Windows Server 2008 DC Role and Server 2003 Roles
Recently we have decided to add a secondary DC server to our domain which is 2008 R2, the current one is 2003. We have performed several checks and are about to attach the FSMO role to the new server however we are wondering if:
Do we need to migrate any of the existing roles from the 2003 to the new 2008 box?
Does the 2008 box take precedence as its a later OS?
Are there any other things we should do before adding the role?
We have updated the Schema already, just not applied the roles as yet.
All advice is welcome, thanks.
July 7th, 2011 1:27pm
Please check this article.
http://technet.microsoft.com/en-us/library/dd365353(WS.10).aspx
Thanks
Free Windows Admin Tool Kit Click here and download it now
July 7th, 2011 1:51pm
Hello,
Do we need to migrate any of the existing roles from the 2003 to the new 2008 box? Not needed but recommended, as new security groups are created that are required fith the newer OS depending on the server roles you plan to use. FSMO roles should always
be on the newest OS DC
Does the 2008 box take precedence as its a later OS? No.
Are there any other things we should do before adding the role? Use the support tools and check the domain BEFORE adding a new OS DC.
dcdiag /v /c /d /e /s:dcname >c:\dcdiag.txt
netdiag /v >c:\netdiag.txt [from each DC, netdiag may work but isn't supported with Windows server 2008 and don't run on Windows server 2008 R2]
repadmin /showrepl dc* /verbose /all /intersite >c:\repl.txt ["dc* is a place holder for the starting name of the DCs if they all begin the same (if more then one DC exists)]
dnslint /ad /s "DCipaddress" (http://support.microsoft.com/kb/321045)
If you change the PDCEmulator FSMO to another DC the time service must be reconfigured on the old/new PDCEmulator, more details in:
http://msmvps.com/blogs/mweber/archive/2010/06/27/time-configuration-in-a-windows-domain.aspxBest regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
July 7th, 2011 2:13pm
Hello,
upgrading is not required but recommended for security and performance reasons. Also, by upgrading you will benefit of new features.
For upgrading to AD DS 2008 R2, refer to that: http://technet.microsoft.com/en-us/library/cc731188(WS.10).aspx
In-place upgrade from a 32 bit OS to 64 bit is not supported. You have to add new DCs as additional DCs, transfer FSMO roles to new DCs with 2008 R2 OS and demote the old ones.
This
posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Microsoft
Student Partner 2010 / 2011
Microsoft Certified
Professional
Microsoft Certified
Systems Administrator: Security
Microsoft Certified
Systems Engineer: Security
Microsoft Certified
Technology Specialist: Windows Server 2008 Active Directory, Configuration
Microsoft Certified
Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
Microsoft Certified
Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
Microsoft
Certified Technology Specialist: Windows 7, Configuring
Microsoft Certified IT Professional: Enterprise Administrator
Free Windows Admin Tool Kit Click here and download it now
July 7th, 2011 4:34pm