Upgrade to Windows 2008 AD DS

We are planning to install AD DS on our first Windows 2008 member server
directly after making infrastructure preparations.

According to the procedure in
http://technet.microsoft.com/en-us/l.../cc755103.aspx, this looks proetty
straightforward..and has no implications on our current domain functionality
with regards to authentication / DNS.

Can you confirm that the introduction of a new Windows 2008 Domain
Contorller will work smoothly alongside our current infrastructure (for
example, we are a call centre running several Genesys servers, and need to
know whether any of these might be affected in any way by the introduction of
a new 2008 DC..).

Many thanks.

Hello jprstokato,

If other software or applications is compatible you have to check on the
vendors website. Normally it will be no problem to add a 2008 DC in a running
domain, but please describe what OS you are running on the existing domain
and what server roles are used, exchange, sql etc.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> We are planning to install AD DS on our first Windows 2008 member
> server directly after making infrastructure preparations.
>
> According to the procedure in
> http://technet.microsoft.com/en-us/l.../cc755103.aspx, this looks
> proetty straightforward..and has no implications on our current domain
> functionality with regards to authentication / DNS.
>
> Can you confirm that the introduction of a new Windows 2008 Domain
> Contorller will work smoothly alongside our current infrastructure
> (for example, we are a call centre running several Genesys servers,
> and need to know whether any of these might be affected in any way by
> the introduction of a new 2008 DC..).
>
> Many thanks.
>

Hi Meinholf,

Thanks for your reply.

Bear in mind that I'm referring to the new 'cleanly installed' 2008 member
server at this stage (as described in the upgrade process), so there is no
other software / roles on this server itself. I'm asking 'initially' if there
are any problems with making this a DC?

We have a Windows 2003 functional domain / forest (i.e. only Windows 2003
Domain controllers), but still retain some Windows 2000 member servers.

I am investigating server roles on the DCs themselves that are to be
upgraded (as per http://technet.microsoft.com/en-us/l...c755199.aspx):

We have CA which is running on 2 of our DCs (“If you have certification
authorities (CAs) in your organization, see Move a Certification Authority to
a different computer� - this is a bit ambiguous and the article does not
actually specify whether it is necessary to move the CA off the server - does
this mean we MUST move the CA off the 2003 DC before upgrading it to 2008,
and if so how can CA be restored to a computer with the same name – how would
this be possible? – we can’t simply rename a DC? Would an alternative be
possibly to simply demote the DC, and leave it as a CA, and install a
replacement DC?)

We also run DHCP on several DCs. (what are we to understand by: DHCP Server
- Still under development - is upgrade with this role supported yet?)

Many thanks.


"Meinolf Weber" wrote:

> Hello jprstokato,
>
> If other software or applications is compatible you have to check on the
> vendors website. Normally it will be no problem to add a 2008 DC in a running
> domain, but please describe what OS you are running on the existing domain
> and what server roles are used, exchange, sql etc.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > We are planning to install AD DS on our first Windows 2008 member
> > server directly after making infrastructure preparations.
> >
> > According to the procedure in
> > http://technet.microsoft.com/en-us/l.../cc755103.aspx, this looks
> > proetty straightforward..and has no implications on our current domain
> > functionality with regards to authentication / DNS.
> >
> > Can you confirm that the introduction of a new Windows 2008 Domain
> > Contorller will work smoothly alongside our current infrastructure
> > (for example, we are a call centre running several Genesys servers,
> > and need to know whether any of these might be affected in any way by
> > the introduction of a new 2008 DC..).
> >
> > Many thanks.
> >
>
>
>

Hello jprstokato,

See inline.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi Meinholf,
>
> Thanks for your reply.
>
> Bear in mind that I'm referring to the new 'cleanly installed' 2008
> member server at this stage (as described in the upgrade process), so
> there is no other software / roles on this server itself. I'm asking
> 'initially' if there are any problems with making this a DC?

Exchange for example modifies the schema , so it also has an effect for the
domain. That's the reason for the question about software/apps.

