migration of windows server 2003 to windows server 2008 old

8/10/2019 Migration of Windows Server 2003 to Windows Server 2008 Old

1/33

Migration of Windows server 2003 to windows server 2008

1. Raise Domain Functional Level

2. Prepare your current Windows 2003 Active Directory for Windows erver 200! domaincontrollers.

3. "#en$ we will need to setup t#e server %L&A'(D)2*! as an additional domaincontroller$ read my previous article ettin+ ,p an Additional Domain )ontroller Wit#Windows erver 200! to -now t#e steps re uired to setup an additional domaincontroller.

4. "ransfer F &/ roles to t#e Windows erver 200! Domain )ontroller

o lets starts

1. Raise Domain Functional Level

We need to confi+ure t#e domain to run in native mode$ t#is is done y

/n t#e Windows erver 2003 Domain )ontroller$ run Active Directory User and Computers snap(in yclic-in+ on Start Administrative Tools Active Directory User and Computers

Ri+#t )lic- t#e Domain ame node$ t#en clic- on Raise Domain Functional Level
http://www.elmajdal.net/win2k8/Setting_Up_an_Additional_Domain_Controller_With_Windows_Server_2008.aspxhttp://www.elmajdal.net/win2k8/Setting_Up_an_Additional_Domain_Controller_With_Windows_Server_2008.aspxhttp://www.elmajdal.net/win2k8/Setting_Up_an_Additional_Domain_Controller_With_Windows_Server_2008.aspxhttp://www.elmajdal.net/win2k8/Transferring_FSMO_Roles_in_Windows_Server_2008.aspxhttp://www.elmajdal.net/win2k8/Transferring_FSMO_Roles_in_Windows_Server_2008.aspxhttp://www.elmajdal.net/win2k8/Setting_Up_an_Additional_Domain_Controller_With_Windows_Server_2008.aspxhttp://www.elmajdal.net/win2k8/Setting_Up_an_Additional_Domain_Controller_With_Windows_Server_2008.aspx


2/33

4f you #ave Windows 2000 Active Directory domain controllers t#en c#oose Windows2000 native$ if you do not #ave any Windows 2000 Active Directory domain controllersand all of your domain controllers are Windows erver 2003$ t#en c#oose Windowserver 20003. 4 don5t #ave any Windows 2000 Active Directory domain controllers$ so

usin+ t#e drop down list$ 4 will select Windows erver 2003 and t#en clic- t#e Raise utton.

A warnin+ messa+e will e displayed$ informin+ you t#at t#e c#an+es cannot e reversed.)lic- OK

A confirmation messa+e will e displayed statin+ t#at t#e functional level was raisedsuccessfully. )lic- OK


3/33

)lose Active Directory User and Computers snap(in

2.Prepare current indo!s 2""# Active Directory

6efore you can #ave a 200! server domain controller in your e7istin+ 2003 domain$ wewill need to prepare ot# t#e Forest Level and t#e Domain level$ t#is is done y runnin+t#e followin+ commands on t#e Windows erver 2003 Domain )ontroller.

4nsert t#e Windows erver 200! D8D inside t#e Windows erver 2003 D8D Drive

/pen )ommand Prompt$ t#is is done y )lic-in+ on Start Run type C$D clic-OK

"ype D%&sources&adprep&adprep '(orestprep 9W#ere D is t#e drive of your Windows200! D8D:

)lic- )nter

Read t#e warnin+ messa+e$ in my la 4 don5t #ave any Windows 2000 Active DirectoryDomain )ontrollers$ so 4 can simply s-ip t#is y typin+ C and t#en press )nter $ else


4/33

uite t#e Forest Preparation step and up+rade Windows 2000 Active Directory Domain)ontroller9s: to P;$ t#en run forestperp a+ain.

After Forest preparation is completed successfully$ run t#e Domain preparation command

4nside )&D$ type D%&sources&adprep&adprep 'domainprep 9W#ere D is t#e drive ofyour Windows 200! D8D:

4f you #ave not Raised t#e Domain Functional Level from Windows 2000 &i7ed toWindows 2000 ative or Windows 2003 as was illustrated earlier in step < 1$ t#en youwill receive t#e followin+ error messa+e after you run domainprep command


5/33


6/33

As you can see$ Domain(wide information #as already een updated w#en we ran t#edomainprep command$ as no =roup Policy / >ect 9=P/: updates needed$ or =P/information #as already een updated.

"o set up an Additional Domain )ontroller$ 4 will use t#e dcpromo.e7e command.

1. "o use t#e command$ clic- on Start Run and t#en write dcpromo )lic- OK

2. "#e system will start c#ec-in+ if Active Directory Domain ervices 9 AD D : inariesare installed$ t#en will start installin+ t#em. "#e inaries could e installed if you #ad runt#e dcpromo command previously and t#en canceled t#e operation after t#e inaries wereinstalled.


