Migrate from Win2k to 2003 Enterprize

G

Guest

I would like to migrate my Win2k DC master to 2003 Enterprize. We have 2
master DC's the one that I need to migrate also holds DNS and the CA. Is
there a step by step guide somewhere in the MS world that I can use to help
me through this process?
 
C

Chriss3 [MVP]

Hello Joe.
Have a look at this KB
326480 - How to Use Active Directory Migration Tool Version 2 to Migrate
from Windows 2000 to Windows Server 2003
This article describes how to set up the Active Directory Migration Tool
(ADMT) to migrate from a Windows 2000-based domain to a Windows Server
2003-based domain.

http://support.microsoft.com/default.aspx?scid=kb;en-us;326480


--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services

No email replies please - reply in the newsgroup
 
G

Guest

Thank you very much for your quick response. However, we are planning on
setting up a 2003 DC on a new machine, promoting it and seizing the roles
from the current PDC. Then demoting the old DC. "just saying that sounds
bad" I've read that there can be DNS issues and other things that we need to
watch out for... Is there a type of check list or something available?
 
C

Cary Shultz [A.D. MVP]

Chris,

I might join in now if you do not mind!

Joe, you might want to look at this MSKB Article:

http://support.microsoft.com/?id=325379

It is pretty through. Here is a short version of what to do:

When you want to introduce a WIN2003 Domain Controller into a WIN2000 Active
Directory environment you need to extend the Schema. Now, how do you do
this? You drop in the WIN2003 Server CD into the DC that holds the FSMO
Role of Schema Master ( yep, pretty much should be this DC ) and run 'adprep
/forestprep' from the run box. This will bring the Schema up to par for
WIN2003. This is part one. You should then go to the DC that holds the
FSMO Role of PDC Emulator and drop in that WIN2003 Server CD and run 'adprep
/domainprep'. Now, if you have multiple domains you will need to do this
for each and every domain. Make sure that you give this time to replicate.
If you have multiple Sites ( as configured in Active Directory Sites and
Services ) you will need to give it ample time ( as Intersite replication is
scheduled a bit slower than Intrasite replication ). Do the 'adprep
/forestprep' first and give it time to replicate. If you try to do the
'adprep /domainprep' before it has completely replicated then you will get
an error. Once you have run the 'domainprep' give that time to replicate as
well.

Once you have done this and have given it time to replication ( notice how I
am stressing this point? ) then install WIN2003 Server on your new hardware
and then run dcpromo like you do normally. Simply join the DC to an
existing forest, existing tree, existing domain.

Now, to transfer the FSMO Roles ( and this is a transfer, not a seize -
based on what you have written so far ). I will mention this in the
beginning so that someone can correct me if what I am about to say is
incorrect. I have not done this ( either production or testing ) so I have
no practical experience and I have not heard/read about any problems doing
this. So, forewarned is forearmed. Simply open up the Active Directory
Users and Computers MMC on the WIN2003 DC and transfer the three Domain-wide
Roles ( PDC Emulator, RID Master and Infrastructure Master ) over to that
Domain Controller. To transfer the Domain Naming Master ( one of the two
Forest-wide Roles ) you would use the Active Directory Domains and Trusts
MMC. There is just one role left - the Schema Master. This is a bit more
involved. Please look at the MSKB Article that I have included. If you
like the command line, then you can use ntdsutil to do all of this.

http://support.microsoft.com/?id=255504
http://support.microsoft.com/?id=255690

If you are running Exchange 2000 currently there is a good chance that you
will run into a problem with three mangled attributes. This is well
documented and easily resolved. Please take a look at the following MSKB
Article on this:

http://support.microsoft.com/?id=314649
 
G

Guest

Hello Joe,

I agree with Cary about this document.
We are going to migrate from W2000 to W2003 in next two months and I
following this document for it.
I'd also like to suggest you to use the REPLICATION MONITOR, it gives you a
lot of information about your AD consistancy.
A couple of recommendations,

1.- If you see any error in the servers or AD, solve it before continuing
with the
upgrade, otherwise probably you will be in troubles.

2.- This is in the steps, but worths to remind it, be sure you can roll back
in the case of problems.

The migration we are evaluating is similar the one you describe:
- New W2000 Server, migrate roles and upgrade the ADPREP /forest and later
/domain
- After this I will get a W2003 member server to upgraded as DC in the new
ready to go domain.

Please let us know how has gone the upgrade/migration of your domain.

Regards,
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top