain functional level. Domain functional level applies to DCs only not the other servers.
If you are not adding any new DC in your case then  nothing to change just add it.
0
heze54Author Commented:
HI,

This operation should be accomplished in several steps

-adding a new member with 2008r2
-adding  a new dc with 2008 r2 OS and do not rise the level
-eliminate de 2003 r2 server and rise the level to 2008

Is this correct?

Regards
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

arnoldCommented:
I think even though you already have a DC with 2008, you are adding 2008 R2 and I think you need to run adprep from the 2008 R2 media.
If it is unneeded, no schema change will be done, but if you do you will eliminate the issue coming up when you dcpromo...
The adprep is least impacting compared to running dcpromo and getting the alert that .....

Also make sure to add the file server 2003 file sharing feature/services to make sure the ntfrs replication is installed as that is the mode by which sysvol replicates.

Do not rush the transition away from 2003. Make sure using repadm /showrep, dcdiag, that the AD is synchronized and is not encountering any errors before transferring roles away from the 2003 and decommissioning it.
0
heze54Author Commented:
HI,

Right now, I only have 2 windows 2008 servers and, domain and forrest at 2008 level.

When I run dcpromo at windows 2008 r2 server to add to the existing domain, same result

"Run adprep /forrest"

Any ideas?

Regards
0
arnoldCommented:
Use the R2 disk in the system, on the primary DC, navigate to the
And run the adprep 32/64 depending on the version of the dc's OS as instructed in the notice.
0
heze54Author Commented:
HI,

I ran adprep /forestprep with R2 32bit and the cmd windows said "informacion already updated " 
but... at windows 2008 R2 machine with dcpromo... same message
0
arnoldCommented:
On which system did you run it, check dcdiag to make sure your DC ad is in sync.

Check which DC name server is listed on the member server before you run dcpromo/add ad DC role.
0
heze54Author Commented:
HI,

Looking at ADSIEdit I can see,

-CN=ActiveDirectoryUpdate value=2 because my servers are 2008. New server will be 2008 r2
-objectVersion = 44 for windows 2008.

repadmin /replsum /bysrc /bydest /sort:delta ran and no errors shown

Any idea?

Regards
0
arnoldCommented:
rerun adprep from 2008R2 to domainorep/gpoprep/schema.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
heze54Author Commented:
Nice posts!!!


Regards
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.