7/33

3. "#e Active Directory Domain Services +nstallation i,ard will start$ eit#er ena le t#e c#ec- o7 esideUse Advanced mode installation and )lic- -e t / or -eep it unselected and clic- on -e t


8/33


9/33

. "o set up an Additional Domain )ontroller$ you will need an account t#at must e eit#er amem er of t#e %nterprise Admins +roup or t#e Domain Admins +roup. We #ave twooptions

&y )urrent lo++ed on credentials 9 Domain ameB,sername or&ac#ine ameB,sername:

Alternate credentials

4f you #ave previously >oined t#is server to t#e domain and you are currently lo++ed in to it wit# an%nterprise AdminCDomain Admin user$ t#en you can use t#e first option 9&y current lo++ed oncredentials: . As you can see t#is option is +rayed #ere$ and t#e reason for t#is is elow it. 4t is ecause 45mcurrently lo++ed in wit# a local user$ t#e mac#ine is not a domain mem er. 45m left out wit# t#e secondoption Alternate credentials

!. "o enter t#e Alternate credentials$ clic- et. 4n t#e Windows ecurity dialo+ o7$ enter t#euser name and password for an account t#at must e eit#er a mem er of t#e %nterpriseAdmins +roup or t#e Domain Admins +roup t#en clic- e7t .


10/33

4f you #ave entered a wron+ usernameCpassword $ you will receive t#e followin+ error messa+e

. /n t#e elect a Domain pa+e$ select t#e domain of t#e Additional Domain )ontroller$ andt#en clic- e7t $ as 4 already #ave only one domain$ t#en it will e selected y default.


11/33

10. /n t#e elect a ite pa+e$ eit#er ena le t#e c#ec- o7 eside Use t1e site t1atcorresponds to t1e +P address o( t1is computer $ t#is will install t#e domain controllerin t#e site t#at corresponds to its 4P address$ or select a site from t#e list and t#en clic-

e7t. 4f you only #ave one domain controller and one site$ t#en you will #ave t#e first option +rayed andt#e site will e selected y default as s#own in t#e followin+ ima+e


12/33

11. /n t#e Additional Domain )ontroller /ptions pa+e$ 6y default$ t#e D erver and =lo al)atalo+ c#ec- o7es are selected. Eou can also select your additional domain controller to e a Read(onlyDomain )ontroller 9R/D): y selectin+ t#e c#ec- o7 eside it.

&y primary domain controller is a D erver is well$ and t#is can e verified y readin+ t#e additionalinformation written in t#e elow ima+e$ t#at t#ere is currently 1 D server t#at is re+istered as an

aut#oritative name server for t#is domain. 4 do want my Additional D) to e a D server and a =lo alcatalo+$ so 4 will -eep t#e c#ec- o7es selected. )lic- -e t

12. 4f you select t#e option to install D server in t#e previous step$ t#en you will receive a messa+e t#atindicates a D dele+ation for t#e D server could not e created and t#at you s#ould manually create aD dele+ation to t#e D server to ensure relia le name resolution. 4f you are installin+ an additionaldomain controller in eit#er t#e forest root domain 9or a tree root domain: $ you do not need to create t#eD dele+ation. 4n t#is case$ you can safely i+nore t#e messa+e and clic- Ees .

13. 4n t#e 4nstall from &edia pa+e 9 will e displayed if you #ave selected ,se advanced modeinstallation on t#e Welcome pa+e$ if you didn5t select it$ t#en s-ip to step < 1?:$ you can c#oose to eit#erreplicate data over t#e networ- from an e7istin+ domain controller$ or specify t#e location of installation


13/33

media to e used to create t#e domain controller and confi+ure AD D . 4 want to replicate data over t#enetwor-$ so 4 will c#oose t#e first option clic- -e t

1;. /n t#e Source Domain Controller pa+e of t#e Active Directory Domain ervices 4nstallation Wi ard$ youcan select w#ic# domain controller will e used as a source for data t#at must e replicated durin+installation$ or you can #ave t#e wi ard select w#ic# domain controller will e used as t#e source for t#isdata. Eou #ave two options

Let t#e wi ard c#oose an appropriate domain controller

,se t#is specific domain controller


14/33


15/33

ote Windows erver 6ac-up ac-s up t#e directory service y volume. For ac-upand recovery efficiency$ store t#ese files on separate volumes t#at do not containapplications or ot#er nondirectory files.

[email protected] t#e Directory Services Restore $ode Administrator Pass!ord 9DSR$ : pa+e$ write a password andconfirm it. "#is password is used w#en t#e domain controller is started in Directory Services Restore$ode $ w#ic# mi+#t e ecause Active Directory Domain ervices is not runnin+$ or for tas-s t#at must

e performed offline.


16/33

&a-e sure t#e password meet t#e password comple7ity re uirements of t#e password policy$ t#at is a password t#at contains a com ination of uppercase and lowercase letters$num ers$ and sym ols. else you will receive t#e followin+ messa+e

1 . Summary pa+e will e displayed s#owin+ you all t#e settin+ t#at you #ave set . 4t +ives you t#e option toe7port t#e settin+ you #ave setup into an answer file for use to automate su se uent AD D operations$ ifyou wis# to #ave suc# file$ clic- on t#e ) port settin*s utton and save t#e file. "#en clic- -e t to e+inAD D installation


17/33

1!. Active Directory Domain Services installation will e completed$ clic- Finis1/ t#en clic- on Restart -o!to restart your server for t#e c#an+es to ta-e effect.


