Noted!
I would repeat the same cycle for the subdomain and then I would have:
MYDOMAIN.LOCAL
ML-DC01 (2008 R2)
ML-DC02 (2003)
ML-DC03 (2008 R2)
SUBDOMAIN.MYDOMAIN.LOCAL
SML-DC01 (2008 R2)
SML-DC02
SML-DC03 (2008 R2)
Does it make sense to cycle through and do the DC-02's so when complete it
looks like the original, except all of them being 2008 R2? I'm thinking yes due
to how much infrastructure points to those names and/or IP's.
MYDOMAIN.LOCAL
ML-DC01 (2008 R2) (same IP as original)
ML-DC02 (2008 R2) (same IP as original)
SUBDOMAIN.MYDOMAIN.LOCAL
SML-DC01 (2008 R2) (same IP as original)
SML-DC02 (2008 R2) (same IP as original)
I do know ML-DC02 is a certificate server but I am largely
certificate-illiterate, what special considerations do I have with that?
This'll teach me to ask to be the lead on the newly formed AD team :)
Dave
From: Michael B. Smith [mailto:[email protected]]
Sent: Thursday, June 28, 2012 6:12 PM
To: NT System Admin Issues
Subject: RE: Upgrading DC's to 2K8
3.5 remove server from domain
From: David Lum [mailto:[email protected]]<mailto:[mailto:[email protected]]>
Sent: Thursday, June 28, 2012 2:14 PM
To: NT System Admin Issues
Subject: Upgrading DC's to 2K8
Reality check:
Empty forest root
MYDOMAIN.LOCAL
ML-DC01
ML-DC02
Then subdomain
SUBDOMAIN.MYDOMAIN.LOCAL
SML-DC01
SML-DC02
All are currently 2K3 DC's. Ideally I think we'd like to upgrade them to W2K8
DC's and keep the same name (we have a fair amount of LDAP-y stuff that looks
at names).
What about this plan for ML-DC01?
1. Create 2008 R2 DC ML-DC03
2. Move the FSMO/DHCP roles to ML-DC03
3. DCPROMO W2K3 ML-DC01 to member status
4. Build new 2008 R2 ML-DC01 with same name and IP, Make it a DC
5. Move FSMO roles back to ML-DC01
David Lum
Systems Engineer // NWEATM
Office 503.548.5229 // Cell (voice/text) 503.267.9764
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin