active directory migration to 2008 r2

Upload: rakesh-prashanth

Post on 02-Apr-2018

225 views

Category:

Documents


0 download

TRANSCRIPT

  • 7/27/2019 Active Directory Migration to 2008 R2

    1/59

    INDEX

    About Windows Server 2008 R2

    What's new in Windows Server 2008 R2?

    Windows Server 2008 R2 Editions & System Requirements

    Windows Server 2008 R2 Features Matrix

    Windows Server 2008 R2 Hardware Requirements

    Transitioning a Windows 2003 R2 Domain to Windows 2008 R2

    Prepare Active Directory environment

    Functional Levels

    Verification of Existing Active Directory

    Additional Domain Controller Installation & Configuration

    Transferring FSMO roles, IP Address and Global Catalog (GC)

    DHCP Server Migration

    Demoted the old Domain Controller

    Conclusion

  • 7/27/2019 Active Directory Migration to 2008 R2

    2/59

    About Windows Server 2008 R2:

    Windows Server 2008 R2 is the most advanced Windows Server operating system yet, designed

    to power the next generation of networks, applications, and web services. With this operating

    system you can develop, deliver, and manage rich user experiences and applications, provide a

    highly secure network infrastructure, and increase technological efficiency and value within

    your organization.

    Whats new in Windows Server 2008 R2?

    The Windows Server 2008 R2 operating system includes changes to earlier version of Windows

    Server features and technologies that help improve the security of computers running Windows

    Server 2008 R2, increase productivity, and reduce administrative overhead.

    The following changes and new features are available

    Active Directory Certificate Services

    Active Directory Domain Services

    AppLocker

    Biometrics

    Device Management and Installation

    Distributed File System

    DNS

    Failover Clusters

    File Server Resource Manager

    Group Policy

    Hyper-V (Virtualization)

    Microsoft iSCSI initiator

    Microsoft Multipath I/O

    Network Access Protection (NAP)

  • 7/27/2019 Active Directory Migration to 2008 R2

    3/59

    Network Policy Server(NPS)

    Networking

    Performance and Reliability Monitoring

    Print and Document Services

    Remote Desktop Services

    Server Core Installation Option

    Server Manager

    Service Accounts

    Services for NFS

    Smart Cards

    User Account Control

    Web Server (IIS) Role (IIS7)

    Windows Deployment

    Windows Deployment Services

    Windows PowerShell

    Windows PowerShell, Cmdlets for Roles and Features

    Windows Search, Browse, and Organization

    Windows Security Auditing

    Windows Server Backup

    Other changes

    Active Directory Rights Management Services

    Core services and fundamentals

    Windows Update Stand-alone installer

    TCP chimney

  • 7/27/2019 Active Directory Migration to 2008 R2

    4/59

    Background Intelligent Transfer Service (BITS)

    New server migration tools and migration guides

    Media Audio, Voice Encoder and Decoder.

    Windows Server 2008 R2 Editions & System Requirements:

    Before embarking on the installation of Windows Server 2008 R2, it is important to first gain an

    understanding of the different editions available and the corresponding hardware

    requirements. It is also important to be aware of the upgrade options available with each

    edition.

    1. Windows Server 2008 R2 Foundation Edition

    2. Windows Server 2008 R2 Standard Edition

    3. Windows Server 2008 R2 Enterprise Edition

    4. Windows Server 2008 R2 Datacenter Edition

    5. Windows Web Server 2008 R2

    Windows Server 2008 R2 Features Matrix

    I have mentioned the features matrix of Windows Server 2008 R2 editions as below

    Feature Enterprise Datacenter Standard Itanium Web Foundation

    Active

    Directory

    Certificate

    Services

    Yes Yes Limited No No Limited

    Active

    DirectoryDomain

    Services

    Yes Yes Yes No No Yes

    Active

    Directory

    Federation

    Services

    Yes Yes No No No No

  • 7/27/2019 Active Directory Migration to 2008 R2

    5/59

    Active

    Directory

    Lightweight

    Directory

    Services

    Yes Yes Yes No No Yes

    ActiveDirectory

    Rights

    Management

    Services

    Yes Yes Yes No No Yes

    Application

    ServerYes Yes Yes Yes No Yes

    DHCP Server Yes Yes Yes No No Yes

    DNS Server Yes Yes Yes No Yes Yes

    Fax Server Yes Yes Yes No No Yes

    File Services Yes Yes Limited No No Limited

    Hyper-V Yes Yes Yes No No No

    Network

    Policy and

    Access

    Services

    Yes Yes Limited No No Limited

    Print and

    Document

    Services

    Yes Yes Yes No No Yes

    Remote

    DesktopServices

    Yes Yes Limited No No Limited

    Web Services

    (IIS)Yes Yes Yes Yes Yes Yes

    Windows

    Deployment

    Services

    Yes Yes Yes No No Yes

    Windows

    Server Update

    Services

    (WSUS)