18/33

/pen Active Directory Users Computers $ and t#en clic- on t#e Domain Controllers /r+ani ational,nit$ and you will see your Additional Domain )ontroller alon+ wit# your Primary Domain )ontroller.

"o set an additional Domain )ontroller as a =lo al )atalo+ erver$ follow t#e elow steps

1. /pen Active Directory Sites and Services $ clic- Start Administrative Tools t#enclic- Active Directory Sites and Services .


19/33

2. From t#e left side pane$ e7pand Sites 3 De(ault4First4Site4-ame 9 4f you #ave renamedt#e ite name$ t#en t#is name will reflect your ite name: 3 Servers 3 DomainControllers .


20/33


21/33

?. )lose Active Directory Sites and Services and t#en restart t#e Domain )ontroller.

Usin* Active Directory Sc1ema snap4in to trans(er t1e Sc1ema $aster role

Eou #ave to re+ister sc1mm*mt.dll in order to e a le to use t#e Active Directory Sc1ema snap4in

1. )lic- Start Run "ype re*svr#2 sc1mm*mt.dll

2. )lic- OK


22/33

A popup messa+e will confirm t#at sc1mm*mt.dll was successfully re+istered. )lic- OK

3. )lic- Start Run $ type mmc $ t#en clic- OK

4. )lic- File t#en clic- Add'Remove Snap4in...

5. From t#e left side$ under Availa0le Snap4ins $ clic- on Active Directory Sc1ema $ t#enclic- Add 3 and t#en clic- OK


23/33

6. Ri+#t clic- Active Directory Sc1ema $ t#en clic- C1an*e Active Directory DomainController...

7.From t#e listed Domain )ontrollers$ clic- on t#e domain controller t#at you want to et#e sc#ema master role #older and t#en clic- on OK


24/33

Eou will receive a messa+e o7 statin+ t#at t#e sc#ema snap(in is not connected to asc#ema operations master. "#at is for sure$ as we #ave not yet set t#is Windows erver200! domain controller as a c#ema &aster role #older. "#is will e done in t#e ne7tstep. )lic- OK

8. 4n t#e console tree$ ri+#t clic- Active Directory Sc1ema6DomainController.Domain-ame7 $ and t#en clic- Operations $aster...


25/33


26/33

"#e role will e transferred and a confirmation messa+e will e displayed. )lic- OK

"#en clic- Close $ as you can see in t#e elow snaps#ot$ t#e current sc#ema master is%L&A'(D)2*!.%L&A'DAL. %"

Usin* Active Directory Domains and Trusts snap4in to trans(er t1e Domain -amin* $aster Role

)lic- Start Administrative Tools t#en clic- Active Directory Domains and Trusts


27/33

1. Ri+#t clic- Active Directory Domains and Trusts $ t#en clic- C1an*e Active DirectoryDomain Controller...

2. From t#e listed Domain )ontrollers$ clic- on t#e domain controller t#at you want to et#e Domain amin+ master role #older and t#en clic- on OK


28/33


29/33

?.

)lic- :)S to confirm t#e transfer of t#e Domain amin+ role

"#e role will e transferred and a confirmation messa+e will e displayed. )lic- OK $t#en clic- Close


30/33

"ill now$ we #ave successfully transferred two F &/ roles$ t#e c#ema &aster role and t#eDomain amin+ role. "#e last t#ree roles can e transferred usin+ a sin+le nap(in.

Usin* Active Directory Users and Computers snap4in to trans(er t1e R+D $aster/ PDC )mulator/and +n(rastructure $aster Roles

1. )lic- Start Administrative Tools t#en clic- Active Directory Users andComputers

2. Ri+#t clic- Active Directory Users and Computers $ t#en clic- All Tas;s Operations$aster...


31/33

3. Eou will #ave t#ree "a s$ representin+ t#ree F &/ roles 9R4D$ PD)$ 4nfrastructure:.)lic- t#e C1an*e utton under eac# of t#ese t#ree ta s to transfer t#e roles.

;.

)lic- :es to confirm t#e role transfer


32/33

"#e role will e transferred and a confirmation messa+e will e displayed. )lic- OK

As for t#e +n(rastructure role$ once you clic- on t#e C1an*e utton you will receive t#e elow messa+e

6y default$ w#en you first install your first Domain )ontroller$ it #olds t#e five roles and eside t#at it is a =lo al )atalo+. 4f your environment is a multi(domainCforest$ t#en yous#ould t#in- a out structurin+ your F &/ roles and transfer t#e 4nfrastructure role to anone =lo al )atalo+ domain controller. %lse if you #ave small num er of domaincontrollers 9 e7. two domain controllers: t#en you s#ould not worry a out t#is. )lic- :es

; ."#e "a s s#ould now loo- li-e t#is


33/33

"#at5s it$ y now$ you #ave successfully transferred t#e five F &/ roles to t#e Windows erver200! Domain )ontroller.

migration of windows server 2003 to windows server 2008 old

Documents