P90x – Day 61 last night with Harry King. Legs are a little tired today. Looking forward to KenpoX tonight.


Thanks Jeremy – for this link: http://support.microsoft.com/kb/324801

Troubles Migrating from Win 2000 AD to 2008

1. Back up your domain controllers

While most upgrades go smoothly, there’s the possibility of creating an outage that could affect your entire domain — potentially preventing users from accessing network resources. The more customized your Active Directory schema and permissions, the more likely you are to have problems. Therefore, you should plan your upgrade during nonpeak hours and have a full backup (including System State) of at least two domain controllers in case you need to roll back to an earlier version.

There are a couple of very important considerations, that you should have in mind, before you proceed with your migration scenario.

● First, make sure that your Active Directory is healthy, and you have a perfect replication between the existing Domain Controllers. Using NetDiag, DCDiag, Repadmin from Windows Support tools could help you in this task. It is a very wrong approach to expect, that an in-place upgrade will solve your existing Active Directory problems.

● Second, you should have a good backup of your Domain Controllers, including the system state. If you have more than one DC (which is necessary) – backup all of them, or at least two DC.

● Check, whether you cover the hardware requirements.

● Check, and raise, if necessary, the Domain and Forest functional levels. You cannot upgrade directly from Windows 2000 mixed, or Windows Server 2003 interim domain functional levels.

● The first Windows Server 2008 Domain Controller in the forest must be a Global Catalog Server, and it cannot be a Read Only Domain Controller, RODC.

● Check the FSMO roles assignments. When you prepare the existing AD, you should run adprep /forestprep on the Schema operations master, and adprep /domainprep /gpprep on the infrastructure master.