> We have a Windows 2003 functional domain / forest (i.e. only Windows
> 2003 Domain controllers), but still retain some Windows 2000 member
> servers.
>
> I am investigating server roles on the DCs themselves that are to be
> upgraded (as per
> http://technet.microsoft.com/en-us/l...c755199.aspx):
>
> We have CA which is running on 2 of our DCs ("If you have
> certification authorities (CAs) in your organization, see Move a
> Certification Authority to a different computer" - this is a bit
> ambiguous and the article does not actually specify whether it is
> necessary to move the CA off the server - does this mean we MUST move
> the CA off the 2003 DC before upgrading it to 2008, and if so how can
> CA be restored to a computer with the same name - how would this be
> possible? - we can't simply rename a DC? Would an alternative be
> possibly to simply demote the DC, and leave it as a CA, and install a
> replacement DC?)

You can also do an inplace upgrade for the CA, no need to move it after the
upgrade, you can leave it there:
"To upgrade Windows first: Upgrade the first server from Windows Server 2003
to Windows Server 2008, back up the CA on this server, and then restore the
CA on a second server running Windows Server 2008."
From:
http://technet.microsoft.com/en-us/l.../cc755153.aspx

Ofcourse you should do a BACKUP of the CA before the upgrade in case something
goes wrong.

For moving to another server with different name see here:
http://support.microsoft.com/kb/298138

> We also run DHCP on several DCs. (what are we to understand by: DHCP
> Server - Still under development - is upgrade with this role supported
> yet?)

See here for DHCP backup and restore with netshell command, so you can move
it to another DC before upgrading:
http://technet.microsoft.com/en-us/l...px#BKMK_backup

Go to "Netsh DHCP server" to see the additional options for "backup" and
"restore"

> Many thanks.
>
> "Meinolf Weber" wrote:
>
>> Hello jprstokato,
>>
>> If other software or applications is compatible you have to check on
>> the vendors website. Normally it will be no problem to add a 2008 DC
>> in a running domain, but please describe what OS you are running on
>> the existing domain and what server roles are used, exchange, sql
>> etc.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> We are planning to install AD DS on our first Windows 2008 member
>>> server directly after making infrastructure preparations.
>>>
>>> According to the procedure in
>>> http://technet.microsoft.com/en-us/l.../cc755103.aspx, this looks
>>> proetty straightforward..and has no implications on our current
>>> domain functionality with regards to authentication / DNS.
>>>
>>> Can you confirm that the introduction of a new Windows 2008 Domain
>>> Contorller will work smoothly alongside our current infrastructure
>>> (for example, we are a call centre running several Genesys servers,
>>> and need to know whether any of these might be affected in any way
>>> by the introduction of a new 2008 DC..).
>>>
>>> Many thanks.
>>>

why don't you test this in a test environment?

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------

"jprstokato" <> wrote in message
news:3FDEC15E-102B-4FAA-B4ED-...
> We are planning to install AD DS on our first Windows 2008 member server
> directly after making infrastructure preparations.
>
> According to the procedure in
> http://technet.microsoft.com/en-us/l.../cc755103.aspx, this looks
> proetty
> straightforward..and has no implications on our current domain
> functionality
> with regards to authentication / DNS.
>
> Can you confirm that the introduction of a new Windows 2008 Domain
> Contorller will work smoothly alongside our current infrastructure (for
> example, we are a call centre running several Genesys servers, and need to
> know whether any of these might be affected in any way by the introduction
> of
> a new 2008 DC..).
>
> Many thanks.

Many thanks Meinholf,
That's a great help.

"Meinolf Weber" wrote:

