Mixed 2003 R2 & 2008 R2 DCs In 2003 AD Domain

Sponsored Links

I'm beginning to introduce 2008 R2 servers into my 2003 AD Domain. The first
server I was planning on replacing was a 2003 R2 DC that was basically used
for file sharing and was a 3rd DC in my environment. I was planning to
replace it with a 2008 R2 DC for the same purposes but I'm concerned with
what will happen to my existing AD infrastructure.

If I plan on keeping my other (2) 2003 R2 DCs and my Exchange 2003 on a 2003
R2 server, while adding this single 2008 R2 server am I going to experience
issues if I DCPROMO it to DC status?

Will this convert my entire 2003 AD infrastructure to a 2008 R2 AD and will
I need to be concerned about the 2003 Exchange server?

I've looked around for posts regarding migration but I don't really see
where anyone else is only introducing one 2008 R2 DC. Everyone else appears
to be replacing all DCs at once.

Do I need to be concerned? Has anyone else done it this way?

Thanks.

Hello absolutezero273c,

No problem about adding it, see here for some steps:

!!!NEVER START BEFORE HAVING CREATED AND TESTED A BACKUP OF YOUR DATA/MACHINE!!!

- You have to use Exchange 2003 SP2 when using Windows server 2008 or higher,
also RODCs will not work together with Exchange servers

- On the old server open DNS management console and check that you are running
Active directory integrated zone (easier for replication, if you have more
then one DNS server)

- run replmon from the run line or repadmin /showrepl(only if more then one
DC exist), dcdiag and netdiag from the command prompt on the old machine
to check for errors, if you have some post the complete output from the command
here or solve them first. For this tools you have to install the support\tools\suptools.msi
from the 2003 installation disk.

- run adprep /forestprep and adprep /domainprep and adprep /rodcprep from
the 2008 installation disk against the 2003 schema master(forestprep) / infrastructure
master(domainprep/rodcprep), with an account that is member of the Schema/Enterprise/Domain
admins, to upgrade the schema to the new version (44) or 2008 R2 (47)

- you can check the schema version with "schupgr" or "dsquery * cn=schema,cn=configuration,dc=domainname,dc=local
-scope base -attr objectVersion" without the quotes in a command prompt

- Install the new machine as a member server in your existing domain

- configure a fixed ip and set the preferred DNS server to the old DNS server
only, think about disabling IPv6 if you are not using it, some known problems
exist with it. Follow (http://blogs.dirteam.com/blogs/paulb...dows-2008.aspx)
to disable it

- run dcpromo and follow the wizard to add the 2008 server to an existing
domain, make it also Global catalog and DNS server.

- for DNS give the server time for replication, at least 15 minutes. Because
you use Active directory integrated zones it will automatically replicate
the zones to the new server. Open DNS management console to check that they
appear

- if the new machine is domain controller and DNS server run again replmon,
dcdiag and netdiag (copy the netdiag from the 2003 to 2008, will work) on
both domain controllers

- Transfer, NOT seize the 5 FSMO roles to the new Domain controller (http://support.microsoft.com/kb/324801
applies also for 2008), FSMO should always be on the newest OS DC

- after transfer of the PDCEmulator role, configure the NEW PDCEmulator to
an external timesource and reconfigure the old PDCEmulator to use the domainhierarchie
now. Therefore run on the NEW "w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
/reliable:yes /update" where PEERS will be filled with the ip address or
server(time.windows.com) and on the OLD one run "w32tm /config /syncfromflags:domhier
/reliable:no /update" and stop/start the time service on the old one. All
commands run in an elevated command prompt without the quotes.

- you can see in the event viewer (Directory service) that the roles are
transferred, also give it some time

- reconfigure the DNS configuration on your NIC of the 2008 server, preferred
DNS itself, secondary the old one

- if you use DHCP do not forget to reconfigure the scope settings to point
to the new installed DNS server

- if needed export and import of DHCP database for 2008 choose "netshell
dhcp backup" and "netshell dhcp restore" command (http://technet.microsoft.com/en-us/l.../cc772372.aspx)



Demoting the old DC (if needed)

- reconfigure your clients/servers that they not longer point to the old
DC/DNS server on the NIC

- to be sure that everything runs fine, disconnect the old DC from the network
and check with clients and servers the connectivity, logon and also with
one client a restart to see that everything is ok

- then run dcpromo to demote the old DC, if it works fine the machine will
move from the DC's OU to the computers container, where you can delete it
by hand. Can be that you got an error during demoting at the beginning, then
uncheck the Global catalog on that DC and try again

