Chinaunix首页 | 论坛 | 博客
  • 博客访问: 786505
  • 博文数量: 156
  • 博客积分: 5320
  • 博客等级: 大校
  • 技术积分: 1605
  • 用 户 组: 普通用户
  • 注册时间: 2004-10-09 12:24
文章分类

全部博文(156)

文章存档

2010年(20)

2009年(46)

2008年(21)

2007年(21)

2006年(33)

2005年(10)

2004年(5)

分类: WINDOWS

2009-07-21 11:41:20

Migrating Win 2000 to Win2003

Part 1:AD Migrating

Updated:Jul-20-2009

Leo Li

1.       Make sure the win2000 domain control running is normal and already installed the newest service packs.

2.       Make sure the win2000 AD 5 FSMO in the first domain control(we need migration this FSMO to win2003).

3.       Insert the win2003 setup CD to win2000 first domain control.In the command line,go to CD folder \I386,run: adprep /forestprep,after successful then run:adprep /domainprep

Type C then Enter

NOTE:need run "adprep.exe /domainprep /gpprep" 

4.       Install the win2003 sp2 to new hareware and install the newest service packs.

5.       Make sure the new pc win2003 can access the network and fill the right DNS server,can connect to 2000 domain.

6.       Install the DNS service in win2003

7.       Running the command :dcpromo in win2003,upgrade the win2003 as the 2000 additional domain control.

8.       Make sure the DNS synchronization completed then change the win2003 DNS IP as self.

9.       Change the win2003 as the “Glocal Catalog” server

10.   Move FSMO role to win2003

11.   Downgrade the win2000

12.   AD migration completed.

13.   END

 

 

 

problem 1(11/Dec/1009):
error msg when upgrade 2003 as the AD:
1.the version of the active directory schema of the source forest is not compatible with the version of active directory on this computer.
 
solve: use adprep.exe R2 version to update the 2000 server.it be in "disk2\cmpnents\r2\adprep\"
check the schema version:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Parameters
 
  • 13=Microsoft Windows 2000
  • 30=Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1 (SP1)
  • 31=Microsoft Windows Server 2003 R2
  •  
     
    ADSI EDIT tools in Windows 2000 support tools
    copy "adsiedit.msc" and "adsiedit.dll" to windows 2000 server "system32\"
    then run "regsvr32 adsiedit.dll"
     
    use adsiedit.msc to check the AD if is completed.
     
     
    problem 2(8/Apr/2010):adprep /forestprep There is a schema conflict with Exchange 2000
    "Adprep was unable to extend the schema.
    [Status/Consequence]
    There is a schema conflict with Exchange 2000. The schema is not updated.
    [User Action]
    The schema conflict must be resolved before running adprep. Resolve the schema conflict, allow the change to replicate between all replication partners, and then run Adprep. For information on resolving the conflict, see Microsoft Knowledge
    Base article Q325379."

    **************************************************************************************
    solve:
    Microsoft Article ID : 314649

    Scenario 2: Exchange 2000 Schema Changes Are Installed Before You Run the Windows Server 2003 adprep /forestprep Command
    If Exchange 2000 schema changes have already been installed, but you have not run the adprep /forestprep command in Windows Server 2003, consider the following action plan: 1. Log on to the console of the schema operations master by using an account that is a member of the schema administrators enterprise administrators groups.  
    2. Enable Schema Updates on the schema master. For additional information about how to permit updates to the Active Directory schema, click the following article number to view the article in the Microsoft Knowledge Base:
    285172 (
    ) Schema Updates Require Write Access to Schema in Active Directory  
    3. Click Start, click Run, type notepad.exe, and then click OK.
    4. Copy the following text that appears between [start copy here] and [end copy here] (including the trailing "-" characters), and then paste this text into Notepad.