> Hello jprstokato,
>
> See inline.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Hi Meinholf,
> >
> > Thanks for your reply.
> >
> > Bear in mind that I'm referring to the new 'cleanly installed' 2008
> > member server at this stage (as described in the upgrade process), so
> > there is no other software / roles on this server itself. I'm asking
> > 'initially' if there are any problems with making this a DC?
>
> Exchange for example modifies the schema , so it also has an effect for the
> domain. That's the reason for the question about software/apps.
>
> > We have a Windows 2003 functional domain / forest (i.e. only Windows
> > 2003 Domain controllers), but still retain some Windows 2000 member
> > servers.
> >
> > I am investigating server roles on the DCs themselves that are to be
> > upgraded (as per
> > http://technet.microsoft.com/en-us/l...c755199.aspx):
> >
> > We have CA which is running on 2 of our DCs ("If you have
> > certification authorities (CAs) in your organization, see Move a
> > Certification Authority to a different computer" - this is a bit
> > ambiguous and the article does not actually specify whether it is
> > necessary to move the CA off the server - does this mean we MUST move
> > the CA off the 2003 DC before upgrading it to 2008, and if so how can
> > CA be restored to a computer with the same name - how would this be
> > possible? - we can't simply rename a DC? Would an alternative be
> > possibly to simply demote the DC, and leave it as a CA, and install a
> > replacement DC?)
>
> You can also do an inplace upgrade for the CA, no need to move it after the
> upgrade, you can leave it there:
> "To upgrade Windows first: Upgrade the first server from Windows Server 2003
> to Windows Server 2008, back up the CA on this server, and then restore the
> CA on a second server running Windows Server 2008."
> From:
> http://technet.microsoft.com/en-us/l.../cc755153.aspx
>
> Ofcourse you should do a BACKUP of the CA before the upgrade in case something
> goes wrong.
>
> For moving to another server with different name see here:
> http://support.microsoft.com/kb/298138
>
> > We also run DHCP on several DCs. (what are we to understand by: DHCP
> > Server - Still under development - is upgrade with this role supported
> > yet?)
>
> See here for DHCP backup and restore with netshell command, so you can move
> it to another DC before upgrading:
> http://technet.microsoft.com/en-us/l...px#BKMK_backup
>
> Go to "Netsh DHCP server" to see the additional options for "backup" and
> "restore"
>
> > Many thanks.
> >
> > "Meinolf Weber" wrote:
> >
> >> Hello jprstokato,
> >>
> >> If other software or applications is compatible you have to check on
> >> the vendors website. Normally it will be no problem to add a 2008 DC
> >> in a running domain, but please describe what OS you are running on
> >> the existing domain and what server roles are used, exchange, sql
> >> etc.
> >>
> >> Best regards
> >>
> >> Meinolf Weber
> >> Disclaimer: This posting is provided "AS IS" with no warranties, and
> >> confers
> >> no rights.
> >> ** Please do NOT email, only reply to Newsgroups
> >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >>> We are planning to install AD DS on our first Windows 2008 member
> >>> server directly after making infrastructure preparations.
> >>>
> >>> According to the procedure in
> >>> http://technet.microsoft.com/en-us/l.../cc755103.aspx, this looks
> >>> proetty straightforward..and has no implications on our current
> >>> domain functionality with regards to authentication / DNS.
> >>>
> >>> Can you confirm that the introduction of a new Windows 2008 Domain
> >>> Contorller will work smoothly alongside our current infrastructure
> >>> (for example, we are a call centre running several Genesys servers,
> >>> and need to know whether any of these might be affected in any way
> >>> by the introduction of a new 2008 DC..).
> >>>
> >>> Many thanks.
> >>>
>
>
>

I have already tested this in VMware, but it's not really possible (certainly
in our current envirnment) to emulate it..

"Jorge de Almeida Pinto [MVP - DS]" wrote:

> why don't you test this in a test environment?
>
> --
>
> Cheers,
> (HOPEFULLY THIS INFORMATION HELPS YOU!)
>
> # Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #
>
> BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
> BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
> ------------------------------------------------------------------------------------------
> * How to ask a question --> http://support.microsoft.com/?id=555375
> ------------------------------------------------------------------------------------------
> * This posting is provided "AS IS" with no warranties and confers no rights!
> * Always test ANY suggestion in a test environment before implementing!
> ------------------------------------------------------------------------------------------
> #################################################
> #################################################
> ------------------------------------------------------------------------------------------
>
> "jprstokato" <> wrote in message
> news:3FDEC15E-102B-4FAA-B4ED-...
> > We are planning to install AD DS on our first Windows 2008 member server
> > directly after making infrastructure preparations.
> >
> > According to the procedure in
> > http://technet.microsoft.com/en-us/l.../cc755103.aspx, this looks
> > proetty
> > straightforward..and has no implications on our current domain
> > functionality
> > with regards to authentication / DNS.
> >
> > Can you confirm that the introduction of a new Windows 2008 Domain
> > Contorller will work smoothly alongside our current infrastructure (for
> > example, we are a call centre running several Genesys servers, and need to
> > know whether any of these might be affected in any way by the introduction
> > of
> > a new 2008 DC..).
> >
> > Many thanks.
>
>

Meinholf,

Thanks again. Jsut to clarify, you're saying that we can leave CA on the DC
- only back it up as a precaution?