    Yes Yes Yes No No Yes

  • 7/27/2019 Active Directory Migration to 2008 R2

    6/59

    Windows Server 2008 R2 Hardware Requirements

    The following below details provides an overview of Microsofts recommended minimum

    hardware requirements.

    Category Minimum/Recommended Requirements

    Processor - Minimum: 1.4 GHz -x64 processor

    Recommended: 2GHz or faster

    Note: For Itanium based systems an Intel Itanium 2 processor is required.

    Memory - Minimum: 512 MB RAM

    Recommended: 2GB RAM or greater

    Disk Space - Minimum: 10GB

    Recommended: 40GB or greater

    Note: Systems with RAM in excess of 16GB will require greater amounts

    of disk space to accommodate paging, hibernation, and dump files.

    Drive - DVD-ROM drive

    Display &

    Peripherals - Super VGA or greater-resolution monitor (800x600)

    Keyboard

    Microsoft Mouse - Compatible pointing device.

    As with the specified system requirements for all Windows systems, it is best to aim for the

    recommended values rather than the Minimum values to ensure acceptable levels of

    performance.

  • 7/27/2019 Active Directory Migration to 2008 R2

    7/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    8/59

    Reason to transition

    I feel transitioning is the middle road between the two other ways to migrate to Windows

    Server 2008 R2:

    Restructuring means filling a new Active Directory from scratch In-place upgrading means you're stuck with the same hardware and limited to certain

    upgrade paths

    Transitioning means you get to keep your current Active Directory lay-out, contents,

    group policies and schema. Transitioning also means moving to new machines and this

    can be dimensioned to last another three to five years without trouble.

    Transitioning is good when:

    You worked hard to get your Active Directory in the shape it's in.

    Your servers are faced with aging.

    In-place upgrading leaves you with an undesired outcome

    (for instance Server Core or Enterprise Domain Controllers)

    You need a chance to place your Active Directory files on different partitions/volumes.

    Steps to transition

    Transitioning to Windows Server 2008 R2 Domain Controllers consists of the following steps:

    Before begin we must consider the below points

    Avoid common mistakes Plan your server lifecycle

    Access your readiness

    Map out your 64bit transition

    Review the considerations for upgrading

    Backups

    Documentation

    Communication

  • 7/27/2019 Active Directory Migration to 2008 R2

    9/59

    Prepare Active Directory environment

    Before you can begin the addition of Windows Server 2008 R2 into your existing 2003 (R2)

    Active Directory environment, first have to prepare the Active Directory.

    Microsoft provides two tools to facilitate this preparation. Depending on your current ActiveDirectory environment you need to use either one of them.

    adprep.exe Use adprep.exe to prepare your Active Directory environment for Windows

    Server 2008 R2 on 64bit (x64) Domain Controllers.

    adprep32.exe Use adprep.exe to prepare your Active Directory environment for Windows

    Server 2008 R2 on 32bit (x86) Domain Controllers.

    You need to run the following commands on the following Domain Controllers in your current

    Active Directory environment:

    Command Domain Controller

    1. Adprep.exe /forestprep Schema Master

    Adprep32.exe /forestprep

    2. Adprep.exe /domainprep Infrastructure Master

    Adprep32.exe /domainprep

    3. Adprep.exe /domainprep /gpprep Infrastructure Master

    Adprep32.exe /domainprep /gpprep

    After preparing your Active Directory for Windows Server 2008 R2 be sure to check the process

    adprep.log file. Allow sufficient time for proper replication to all Domain controllers and

    confirm the all of your Domain controllers report Schema version 47.

