in addition to what Guido said: be aware that E2K3 schema update (in step 1) does update the PAS and the w2k3 schema update does not (step two). In step 4 you mention: "GCs: Avoid full sync on partial attribute updates". That will not be an issue anymore as the E2K3 schema update has already been done. In a small environment that will not be that much of an issue (especially in a single domain forest). However in a large multi domain forest you need to be carefull with that one. In that case it would be better to apply the inetorg fix, introduce w2k3 dcs, get rid of w2k dcs and then do the schema update. And if that is not possible, make you sure you plan for any schema update that changes the PAS when having w2k GCs Met vriendelijke groeten / Kind regards, Ing. Jorge de Almeida Pinto Senior Infrastructure Consultant MVP Windows Server - Directory Services LogicaCMG Nederland B.V. (BU RTINC Eindhoven) ( Tel : +31-(0)40-29.57.777 ( Mobile : +31-(0)6-26.26.62.80 * E-mail : <see sender address>
________________________________ From: [EMAIL PROTECTED] on behalf of Grillenmeier, Guido Sent: Thu 2006-05-11 16:16 To: [email protected] Subject: RE: [ActiveDir] OT - W2K/E2K upgrade to W2K3/E2K3 I'd search the archives here - there is lots of good information available on these types of upgrades. Basically you're well prepared with moving your Exchange server to a dedicated machine (off of the DC) - usually it's easier to move the DC role, but that's up to you. The important thing is that E2k is not running on a DC, as that would be unsupported with a Win2k3 DC. So now - if you care to do an upgrade which is often done in environments such as yours (and fairly low risk at the same time), you're ready to start. It would be roughly in this order: 1. update the E2k Schema in AD with that of E2k3 this should usually fix the issue with a potential conflict with the Win2k3 schema but you'll want to double check before moving on (see http://support.microsoft.com/kb/314649) 2. update the AD Schema with Win2k3 schema (lots of extra infos in http://support.microsoft.com/default.aspx?scid=kb;en-us;325379) 3. before you update the Win2k DCs with Win2k3, ensure you understand your client environment - if you still have lots of legacy clients, you might want to disable SMB signing and secure channel encryption (all enabled by default in the local Win2k3 policies - for DCs you have to change the default domain controller policy (or better: add another one to the OU) to disable these - see support article above 4. update your DCs - at your count, the order doesn't really matter, but should be - PDC: Creates new security principals - Domain naming master: to add or remove new application partitions - Bridgeheads: Site costing for DFS + KCC / REPL events - GCs: Avoid full sync on partial attribute updates 5. udgrade your E2k servers with E2k3 (often done with new HW + mailbox move => up to you) Lots of other infos in the archives. /Guido -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jonathan Watts Sent: Donnerstag, 11. Mai 2006 10:01 To: [email protected] Subject: [ActiveDir] OT - W2K/E2K upgrade to W2K3/E2K3 Hey list Firstly, thanks for all of the great AD help that gets provided on this list. I administer a small network (at least small compared to most of your networks I would guess) for a secondary school (K-12 equivalent) in the UK. I have 3 servers, all DC's, all running W2K SP4, and one of those DC's is running E2K. I am planning to upgrade to the latest versions of these during the summer break, and at the same time I plan to move Exchange off the DC onto a new dedicated mail server. I think I have most of my procedure plan in place courtesy of the abundance of stuff from MS, but I was wondering if anyone here knew of any case studies or properly documented procedures for this scenario? Very little, if any, of the MS stuff is the same as our setup and I know that all setups are different, but I wondered if there was a document hidden away that properly reflected my situation. Appreciative of any help Jon ********************** Jonathan Watts Network Admin St Catherine's School ********************** List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.
<<winmail.dat>>
