Upgrading Windows NT 4.0 domain to Windows 2008 domain

Migration for NT 4.0 Domain to Windows Server 2008 Domain
Upgrading WinNT 4.0 domain to Windows 2008 domain
How to upgrade WINNT 4.0 domain to Windows 2008 domain.


We cannot directly upgrade Windows NT4.0 domain to Windows Server 2008 domain.

In order to smoothly upgrade the domain, here are two recommended upgrade
routes for your reference.

Route 1.

A. Upgrade Windows NT 4.0-Based PDC to Windows Server 2003-Based domain
controller.

For more detail steps, please refer to:

How To Upgrade a Windows NT 4.0-Based PDC to a Windows Server 2003-Based
Domain Controller
http://support.microsoft.com/kb/326209

Moving from Windows NT 4.0 Server to Windows Server 2003
http://download.microsoft.com/download/2/c/3/2c3cc747-a843-4a23-b665-8bd62fa
bbc1e/How-to-Migrate-from-NT-to-WS2003.pdf

B. Then upgrade Windows Server 2003 based domain to Windows Server 2008
domain.

For more detail steps, please refer to:

Upgrading Active Directory Domains to Windows Server 2008 AD DS Domains
http://technet2.microsoft.com/windowsserver2008/en/library/9c91be5f-df14-40b
2-b176-2b1852a51e611033.mspx?mfr=true

Route 2.

We may also use ADMT 3.1 to migrate from Windows NT 4.0 source domain to
Windows Server 2008 domain.

Since ADMT 3.1 Beta has been available for public evaluation. If you are
interested, please refer to the steps provided in the following below link
to apply for ADMT 3.1 Beta.

ADMT 3.1 Beta
http://blogs.technet.com/ad/archive/2008/04/22/admt-3-1-beta.aspx

Upgrading Windows 2003 Active Directory Domain Services to Windows 2012 Active Directory Domain Services

"Can we upgrade of Windows 2003 Active Directory directly into Windows 2012 Active Directory?".  Remember we are not talking about upgrading the OS from Windows 2003 to Windows 2012, we are talking about upgrading Active Directory. 

The two answers to this question are given below. 

A) The answer is NO if you are planning to insert Windows 2012 OS CD into Windows 2003 DC and upgrade it to a Windows 2012 DC. This'll not work. Please read the excerpt from Microsoft Technet which is given below. 

'You cannot upgrade domain controllers that run Windows Server 2003. To replace them, install domain controllers that run Windows Server 2012 in the domain, and then remove the domain controllers that are Windows Server 2003.'

B) The answer is YES if you use the method mentioned below. It'll help you avoid first upgrading Windows 2003 AD to Windows 2008 AD and then into Windows 2012 AD. The steps mentioned here have been tested in the LAB and have helped us to move from Windows 2003 AD to Windows 2012 AD. The default AD functional levels i.e. Forest Functional level and Domain functional level were found to be, "Windows 2008" though. If needed this can be raised to Windows 2012 and this is an irreversible change.

Steps to upgrade Windows 2003 Active Directory to Windows 2012 Active Directory. 

1. Install one or more Windows 2012 Servers in your existing Windows 2003 AD domain. 
2. Make it a member server of the domain. 
3. Please ensure that your domain functional level and forest functional level are raised to Windows 2003 native mode. Please do take all the precautions before making this irreversible change. Once done please log on to newly Windows 2012 server. 
4. Browse the OS CD\DVD\ISO and go into the Support Tools --> ADPREP folder. 
5. Open Command Prompt and change the directory to the location of ADPREP folder. 
6. Run the commands adprep /forestprep followed by adprep /domainprep and adprep /gpprep. This prepares your Windows 2003 AD forest and domain for Windows 2012 AD. 
7. Add the Active Directory role into the Windows 2012 member server. 
8. Install Active directory and its dependencies. 
9. Allow the replication to complete. Verify the same before proceeding to next step. 
10. Transfer the Active directory FSMO roles on Windows 2003 domain controllers to Windows 2012 domain controllers. To take the necessary precautions before doing the same and ensure that the roles are transferred based on the best practices recommendations of Microsoft. 
11. Once you are sure that all the AD FSMO roles has been transferred to a Windows  2012 DC or domain controllers follow the next step. 
12. You can go ahead and demote the Windows 2003 DC gracefully by running DCPROMO on them. Don't forget to un-check the check box described as, "This is the last domain controller on the domain".  