- check the DNS management console, that all entries from the machine are
disappeared or delete them by hand if the machine is off the network for ever

- also you have to start AD sites and services and delete the old servername
under the site, this will not be done during demotion

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I'm beginning to introduce 2008 R2 servers into my 2003 AD Domain. The
> first server I was planning on replacing was a 2003 R2 DC that was
> basically used for file sharing and was a 3rd DC in my environment. I
> was planning to replace it with a 2008 R2 DC for the same purposes but
> I'm concerned with what will happen to my existing AD infrastructure.
>
> If I plan on keeping my other (2) 2003 R2 DCs and my Exchange 2003 on
> a 2003 R2 server, while adding this single 2008 R2 server am I going
> to experience issues if I DCPROMO it to DC status?
>
> Will this convert my entire 2003 AD infrastructure to a 2008 R2 AD and
> will I need to be concerned about the 2003 Exchange server?
>
> I've looked around for posts regarding migration but I don't really
> see where anyone else is only introducing one 2008 R2 DC. Everyone
> else appears to be replacing all DCs at once.
>
> Do I need to be concerned? Has anyone else done it this way?
>
> Thanks.
>

Hi
Adding a 2008 R2 to your domain is not hard, the process will be the same as
you would if you were adding an additional DC to that Domain.
The differences are that you need to prepare your Forest and Domain to
introduce that new DC and OS. Meinolf's answer tells you how to do that
using common procedures (except: pre-adding that new server to domain, I
don't understant why you need to do that).

Here's a link that may give you some preview of the process (The link shows
how to add a secondary DC using R2 and not the upgrade process, the
difference is that you need to run the adprep /forestprep and adprep
/domainprep switches):

http://srvcore.wordpress.com/2010/01...omains-part-2/


--

I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MVP Directory Services

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.




"absolutezero273c" <absolutezero273c@discussions.microsoft.com> wrote in
message news:E8C71EC4-E96B-40E6-AB01-1D57AEE820C7@microsoft.com...
> I'm beginning to introduce 2008 R2 servers into my 2003 AD Domain. The
> first
> server I was planning on replacing was a 2003 R2 DC that was basically
> used
> for file sharing and was a 3rd DC in my environment. I was planning to
> replace it with a 2008 R2 DC for the same purposes but I'm concerned with
> what will happen to my existing AD infrastructure.
>
> If I plan on keeping my other (2) 2003 R2 DCs and my Exchange 2003 on a
> 2003
> R2 server, while adding this single 2008 R2 server am I going to
> experience
> issues if I DCPROMO it to DC status?
>
> Will this convert my entire 2003 AD infrastructure to a 2008 R2 AD and
> will
> I need to be concerned about the 2003 Exchange server?
>
> I've looked around for posts regarding migration but I don't really see
> where anyone else is only introducing one 2008 R2 DC. Everyone else
> appears
> to be replacing all DCs at once.
>
> Do I need to be concerned? Has anyone else done it this way?
>
> Thanks.

Meinolf & Jorge, thank you for responding.

Yes. I have already added my 2008 R2 server to the domain. No problems there.

I'll run through the procedures you both have outlined in your responses.
And yes, I do have Exchange 2003, SP2, so I should be ok there, but my main
concern was that I wouldn't be shooting myself in the foot if I added the
2008 R2 and made it a DC without taking the necessary precautions. Your
steps should help clear up that question.

Regards.

Ok, Great!

--

I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MVP Directory Services

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.




"absolutezero273c" <absolutezero273c@discussions.microsoft.com> wrote in
message news:670DFE47-0D83-4483-B699-FF37C79EEF7C@microsoft.com...
> Meinolf & Jorge, thank you for responding.
>
> Yes. I have already added my 2008 R2 server to the domain. No problems
> there.
>
> I'll run through the procedures you both have outlined in your responses.
> And yes, I do have Exchange 2003, SP2, so I should be ok there, but my
> main
> concern was that I wouldn't be shooting myself in the foot if I added the
> 2008 R2 and made it a DC without taking the necessary precautions. Your
> steps should help clear up that question.
>
> Regards.

Hello absolutezero273c,

Sounds ok, if you have problems don't hesitate to post again.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Meinolf & Jorge, thank you for responding.
>
> Yes. I have already added my 2008 R2 server to the domain. No
> problems there.
>
> I'll run through the procedures you both have outlined in your
> responses. And yes, I do have Exchange 2003, SP2, so I should be ok
> there, but my main concern was that I wouldn't be shooting myself in
> the foot if I added the 2008 R2 and made it a DC without taking the
> necessary precautions. Your steps should help clear up that question.
>
> Regards.
>