Noted!

I would repeat the same cycle for the subdomain and then I would have:
MYDOMAIN.LOCAL
                ML-DC01 (2008 R2)
                ML-DC02 (2003)
                ML-DC03 (2008 R2)
SUBDOMAIN.MYDOMAIN.LOCAL
                SML-DC01 (2008 R2)
                SML-DC02
                SML-DC03 (2008 R2)

Does it make sense to cycle through and do the DC-02's so when complete it 
looks like the original, except all of them being 2008 R2? I'm thinking yes due 
to how much infrastructure points to those names and/or IP's.
MYDOMAIN.LOCAL
                ML-DC01 (2008 R2) (same IP as original)
                ML-DC02 (2008 R2) (same IP as original)
SUBDOMAIN.MYDOMAIN.LOCAL
                SML-DC01 (2008 R2) (same IP as original)
                SML-DC02 (2008 R2) (same IP as original)

I do know ML-DC02 is a certificate server but I am largely 
certificate-illiterate, what special considerations do I have with that?

This'll teach me to ask to be the lead on the newly formed AD team :)

Dave


From: Michael B. Smith [mailto:[email protected]]
Sent: Thursday, June 28, 2012 6:12 PM
To: NT System Admin Issues
Subject: RE: Upgrading DC's to 2K8

3.5 remove server from domain

From: David Lum [mailto:[email protected]]<mailto:[mailto:[email protected]]>
Sent: Thursday, June 28, 2012 2:14 PM
To: NT System Admin Issues
Subject: Upgrading DC's to 2K8

Reality check:

Empty forest root
MYDOMAIN.LOCAL
                ML-DC01
                ML-DC02
Then subdomain
SUBDOMAIN.MYDOMAIN.LOCAL
                SML-DC01
                SML-DC02

All are currently 2K3 DC's. Ideally I think we'd like to upgrade them to W2K8 
DC's and keep the same name (we have a fair amount of LDAP-y stuff that looks 
at names).

What about this plan for ML-DC01?
1. Create 2008 R2 DC ML-DC03
2. Move the FSMO/DHCP roles to ML-DC03
3. DCPROMO W2K3 ML-DC01 to member status
4. Build new 2008 R2 ML-DC01 with same name and IP, Make it a DC
5. Move FSMO roles back to ML-DC01
David Lum
Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin

Reply via email to