  • 7/27/2019 Active Directory Migration to 2008 R2

    10/59

    Type C and Enter

  • 7/27/2019 Active Directory Migration to 2008 R2

    11/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    12/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    13/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    14/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    15/59

    Verification of Active Directory preparation by using ADSIEDIT.MSC

  • 7/27/2019 Active Directory Migration to 2008 R2

    16/59

    Schema Version is 47

    Domain Preparation needs to be done in Child domain (Fis.fichtner.local)

  • 7/27/2019 Active Directory Migration to 2008 R2

    17/59

    Functional Levels

    Raised the Domain functional level to Windows Server 2003 in Fis.fichtner.local domain

  • 7/27/2019 Active Directory Migration to 2008 R2

    18/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    19/59

    Raised domain functional level - Windows Server 2003

  • 7/27/2019 Active Directory Migration to 2008 R2

    20/59

    Raised the Forest Functional level to Windows Server 2003

  • 7/27/2019 Active Directory Migration to 2008 R2

    21/59

    Verification of Existing Active Directory

  • 7/27/2019 Active Directory Migration to 2008 R2

    22/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    23/59

    Additional Domain Controller Installation:

    Once completed the Windows Server 2008 R2 OS installation, we have verified the following

    details as mentioned below

    1. Windows Server 2008 R2 with latest Service Pack2. Windows Server 2008 R2 OS latest updates.

    3. Domain membership

    4. Host name and IP address configuration.

    Added the IP configuration as mentioned below

  • 7/27/2019 Active Directory Migration to 2008 R2

    24/59

    Verified the Host name and IP address details in Server 2008 R2

  • 7/27/2019 Active Directory Migration to 2008 R2

    25/59

    Open the Server Manager in Server 2008 R2 and added the Active Directory Domain Service

    role as refer below screenshots.

  • 7/27/2019 Active Directory Migration to 2008 R2

    26/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    27/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    28/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    29/59

    Promoted the server as an additional domain controller by dcpromo

  • 7/27/2019 Active Directory Migration to 2008 R2

    30/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    31/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    32/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    33/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    34/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    35/59

    DSRM Password - P@ssw0rd

  • 7/27/2019 Active Directory Migration to 2008 R2

    36/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    37/59

    Restarted the server once completion of Active Directory configuration. Configured the DNS

    with Active Directory integrated zone and verified the DNS.

  • 7/27/2019 Active Directory Migration to 2008 R2

    38/59

    Transferring FSMO roles and Global Catalog (GC)

    We have promoted the Server 2008 R2 as a Primary Domain Controller and Global catalog for

    domain Fichtner. Local

  • 7/27/2019 Active Directory Migration to 2008 R2

    39/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    40/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    41/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    42/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    43/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    44/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    45/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    46/59

    Verified the server 2008 r2 has FSMO roles and GC and changed IP address 172.16.1.1 to new

    DC (2008 R2).

    Restart the all domain controllers one by one.

  • 7/27/2019 Active Directory Migration to 2008 R2

    47/59

    DHCP Server

    Migrated the DHCP Server from 2003 R2 to 2008 R2 domain controller as below details

    1. Taken the DHCP server 2003 R2 backup and moved it into centralized location.

    2. Stop the DHCP server service in Server 2003 R2.3. Installed and configured the DHCP server role in Windows Server 2008 R2

    4. Unauthorized the DHCP scope in Server 2008 R2

    5. Imported the 2003 R2 DHCP backup into Server 2008 R2.

    6. Start the DHCP server service in Server 2008 R2

    7. Verified everything is working fine.

  • 7/27/2019 Active Directory Migration to 2008 R2

    48/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    49/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    50/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    51/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    52/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    53/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    54/59

    Verified the clients IP address has assigned from DHCP server which have hosted in Server 2008R2.

  • 7/27/2019 Active Directory Migration to 2008 R2

    55/59

    Demoted the old Domain Controller

    This is last step after upgrade Windows Server 2008 R2 Active Directory environment, Demote

    the old Active Directory 2003 R2 server.

    To demote the older DC please refer the below screenshots.

  • 7/27/2019 Active Directory Migration to 2008 R2

    56/59

  • 7/27/2019 Active Directory Migration to 2008 R2

    57/59

    New login Password is P@ssw0rd

  • 7/27/2019 Active Directory Migration to 2008 R2

    58/59

    Restart the server once the removed process has done.

  • 7/27/2019 Active Directory Migration to 2008 R2

    59/59

    Conclusion:

    Finally, we have upgraded your Active Directory environment to Windows Server 2008 R2

    Standard. We have verified the Active Directory, DNS, DHCP and replication between all domain

    controllers without any issue.

    S.N Host Name IP Address Description

    1 FI-SERVER10 172.16.1.1 Primary DC, DNS, DHCP, FSMO & GC.

    2 FI-SERVER07 172.16.1.17 Backup DC, DNS