And DHCP - can you confirm that you're saying that we 'must' move the DHCP
befor upgrading?

Thanks.

"Meinolf Weber" wrote:

> Hello jprstokato,
>
> See inline.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Hi Meinholf,
> >
> > Thanks for your reply.
> >
> > Bear in mind that I'm referring to the new 'cleanly installed' 2008
> > member server at this stage (as described in the upgrade process), so
> > there is no other software / roles on this server itself. I'm asking
> > 'initially' if there are any problems with making this a DC?
>
> Exchange for example modifies the schema , so it also has an effect for the
> domain. That's the reason for the question about software/apps.
>
> > We have a Windows 2003 functional domain / forest (i.e. only Windows
> > 2003 Domain controllers), but still retain some Windows 2000 member
> > servers.
> >
> > I am investigating server roles on the DCs themselves that are to be
> > upgraded (as per
> > http://technet.microsoft.com/en-us/l...c755199.aspx):
> >
> > We have CA which is running on 2 of our DCs ("If you have
> > certification authorities (CAs) in your organization, see Move a
> > Certification Authority to a different computer" - this is a bit
> > ambiguous and the article does not actually specify whether it is
> > necessary to move the CA off the server - does this mean we MUST move
> > the CA off the 2003 DC before upgrading it to 2008, and if so how can
> > CA be restored to a computer with the same name - how would this be
> > possible? - we can't simply rename a DC? Would an alternative be
> > possibly to simply demote the DC, and leave it as a CA, and install a
> > replacement DC?)
>
> You can also do an inplace upgrade for the CA, no need to move it after the
> upgrade, you can leave it there:
> "To upgrade Windows first: Upgrade the first server from Windows Server 2003
> to Windows Server 2008, back up the CA on this server, and then restore the
> CA on a second server running Windows Server 2008."
> From:
> http://technet.microsoft.com/en-us/l.../cc755153.aspx
>
> Ofcourse you should do a BACKUP of the CA before the upgrade in case something
> goes wrong.
>
> For moving to another server with different name see here:
> http://support.microsoft.com/kb/298138
>
> > We also run DHCP on several DCs. (what are we to understand by: DHCP
> > Server - Still under development - is upgrade with this role supported
> > yet?)
>
> See here for DHCP backup and restore with netshell command, so you can move
> it to another DC before upgrading:
> http://technet.microsoft.com/en-us/l...px#BKMK_backup
>
> Go to "Netsh DHCP server" to see the additional options for "backup" and
> "restore"
>
> > Many thanks.
> >
> > "Meinolf Weber" wrote:
> >
> >> Hello jprstokato,
> >>
> >> If other software or applications is compatible you have to check on
> >> the vendors website. Normally it will be no problem to add a 2008 DC
> >> in a running domain, but please describe what OS you are running on
> >> the existing domain and what server roles are used, exchange, sql
> >> etc.
> >>
> >> Best regards
> >>
> >> Meinolf Weber
> >> Disclaimer: This posting is provided "AS IS" with no warranties, and
> >> confers
> >> no rights.
> >> ** Please do NOT email, only reply to Newsgroups
> >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >>> We are planning to install AD DS on our first Windows 2008 member
> >>> server directly after making infrastructure preparations.
> >>>
> >>> According to the procedure in
> >>> http://technet.microsoft.com/en-us/l.../cc755103.aspx, this looks
> >>> proetty straightforward..and has no implications on our current
> >>> domain functionality with regards to authentication / DNS.
> >>>
> >>> Can you confirm that the introduction of a new Windows 2008 Domain
> >>> Contorller will work smoothly alongside our current infrastructure
> >>> (for example, we are a call centre running several Genesys servers,
> >>> and need to know whether any of these might be affected in any way
> >>> by the introduction of a new 2008 DC..).
> >>>
> >>> Many thanks.
> >>>
>
>
>

Hello jprstokato,

See inline.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Meinholf,
>
> Thanks again. Jsut to clarify, you're saying that we can leave CA on
> the DC - only back it up as a precaution?

Yes, as stated in the article.

> And DHCP - can you confirm that you're saying that we 'must' move the
> DHCP befor upgrading?

No, but to prevent problems and have allways full DHCP services available.

> Thanks.
>
> "Meinolf Weber" wrote:
>
>> Hello jprstokato,
>>
>> See inline.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hi Meinholf,
>>>
>>> Thanks for your reply.
>>>
>>> Bear in mind that I'm referring to the new 'cleanly installed' 2008
>>> member server at this stage (as described in the upgrade process),
>>> so there is no other software / roles on this server itself. I'm
>>> asking 'initially' if there are any problems with making this a DC?
>>>
>> Exchange for example modifies the schema , so it also has an effect
>> for the domain. That's the reason for the question about
>> software/apps.
>>
>>> We have a Windows 2003 functional domain / forest (i.e. only Windows
>>> 2003 Domain controllers), but still retain some Windows 2000 member
>>> servers.
>>>
>>> I am investigating server roles on the DCs themselves that are to be
>>> upgraded (as per
>>> http://technet.microsoft.com/en-us/l...c755199.aspx):
>>>
>>> We have CA which is running on 2 of our DCs ("If you have
>>> certification authorities (CAs) in your organization, see Move a
>>> Certification Authority to a different computer" - this is a bit
>>> ambiguous and the article does not actually specify whether it is
>>> necessary to move the CA off the server - does this mean we MUST
>>> move the CA off the 2003 DC before upgrading it to 2008, and if so
>>> how can CA be restored to a computer with the same name - how would
>>> this be possible? - we can't simply rename a DC? Would an
>>> alternative be possibly to simply demote the DC, and leave it as a
>>> CA, and install a replacement DC?)
>>>
>> You can also do an inplace upgrade for the CA, no need to move it
>> after the
>> upgrade, you can leave it there:
>> "To upgrade Windows first: Upgrade the first server from Windows
>> Server 2003
>> to Windows Server 2008, back up the CA on this server, and then
>> restore the
>> CA on a second server running Windows Server 2008."
>> From:
>> http://technet.microsoft.com/en-us/l.../cc755153.aspx
>> Ofcourse you should do a BACKUP of the CA before the upgrade in case
>> something goes wrong.
>>
>> For moving to another server with different name see here:
>> http://support.microsoft.com/kb/298138
>>
>>> We also run DHCP on several DCs. (what are we to understand by: DHCP
>>> Server - Still under development - is upgrade with this role
>>> supported yet?)
>>>
>> See here for DHCP backup and restore with netshell command, so you
>> can move it to another DC before upgrading:
>> http://technet.microsoft.com/en-us/l...px#BKMK_backup
>>
>> Go to "Netsh DHCP server" to see the additional options for "backup"
>> and "restore"
>>
>>> Many thanks.
>>>
>>> "Meinolf Weber" wrote:
>>>
>>>> Hello jprstokato,
>>>>
>>>> If other software or applications is compatible you have to check
>>>> on the vendors website. Normally it will be no problem to add a
>>>> 2008 DC in a running domain, but please describe what OS you are
>>>> running on the existing domain and what server roles are used,
>>>> exchange, sql etc.
>>>>
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>> and
>>>> confers
>>>> no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> We are planning to install AD DS on our first Windows 2008 member
>>>>> server directly after making infrastructure preparations.
>>>>>
>>>>> According to the procedure in
>>>>> http://technet.microsoft.com/en-us/l.../cc755103.aspx, this
>>>>> looks proetty straightforward..and has no implications on our
>>>>> current domain functionality with regards to authentication / DNS.
>>>>>
>>>>> Can you confirm that the introduction of a new Windows 2008 Domain
>>>>> Contorller will work smoothly alongside our current infrastructure
>>>>> (for example, we are a call centre running several Genesys
>>>>> servers, and need to know whether any of these might be affected
>>>>> in any way by the introduction of a new 2008 DC..).
>>>>>
>>>>> Many thanks.
>>>>>

Thanks again

"Meinolf Weber" wrote:

> Hello jprstokato,
>
> See inline.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Meinholf,
> >
> > Thanks again. Jsut to clarify, you're saying that we can leave CA on
> > the DC - only back it up as a precaution?
>
> Yes, as stated in the article.
>
> > And DHCP - can you confirm that you're saying that we 'must' move the
> > DHCP befor upgrading?
>
> No, but to prevent problems and have allways full DHCP services available.
>
> > Thanks.
> >
> > "Meinolf Weber" wrote:
> >
> >> Hello jprstokato,
> >>
> >> See inline.
> >>
> >> Best regards
> >>
> >> Meinolf Weber
> >> Disclaimer: This posting is provided "AS IS" with no warranties, and
> >> confers
> >> no rights.
> >> ** Please do NOT email, only reply to Newsgroups
> >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >>> Hi Meinholf,
> >>>
> >>> Thanks for your reply.
> >>>
> >>> Bear in mind that I'm referring to the new 'cleanly installed' 2008
> >>> member server at this stage (as described in the upgrade process),
> >>> so there is no other software / roles on this server itself. I'm
> >>> asking 'initially' if there are any problems with making this a DC?
> >>>
> >> Exchange for example modifies the schema , so it also has an effect
> >> for the domain. That's the reason for the question about
> >> software/apps.
> >>
> >>> We have a Windows 2003 functional domain / forest (i.e. only Windows
> >>> 2003 Domain controllers), but still retain some Windows 2000 member
> >>> servers.
> >>>
> >>> I am investigating server roles on the DCs themselves that are to be
> >>> upgraded (as per
> >>> http://technet.microsoft.com/en-us/l...c755199.aspx):
> >>>
> >>> We have CA which is running on 2 of our DCs ("If you have
> >>> certification authorities (CAs) in your organization, see Move a
> >>> Certification Authority to a different computer" - this is a bit
> >>> ambiguous and the article does not actually specify whether it is
> >>> necessary to move the CA off the server - does this mean we MUST
> >>> move the CA off the 2003 DC before upgrading it to 2008, and if so
> >>> how can CA be restored to a computer with the same name - how would
> >>> this be possible? - we can't simply rename a DC? Would an
> >>> alternative be possibly to simply demote the DC, and leave it as a
> >>> CA, and install a replacement DC?)
> >>>
> >> You can also do an inplace upgrade for the CA, no need to move it
> >> after the
> >> upgrade, you can leave it there:
> >> "To upgrade Windows first: Upgrade the first server from Windows
> >> Server 2003
> >> to Windows Server 2008, back up the CA on this server, and then
> >> restore the
> >> CA on a second server running Windows Server 2008."
> >> From:
> >> http://technet.microsoft.com/en-us/l.../cc755153.aspx
> >> Ofcourse you should do a BACKUP of the CA before the upgrade in case
> >> something goes wrong.
> >>
> >> For moving to another server with different name see here:
> >> http://support.microsoft.com/kb/298138
> >>
> >>> We also run DHCP on several DCs. (what are we to understand by: DHCP
> >>> Server - Still under development - is upgrade with this role
> >>> supported yet?)
> >>>
> >> See here for DHCP backup and restore with netshell command, so you
> >> can move it to another DC before upgrading:
> >> http://technet.microsoft.com/en-us/l...px#BKMK_backup
> >>
> >> Go to "Netsh DHCP server" to see the additional options for "backup"
> >> and "restore"
> >>
> >>> Many thanks.
> >>>
> >>> "Meinolf Weber" wrote:
> >>>
> >>>> Hello jprstokato,
> >>>>
> >>>> If other software or applications is compatible you have to check
> >>>> on the vendors website. Normally it will be no problem to add a
> >>>> 2008 DC in a running domain, but please describe what OS you are
> >>>> running on the existing domain and what server roles are used,
> >>>> exchange, sql etc.
> >>>>
> >>>> Best regards
> >>>>
> >>>> Meinolf Weber
> >>>> Disclaimer: This posting is provided "AS IS" with no warranties,
> >>>> and
> >>>> confers
> >>>> no rights.
> >>>> ** Please do NOT email, only reply to Newsgroups
> >>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >>>>> We are planning to install AD DS on our first Windows 2008 member
> >>>>> server directly after making infrastructure preparations.
> >>>>>
> >>>>> According to the procedure in
> >>>>> http://technet.microsoft.com/en-us/l.../cc755103.aspx, this
> >>>>> looks proetty straightforward..and has no implications on our
> >>>>> current domain functionality with regards to authentication / DNS.
> >>>>>
> >>>>> Can you confirm that the introduction of a new Windows 2008 Domain
> >>>>> Contorller will work smoothly alongside our current infrastructure
> >>>>> (for example, we are a call centre running several Genesys
> >>>>> servers, and need to know whether any of these might be affected
> >>>>> in any way by the introduction of a new 2008 DC..).
> >>>>>
> >>>>> Many thanks.
> >>>>>
>
>
>