Tech Info's

Microsoft Windows, RedHat and VMware Virtualization Platform

Schema Upgrade from Windows Server 2003 to Windows Server 2008 R2 Testing Plan in ISONet Network

Posted by Prashanth P on October 19, 2011


Schema Upgrade from Windows Server 2003 to Windows Server 2008 R2 for Testing purpose in ISONet Network. Here we are only performing Schema Preparation, Domain Preparation and Group Policy Preparation for Windows Server 2008 R2 (Read Only Domain controller Preparation will be done later during the Upgrade to Windows Server 2008 R2).

Requirements

1. Replica of the Active Directory Forest in ISONet Network.  

2. If you have multiple Domains in the Forest, we need at least one Domain Controller from each Domain in ISONet Network (better if we have 2 Domain Controllers from Root of the Forest). 

3. Full Successful Tested Backup of Active Directory Forest with all the Domains.  

4. Windows Server 2008 R2 Media (ADPREP.exe from Windows Server 2008 R2).  

5. Windows Server 2003 Support Tools for testing the Schema preparation, Domain preparation and Group Policy preparation.  

6. If the Domain Controller is Windows Server 2000 then it should have SP4 Installed.  

7. We can prepare the Schema using ADPREP.exe (for Domain Controllers with 64 bit) or ADPREP32.exe(for Domain Controllers with 32 bit), but Windows Server 2008 R2 is one support x64 base platform.  

8. Domain Functional Level should be Windows 2000 Native or Higher for preparing the Domain using ADPREP.exe and Windows Server 2003 or Higher Forest Functional Level for Promoting RODC.  

9. Credentials to be set proper for executing ADPREP.exe as per the table below.

Adprep.exe command Credentials that are required to run the command
adprep /forestprep
  • Schema Admins 
  • Enterprise Admins 
  • Domain Admins of the domain that hosts the schema master
adprep /domainprep Domain Admins
adprep /domainprep /gpprep Domain Admins
adprep /rodcprep Enterprise Admins

  10. ADPREP.exe execution order as per the table below.

Command Domain controller Number of times to run the command
adprep /forestprep Must be run on the schema operations master for the forest. Once for the entire forest
adprep /domainprep Must be run on the infrastructure operations master for the domain. Once in each domain where you plan to install an additional domain controller that runs a later version of Windows Server than the latest version that is running in the domain.
adprep /domainprep /gpprep Must be run on the infrastructure operations master for the domain. If you already ran the /gpprep parameter for Windows Server 2003, you do not have to run it again for Windows Server 2008 or Windows Server 2008 R2. Once in each domain within the forest
adprep /rodcprep Can be run from any computer. This command performs operations remotely. For the operations to complete successfully, the domain naming operations master for the forest and the infrastructure operations master for each application directory partition and each domain partition must be accessible. If you already ran this command for Windows Server 2008, you do not have to run it again for Windows Server 2008 R2. Once for the entire forest

 

 Plan for Schema Upgrade

1. Forest Replica to be ready with at least two Domain Controllers from Root of the Forest and one Domain Controller from each Domain.  

2. Assigning the FSMO Roles properly to the Domain Controllers in each Domain (Forest wide roles on one Domain Controller and Domain wide roles on one Domain Controller in Root of the Forest). 

Using Ntdsuitl.exe, DSA.msc, Domain.msc and Active Directory Schema MMC.  

3. Verifying the Forest and Domain Functional Levels. 

Using Domain.msc or Replmon.exe  

4. Verifying the FSMO Roles for the Domain Controllers. 

Using command “Netdom query fsmo” or Replmon.exe  

5. Backing up Active Directory  

Using Ntbackup or Third party backup tools. 

6. Checking the entire Forest Replication Status  

Using Repadmin.exe or Replmon.exe  

7. Running ADPREP /Forestprep 

a. Now we are ready to prepare your forest. This procedure takes a while depending on the speed of your computer so do not interrupt it. Insert your Windows Server 2008 DVD into the DVD drive on the schema master.   

b. Open a command prompt.   

c. Change your drive letter to the DVD drive. If you do not have a DVD drive on your schema master you can copy the Sources\Adprep folder to your local drive and run it from the copy.   

d. Change into the Sources\Adprep directory.   

e. Run ADPREP /forestprep.  

f. You will get a warning that you need to be running Windows 2000 SP4 or later.   

g. Type C and press Enter.   

h. You will see a series of updates from LDF files.   

i. If all goes well, you will see ADPREP successfully updated the forest-wide information. 