    [start copy here]
    dn: CN=ms-Exch-Assistant-Name,CN=Schema,CN=Configuration,DC=X
    changetype: Modify
    replace: lDAPDisplayName
    lDAPDisplayName: msExchAssistantName
    -

    dn: CN=ms-Exch-LabeledURI,CN=Schema,CN=Configuration,DC=X
    changetype: Modify
    replace: lDAPDisplayName
    lDAPDisplayName: msExchLabeledURI
    -

    dn: CN=ms-Exch-House-Identifier,CN=Schema,CN=Configuration,DC=X
    changetype: Modify
    replace: lDAPDisplayName
    lDAPDisplayName: msExchHouseIdentifier
    -

    dn:
    changetype: Modify
    add: schemaUpdateNow
    schemaUpdateNow: 1
    -
    [end copy here]
    5. Save the contents of the Notepad file as %systemdrive%\IOP\Inetorgpersonprevent.ldf (where %systemdrive% is the logical drive that is hosting the Windows 2000 operating system and \IOP is a folder that you create in the Save dialog box of Notepad. Quit Notepad.
    6. Run the InetOrgPersonPrevent.ldf script: a.  Click Start, click Run, type cmd, and then click OK.
    b.  At a command prompt, type :
    cd %systemdrive%\iop
    and then press ENTER.
    c.  Type the following command:
    ldifde -i -f inetorgpersonprevent.ldf -v -c DC=X "dn path for forest root domain"
    where X is a case-sensitive constant and dn path for forest root domain is the domain name path for the root domain of the forest enclosed in quotation marks ("dc=corp,dc=tailspintoys,dc=com") is the domain name path for the root domain of the forest. (Include the quotation marks.) Press ENTER.
     
    7. Verify that the LDAPDisplaynames for the CN=ms-Exch-Assistant-Name, the CN=ms-Exch-LabeledURI, and the CN=ms-Exch-House-Identifier attributes in the schema naming context now appear as msExchAssistantName, msExchLabeledURI, and msExchHouseIdentifier before you run the Windows Server 2003 adprep /forestprep command.
    8. Run the adprep /forestprep command and the /domainprep command.

    For more information, view the "Overview: Upgrading Windows 2000 Domain Controllers to Windows Server2003" section of the following Microsoft Knowledge Base article:
    325379 (
    ) How to Upgrade Windows 2000 Domain Controllers to Windows Server 2003  
    **************************************************************************
    阅读(1189) | 评论(2) | 转发(0) |
    给主人留下些什么吧!~~

    chinaunix网友2009-11-17 14:03:09

    转移架构主机角色 使用“Active Directory 架构主机”管理单元可以转移架构主机角色。您必须首先注册 Schmmgmt.dll 文件,然后才能使用此管理单元。 注册 Schmmgmt.dll 单击开始,然后单击运行。 在打开框中,键入 regsvr32 schmmgmt.dll,然后单击确定。 收到操作成功的消息时,单击确定。 转移架构主机角色 依次单击开始和运行,在打开框中键入 mmc,然后单击确定。 在文件菜单上,单击“添加/删除管理单元”。 单击添加。 依次单击 Active Directory 架构、添加、关闭和确定。 在控制台树中,右键单击 Active Directory 架构,然后单击更改域控制器。 单击指定名称,键入将成为新角色持有者的域控制器名称,然后单击确定。 在控制台树中,右键单击 Active Directory 架构,然后单击操作主机。 单击更改。 单击确定以确认您要转移该角色,然后单击关闭。 回到顶端 转移域命名主机角色 单击开始,指向管理工具,然后单击“Active Directory 域和信任关

    chinaunix网友2009-11-17 14:02:00

    若要升级域控制器为全局编录服务器,请按照下列步骤操作: 域控制器上单击 开始、 指向 程序、 管理工具,然后单击 Active Directory 站点和服务。 在控制台树中双击 站点,双击该站点的名称,然后双击 服务器。 双击目标域控制器。 在详细信息窗格中右键单击 NTDS 设置,然后单击 属性。 在 常规 选项卡上单击以选中 全局编录 复选框。 閲嶆柊鍚姩鍩熸帶鍒跺櫒。 升级域控制器为全局编录服务器需要花费很长时间。 当域控制器重新启动时,请确保有充足的时间,为该帐户和架构信息之前从原始域控制器中删除原始的全局编录复制到新的全局编录服务器。 注意 当该帐户和架构信息复制到新的全局编录服务器时,可能会在域控制器上的目录服务日志中记录事件 1119年。 事件描述指出计算机现在正在将自身公布为全局编录服务器。 只有一个域控制器与一个 Windows 2000 域中通常将操作主机 (也称为灵活的单主机操作或 FSMO) 和全局编录的角色分配给相同的域控制器中。 然而,在具有多个域控制器的域中考虑这些角色的位置之前将它们分配。 这一点尤为重要林中的多个域。 有关