Win2K AD with SFU 3.5 upgraded to Windows 2003 R2

[Blake]

We have a Windows 2000 AD with SFU 3.5 installed (mainly for the schema
updates, we do LDAP integration). The only associated service we have
installed on our domain controller is Server for NIS. We need to upgrade
the AD to 2k3R2, and I know that it has a lot of Unix stuff pre-built into
the schema. What is the 'correct' method for upgrading?

Do we continue to use the SFU attributes? Do we migrate to the R2
attributes? Are they the same or different?

(I guess my question is do I need to install SFU on a new 2k3R2 DC on an
upgraded domain)

What do I need to do to be able to see the Attributes for Unix in ADUC
(assuming that I don't install SFU)?

Thanks
Blake

 

[=?ISO-8859-15?Q?=22Martin_v=2E_L=F6wis=22?=]

Do we continue to use the SFU attributes? Do we migrate to the R2
attributes? Are they the same or different?

The attributes are (partially) different. I believe you should
uninstall SFU, then install R2. This will install the new schema;
not sure whether it will also migrate the values.

(Actually, I think it will *not* migrate the values; you have to do
this manually. Dumping the current attributes as LDIF, replacing
the attribute names, and reloading the new attributes should help.

What do I need to do to be able to see the Attributes for Unix in ADUC
(assuming that I don't install SFU)?

Install the "Identity management" components from R2.

Regards,
Martin

 

[Lucyfer]

lots people cannot upgrade to R2 with SFU installed.

 

[Blake]

Thanks guys

It seems the MS is changing the attribute names to ones that fit the
standard - using 'identity management' allows ADUC to see the NEW attributes
(and not the old ones). We'll have to use ADSIEDIT until I can write a
script to copy the values from the old attribute names to the new ones.

Thanks again,
Blake