Adding my first Windows 2003 DC in a 2000 AD

G

George Spiro

Hi,

I am planning to add my first Windows 2003 DC. It is to my understand I need
to follow the following procedure.

1. ADPrep /forestprep
2. ADPrep /domainprep

Its also to my understanding that I should run the following command due
that I have a Exchange 2000 Server.

3. ldifde.exe /i /f
inetOrgPersonFix.ldf /c "DC=mycorp,DC=com"

4. Then run DCPROMO on windows 2003 member server

I was wondering if I could do that during working hours or should I schedule
a downtime? Will AD be unresponsive during that time? Also is the order I am
running the commands right?
Also could someone please explain me why do I have to run that command for
Exchange?

George S.

Then run DCPROMO on windows 2003 member server
 
T

Tomasz Onyszko

George said:
Hi,

I am planning to add my first Windows 2003 DC. It is to my understand I need
to follow the following procedure.

1. ADPrep /forestprep
2. ADPrep /domainprep

Its also to my understanding that I should run the following command due
that I have a Exchange 2000 Server.

3. ldifde.exe /i /f
inetOrgPersonFix.ldf /c "DC=mycorp,DC=com"

4. Then run DCPROMO on windows 2003 member server
Click to expand...

Different order of tasks, maybe You will find this useful:
http://blogs.dirteam.com/blogs/tomek/archive/2006/02/09/exending_schema.aspx
 
T

Tomasz Onyszko

George said:
Will it cause a problem having Exchange 2000 and Windows 2003 AD Schema ?

That document comments on Exchange 2003 not 2000.
Click to expand...

yup - that's why You need this fix for InetOrgPerson
 
G

George Spiro

So to my understand I should run...

ADPrep /forestprep
ADPrep /domainprep

ldifde.exe /i /f
inetOrgPersonFix.ldf /c "DC=mycorp,DC=com"

in that order right?

G.
 
L

Leif Pedersen [MVP]

Hi,

No, the other way round:
ldifde.exe /i /f
inetOrgPersonFix.ldf /c "DC=mycorp,DC=com"
ADPrep /forestprep
ADPrep /domainprep
Click to expand...

Leif


George Spiro said:
So to my understand I should run...

ADPrep /forestprep
ADPrep /domainprep

ldifde.exe /i /f
inetOrgPersonFix.ldf /c "DC=mycorp,DC=com"

in that order right?

G.
Click to expand...
 
L

Leif Pedersen [MVP]

Hi,

Please read scenario 2 again - it says that if Exchange 2000 is installed
you should fix the potential mangled attributes and then run adprep.

Leif
 
G

George Spiro

How risky is this migration if you need to rate it on 10 and how long is the
process.

I have decided to do the following steps tell me what you guys think:

I have 2 DCs right now and adding a new one.

DC1 = Will stay up (Windows 2000 SP4)
DC2 = Will be demoted once DC3 will be up (Windows 2000SP4)
DC3 = Server that I will run dcpromo (Windows 2003)
EX1 = Exchange 2000 Server already part of AD

1. Move Global Catalog to DC1 using article
http://support.microsoft.com/?kbid=313994

2. Using Scenerio 2 in article http://support.microsoft.com/kb/314649
a Run ldifde -i -f inetorgpersonprevent.ldf -v -c DC=X "dn path for
forest root domain"
b ADPREP /forestprep
c ADPERP /domainprep

3. DCPROMO DC3

4. Verify DNS and Sysvol are replicating

5. DCPROMO DC2 ( to turn it into a member server )

Should I worry about transfering all FSMO roles to DC1?

G.



Paul Bergson said:
How to upgrade 2000 to 2003
http://support.microsoft.com/default.aspx?scid=kb;en-us;325379

Common mistakes
http://support.microsoft.com/kb/555040/en-us
Click to expand...
 
G

George Spiro

My english is not that great but I read in Scenerio 2 that Exchange 2000 did
schema changes which it did when I initially installed it and I still didnt
run adprep /forestprep

What scenerio would you recommend me following?
 
L

Leif Pedersen [MVP]

Hi,

Problem lies in the adprep command. This will cause mangled attributes if
you don't fix this before running the command.

Therefore:

ldifde.exe /i /f
inetOrgPersonFix.ldf /c "DC=mycorp,DC=com"
ADPrep /forestprep
ADPrep /domainprep

I have done this numerous times and it haven't caused me any problems.

Leif
 
L

Leif Pedersen [MVP]

Hi,

It is not a risky operation (1 to 2).

I would also make DC3 a global catalog server (fault tolerance since
exchange and Outlook clients uses GC's a lot)

Make sure that clients no longer use DC2 as a DNS server

There should be no problems moving all FSMO roles to DC1.

Leif
 
G

George Spiro

But you do recommend me moving FSMO right?

G.
P.S I dont want to forget thanks alot all for the help.
 
T

Tomasz Onyszko

George said:
But you do recommend me moving FSMO right?

G.
P.S I dont want to forget thanks alot all for the help.
Click to expand...

You have to move at least Schema FSMO to the machine which will serve
You to perform this operation.
 
T

Tomasz Onyszko

George said:
But when you demote a server doesnt FSMO move to another DC automatically?
Click to expand...

Dcpromo tries to move these roles but why rely on the dcpromo if You can
do it on Your own and be sure that everything works OK before getting
rid of DC
 
J

Jorge de Almeida Pinto [MVP]

yes, but it is a best practise to move it yourself as then you will decide
on what dc the fsmo will be hosted. If the dc makes the choice it will
choose a dc

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
George Spiro said:
But when you demote a server doesnt FSMO move to another DC automatically?
Click to expand...
 
G

George Spiro

I just wanted to thank everyone with the help. I just finished migrating AD
to 2003 and working flawless.

G.


"Jorge de Almeida Pinto [MVP]"
yes, but it is a best practise to move it yourself as then you will decide
on what dc the fsmo will be hosted. If the dc makes the choice it will
choose a dc

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
Click to expand...
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

W2003 DC in a 2000 Native AD 3
run adprep from windows 2003 server in windows 2000 dc Environment 2
Forestprep for Server 2003 6
AD upgrade question 2
Win2k to Win2k3 migration path 1
Upgrading a DC from 2000 to 2003 ? 8
2000 dc to 2003 dc 5
New Win2003 DC, what happens to old Win2000 DC? 2

Top