Please do take all the precautions like studying your environment and working of dependent applications followed by rigorous tests in your lab before taking up such upgrades in production environment.

Read More

Active Directory Inside Out 10 Hrs of CBT

TechNet Webcast: Active Directory Fundamentals—Level 200

Event Overview

Do you want to get a better understanding of the basic concepts of Microsoft® Active Directory®? Join us for this informative session as we explain the logical concepts as they relate to Domain, Trees and Forests and the physical concepts of Domain Controllers and Sites. You will also come away with a better understanding of the relationship between the Active Directory and the Domain Name System (DNS), and why it is important to you. The presentation concludes with an examination of the operation functions such as Replication -- both Inter-site and Intra-Site -- and the Active Directory Operations.

http://msevents.microsoft.com/CUI/WebCastEventDetails.aspx?EventID=1032264002&EventCategory=5&culture=en-US&CountryCode=US

TechNet Webcast: Active Directory Inside Out (Part 1 of 11)—Active Directory Logical Concepts—Level 200

In this first webcast in the series we will define Active Directory structures, highlighting domains, trees, forests, organizational units and their relationships to each other. The demonstration will introduce the Active Directory management tools and their use.

http://msevents.microsoft.com/CUI/WebCastEventDetails.aspx?culture=en-US&EventID=1032316691

TechNet Webcast: TechNet Webcast: Active Directory Inside Out (Part 2 of 11)—Active Directory Physical Concepts—Level 200

In this second session in the series, we will define the physical components of a typical Active Directory structure and the role played by each, covering the domain controller, sites, and global catalog servers. We will discuss recommendations and considerations for the placement and number of these servers and for defining sites within the context of branch office and enterprise environments. In the demonstration we will create a site, define and configure a global catalog server and choose object attributes to replicate to the global catalog.

http://msevents.microsoft.com/CUI/WebCastEventDetails.aspx?culture=en-US&EventID=1032316700

TechNet Webcast: Active Directory Inside Out (Part 3 of 11)—Active Directory Replication and the Operations Masters Role—Level 200

In this session we will highlight replication, exploring the distinctions between replication within site boundaries versus replication between sites and how replication has been improved in Active Directory 2003. We will also define the operations master roles and the part they play in supporting network clients and ensuring integrity in replication, including a demonstration of replication in action.

http://msevents.microsoft.com/cui/WebCastEventDetails.aspx?culture=en-US&EventID=1032259125&CountryCode=US

TechNet Webcast: Active Directory Inside Out (Part 4 of 11)—Installing and Managing DNS—Level 200

The availability of Active Directory services and authentication relies heavily on your DNS infrastructure. Join us for this two part in-depth examination of Active Directory and DNS dependencies. In part one, we will begin with an overview of the two services and their relationship, following a DNS query from request through resolution. We will then explore of key topics, such as what service records are and how they are used to locate Active Directory services, storing Active Directory integrated zone data in an application directory partition in 2003, stub zones and delegation of sub-domains. Demonstrations will show how to install DNS, manage resource records, delegate a sub-domain and secure the DNS infrastructure.

http://msevents.microsoft.com/CUI/WebCastEventDetails.aspx?EventID=1032259127&EventCategory=5&culture=en-US&CountryCode=US

TechNet Webcast: Active Directory Inside Out (Part 5 of 11)—DNS Features and Configuration—Level 200

In this conclusion of our two part in-depth examination of Active Directory and DNS dependencies, we will cover dynamic updates, zone transfers, root hints and configuring forwarders. Our demonstration will illustrate the properties of DNS servers, aging and scavenging and the record structure of an Active Directory zone.

http://msevents.microsoft.com/cui/WebCastEventDetails.aspx?culture=en-US&EventID=1032259129&CountryCode=US

TechNet Webcast: Active Directory Inside Out (Part 6 of 11)—Interoperability and Migration from Novell Directory Services—Level 200

What features are available in Active Directory to facilitate interoperability with or your migration from Novell Directory services? Join us for a two-part look at the tools you need - Directory Synchronization Services, the File Migration Utility, File and Print Services for NetWare®, directory synchronization details, and the use of the Microsoft Identity Integration Server as a solution to synchronization. Demonstrations will include installation of Microsoft Windows Services for NetWare, and how to configure and force synchronization.

http://msevents.microsoft.com/cui/WebCastEventDetails.aspx?culture=en-US&EventID=1032259123&CountryCode=US

TechNet Webcast: Active Directory Inside Out (Part 7 of 11)—Migrating File Resources from NetWare to Active Directory 2003—Level 200

In the second part of our two-part examination of Active Directory with Novell, we will demonstrate effective use of the File Migration Utility, and offer techniques for troubleshooting Services for NetWare involving Network Monitor, IPX routing, and general network and router configuration.

http://msevents.microsoft.com/cui/WebCastEventDetails.aspx?culture=en-US&EventID=1032259131&CountryCode=US

TechNet Webcast: Active Directory Inside Out (Part 8 of 11)—Deployment and Interoperability with NT 4.0 and Windows 2000—Level 200

What are domain and forest functional levels and how would raising those levels to Active Directory 2003 impact your Windows NT® or Windows 2000 network? This webcast highlights these topics, describing how to perform a typical domain and domain controller rename and restructure. We will also offer suggestions on the effective us of the Active Directory Migration Tool Version 2. In the demonstrations we’ll walk you through the steps needed to raise your domain and forest functional levels, and show you how to create a domain controller from backup media.

http://msevents.microsoft.com/cui/WebCastEventDetails.aspx?culture=en-US&EventID=1032259133&CountryCode=US

TechNet Webcast: Active Directory Inside Out (Part 09 of 11)—Group Policy Management Console and Software Restriction—Level 200

Event Overview

Because Active Directory® plays such a pivotal role in Windows® network architecture, a thorough knowledge of this service is essential for IT administrators. Each session in this eleven-part webcast series offers a thorough, focused perspective on key aspects of Active Directory 2003, giving you what you need to get the most out of Active Directory.

In Active Directory 2003, new functionality has been added to ease administration of Active Directory. Join this webcast as we demonstrate how drag and drop functionality, saved queries and the command line utilities for scripting and automating the creation of Active Directory Objects makes the Active Directory administrator's life significantly easier!

http://msevents.microsoft.com/cui/WebCastEventDetails.aspx?culture=en-US&EventID=1032259135&CountryCode=US

TechNet Webcast: Active Directory Inside Out (Part 10 of 11)—Replication Features and Forest to Forest Trusts—Level 200

This webcast focuses on the global catalog in Active Directory 2003, including an in-depth exploration of global catalog replication. We will also discuss and demonstrate the advantages of universal group membership caching as an alternative to global catalog placement in branch offices and forest-to-forest trusts.

http://msevents.microsoft.com/cui/WebCastEventDetails.aspx?culture=en-US&EventID=1032259137&CountryCode=US

TechNet Webcast: Active Directory Inside Out (Part 11 of 11)—Group Policy Management Console and Software Restriction—Level 200

In this final webcast in the series, we will show how Active Directory 2003 simplifies group policy management with the Group Policy Management Console and demonstrate how to apply the new software restriction policies.

http://msevents.microsoft.com/cui/WebCastEventDetails.aspx?culture=en-US&EventID=1032259139&CountryCode=US

Read More