Migrating some domain controllers from 2000 to 2003...

Discussion in 'Server Migration' started by Clegg, May 5, 2005.

  1. Clegg

    Clegg Guest

    Hello,

    I'm getting ready to migrate some servers from 2000 to 2003. Right now,
    the domain is mixed-mode 2000 (and will remain so after there are 2003
    domain controllers are managing the domain -- still have some NT4 boxes).

    I've created a plan of attack to get our domain 2003-compatible and get
    a few 2003 DCs. If you see a bug in the process or a missing step,
    please let me know as I haven't done this before!

    1) Backup system state data from DC with operations master roles (Server1)
    2) Get an extra server (Server2), install it with 2000, set it up as a
    domain controller w/Global Catalog. Make sure all domain data has
    replicated to this server
    3) Run adprep /forestprep on Server1, verify it's propogated through
    other DCs, then run adprep /domainprep on Server1 (verify again before
    continuing)
    4) Upgrade Server2 to 2003 (will it finish convert the domain at this
    point and automatically setup 2003 to be a domain controller?)
    5) Install new permanent server (Server3 -- Server1 is being retired,
    Server2 was just a temporary server) with 2003, set it up with all
    Operations Master roles (for our network that is the best design),
    Global Catalog, bridgehead server, etc.

    Should I transfer all of the operations master roles to Server2 at step
    4 or leave them on Server1 until they're transferred to the final,
    end-result server (Server3)?

    Also, at step 4, will 2003 be installed with domain controller services
    setup properly or will I have to promote it to a domain controller
    manually (as if it was a fresh install)?

    If there's a better/cleaner/faster/easier way of doing this, please let
    me know.

    Thanks in advance for any suggestions/help you can offer!


    Clegg
     
    Clegg, May 5, 2005
    #1
    1. Advertisements

  2. Hello Clegg,

    Good to hear from you.

    According to your message, I understand that you want to have some win2k3
    DCs in your win2k domain. Is this correct?

    After reviewing your steps, I have the following suggestions. Please see my
    comments after your steps.

    1) Backup system state data from DC with operations master roles (Server1)

    It is always best to backup before we take any actions.

    2) Get an extra server (Server2), install it with 2000, set it up as a
    domain controller w/Global Catalog. Make sure all domain data has
    replicated to this server.

    I understand Server 2 is used to be upgraded to win2k3. There is no need to
    do so. Please install win2k3 on the machine, and add it to the win2k domain
    as a member server.

    3) Run adprep /forestprep on Server1, verify it's propogated through other
    DCs, then run adprep /domainprep on Server1 (verify again before continuing)

    Yes, we need to extend the domain schema to have the win2k3 DCs.

    4) Upgrade Server2 to 2003 (will it finish convert the domain at this point
    and automatically setup 2003 to be a domain controller?)

    There is no need to upgrade from win2k to win2k3. Please promote Server2, a
    win2k3 member server to be the first win2k3 DC in the domain.

    5) Install new permanent server (Server3 -- Server1 is being retired,
    Server2 was just a temporary server) with 2003, set it up with all
    Operations Master roles (for our network that is the best design), Global
    Catalog, bridgehead server, etc.

    It is ok to have other win2k3 DCs in the domain.


    As for your questions, please check my answers.

    1. Should I transfer all of the operations master roles to Server2 at step
    4 or leave them on Server1 until they're transferred to the final,
    end-result server (Server3)?

    A: There is no need to do so.

    2. Also, at step 4, will 2003 be installed with domain controller services
    setup properly or will I have to promote it to a domain controller manually
    (as if it was a fresh install)?

    A: If you upgrade from win2k to win2k3, you will only have a win2k3 member
    server. You need to promote it to be a DC. Since we can have win2k3 member
    server in a win2k domain, please just clean install a win2k3 member server,
    and promote it after the schema is extended.


    Please refer to the following articles for more information.

    325379 How to upgrade Windows 2000 domain controllers to Windows Server 2003
    http://support.microsoft.com/?id=325379

    278875 Cannot Promote a Windows Server 2003 Domain Controller into a
    Windows
    http://support.microsoft.com/?id=278875

    What do I need to do to prepare my Windows 2000 forest for the installation
    of the first Windows Server 2003 DC?
    http://www.petri.co.il/windows_2003_adprep.htm

    This response contains a reference to a third-party World Wide Web site.
    Microsoft is providing this information as a convenience to you. Microsoft
    does not control these sites and has not tested any software or information
    found on these sites; therefore, Microsoft cannot make any representations
    regarding the quality, safety, or suitability of any software or
    information found there. There are inherent dangers in the use of any
    software found on the Internet, and Microsoft cautions you to make sure
    that you completely understand the risk before retrieving any software from
    the Internet.


    Hope this helps. If you have any further questions, don't hesitate to get
    in touch!

    Best regards,

    Frances He


    Microsoft Online Partner Support
    Get Secure! - www.microsoft.com/security

    =====================================================

    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.

    =====================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.
     
    Frances [MSFT], May 5, 2005
    #2
    1. Advertisements

  3. Hello Clegg,

    You are welcome. I am happy to be helpful to you!

    In the future, if you have any other concerns, please feel free to let us
    know.

    Best regards,

    Frances He


    Microsoft Online Partner Support
    Get Secure! - www.microsoft.com/security

    =====================================================

    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.

    =====================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.
     
    Frances [MSFT], May 6, 2005
    #3
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.