8. Verifying that adprep /forestprep completed successfully

When the adprep /forestprep command completes, a message appears in the Command Prompt window to indicate that Adprep has successfully updated the forest-wide information. We can also use the following procedure to verify that adprep /forestprep completed successfully.

To verify that adprep /forestprep completed successfully  

a. Log on to an administrative workstation that has ADSIEdit installed.  

b. Click Start, click Run, type ADSIEdit.msc, and then click OK.   

c. Click Action, and then click Connect to.  

d. Click Select a well known Naming Context, select Configuration in the list of available naming contexts, and then click OK.  

e. Double-click Configuration, and then double-click CN=Configuration,DC=forest_root_domain 

Where forest_root_domain is the distinguished name of your forest root domain. 

f. Double-click CN=ForestUpdates. 

g. Right-click CN=ActiveDirectoryUpdate, and then click Properties.  

h. Adprep /forestprep for Windows Server 2008 R2, confirm that the Revision attribute value is 5, and then click OK. 

i. Click ADSI Edit, click Action, and then click Connect to. 

j. Click Select a Well known naming context, select Schema in the list of available naming contexts, and then click OK.  

 k. Double-click Schema.  

l. Right-click CN=Schema,CN=Configuration,DC=forest_root_domain, and then click Properties 

where forest_root_domain is the distinguished name of your forest root domain. 

m. Adprep /forestprep for Windows Server 2008 R2, confirm that the objectVersion attribute value is set to 47, and then click OK. 

9. Running ADPREP /domainprep /gpprep 

a. Insert the Windows Server 2008 DVD.  

b. Open a command prompt.   

c. Change your drive letter to the DVD drive. 

d. Change your directory to Sources\Adprep.   

e. Run ADPREP /domainprep /gpprep.   

10. Verifying adprep /domainprep /gpprep  

When we run adprep /domainprep /gpprep we see a message that indicates that adprep /domainprep successfully updated the domain-wide information, followed by a message that indicates that Adprep successfully updated the GPO information.  

To verify that adprep /domainprep completed successfully  

a. Log on to an administrative workstation that has ADSIEdit installed.   

b. Click Start, click Run, type ADSIEdit.msc, and then click OK.   

c. Click Action, and then click Connect to.  

d. Click Select a well known Naming Context, select Default naming context in the list of available naming contexts, and then click OK. 

e. Double-click Default naming context, double-click the container that is the distinguished name of the domain, and then double-click CN=System.

f. Double-click CN=DomainUpdates, right-click CN=ActiveDirectoryUpdate, and then click Properties. 

g. If you ran adprep /domainprep for Windows Server 2008 R2, confirm that the Revision attribute value is 5, and then click OK. 

To verify that adprep /gpprep completed successfully  

We can verify that the operation added the Read permission for the Enterprise Domain Controllers group on all GPOs.

Running adprep /rodcprep

Running the adprep /rodcprep command is optional. It is required only if you want to install an RODC in the forest. This command can be executed later once we deiced to go for RODC in the Forest/Domain and it requires Forest Functional Level to be Windows Server 2003 or Higher at the time of RODC promotion. This command updates the security descriptors for application directory partitions to give RODCs permission to replicate updates to the partitions. Each application directory partition has an infrastructure master. The adprep /rodcprep command must update the security descriptor for each application directory partition on the infrastructure master for that partition.

There are two application directory partitions that are created by default for Domain Name System (DNS) data: DomainDNSZones and ForestDNSZones. If the infrastructure master for either of these partitions is offline or if it has been forcefully removed from the forest, adprep /rodcprep fails with an error. In addition, this command must contact the domain naming operations master to obtain a list of the application and domain directory partitions that are in the forest. Therefore, the domain naming master must be accessible when you run this command.

Conclusion

Once Verifications are met as mentioned above in the Document “Plan for Schema Upgrade” Schema Upgrade is Successful. If errors we have to fine the Solutions to fix and repeat the Schema Upgrade Steps and Incase of Issue with Schema Upgrade we can also test for Roll back using the Backup.

Advertisements

22 Responses to “Schema Upgrade from Windows Server 2003 to Windows Server 2008 R2 Testing Plan in ISONet Network”

  1. […] https://prashanthpurushotham.wordpress.com/2011/10/19/schema-upgrade-from-windows-server-2003-to-wind…) […]

  2. I’d like to thank you for the efforts you’ve put in penning this
    website. I’m hoping to check out the same high-grade blog posts by you later on as well. In fact, your creative writing abilities has inspired me to get my very own site now 😉

  3. Tamela said

    Hello my friend! I wish to say that this post is awesome, great written
    and include almost all important infos. I would like to look extra posts like this .

  4. Brittney said

    Good write-up, I am normal visitor of one’s web site, maintain up the excellent operate,
    and It’s going to be a regular visitor for a long time.

  5. Roscoe said

    Excellent post. I used to be checking constantly this blog and I’m impressed! Extremely helpful information specifically the final phase 🙂 I maintain such info much. I was seeking this certain info for a very lengthy time. Thank you and good luck.

  6. hey there and thank you for your info – I’ve definitely picked up anything new from right here. I did however expertise some technical points using this site, since I experienced to reload the web site a lot of times previous to I could get it to load properly. I had been wondering if your web host is OK? Not that I’m complaining, but slow loading instances
    times will often affect your placement in google and could damage your
    high-quality score if ads and marketing with Adwords.

    Well I am adding this RSS to my email and could look
    out for much more of your respective fascinating content.
    Ensure that you update this again very soon.

  7. Howdy! Would you mind if I share your blog with my facebook group?
    There’s a lot of folks that I think would really appreciate your content. Please let me know. Cheers

  8. Thanks for one’s marvelous posting! I truly enjoyed reading it, you will be a great author.I will make certain to bookmark your blog and will often come back later in life. I want to encourage yourself to continue your great posts, have a nice evening!

  9. cars said

    Shopping for cars is generally a stressful experience.
    It does not have to be, though. With a little knowledge and determination, your car shopping experience can be
    devoid of stress. Use the tips that follow to make your
    car shopping experience one that you enjoy, with a shiny new car to show for it.

  10. cars said

    Have you had the experience of looking for a car only to end up feeling frustrated and overwhelmed by the process?
    It may be just be the case that you need some solid advice beforehand.
    The information included here can simplify the entire process of purchasing a car.

  11. I quite like reading through an article that can make men and women think.
    Also, thank you for allowing for me to comment!

  12. I’m not that much of a online reader to be
    honest but your blogs really nice, keep it
    up! I’ll go ahead and bookmark your site to come back down the road. Many thanks

  13. Jonas said

    Pretty nice post. I just stumbled upon your weblog and wanted
    to say that I have truly enjoged browsing your blog posts.

    In any case I will be subscribing to your rsss feed and I hope you write aggain soon!

  14. Reyna said

    An outstanding share! I’ve just forwarded this
    onto a friend who was conducting a little research on this.
    And he actually bought me lunch due to the fact that I discovered it for him…

    lol. So let me reword this…. Thanks for the meal!! But yeah, thanks
    for spending some time to discuss this matter here on your
    internet site.

  15. Kit said

    I’m amazed, I must say. Rarely do I encounter a blog that’s both equally educative
    and engaging, and without a doubt, you have hit the nail on the head.

    The issue is an issue that too few people are speaking intelligently about.
    I’m very happy that I came across this during my hunt for something relating to this.

  16. Hi there are using WordPress for your blog platform?
    I’m new to the blog world but I’m trying to get started and set up my own.
    Do you need any html coding expertise to make your own blog?
    Any help would be greatly appreciated!

  17. Unquestionably imagine that that you stated.

    Your favourite reason appeared to be at the internet the simplest thing to
    take note of. I say to you, I definitely get irked at the same
    time as folks think about concerns that they plainly don’t know
    about. You managed to hit the nail upon the highest and also defined
    out the whole thing with no need side-effects , other folks could
    take a signal. Will probably be again to get more.

    Thank you

  18. Arunkumar said

    Hi Prashant,

    Nice to see your blog here….

  19. I have fun with, result in I found exactly what I was looking for.

    You have ended my 4 day long hunt! God Bless you man. Have a nice day.

    Bye

  20. We absolutely love your blog and find many of your post’s to be precisely what I’m looking for.
    Would you offer guest writers to write content for you personally?
    I wouldn’t mind composing a post or elaborating on many
    of the subjects you write about here. Again, awesome website!

  21. Hi every one, here every one is sharing these experience,
    therefore it’s fastidious to read this web site, and I used to
    pay a quick visit this blog all the time.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: