Re: I need some expert advice regarding an upgrade



If the computer you're upgrading is a domain controller and you plan on
keeping it a domain controller, you'll need to do a bit of work on the other
Windows 2000 DCs in order to get them to accept a W2K3 server as a DC
(adprep, forestprep), or upgrade them all. If this is just a file server and
will be a member server in your domain - assuming all permissions are set at
the domain level - all of the ntfs security on your data partition should
still be intact. You'll need to re-share under the new OS after joining the
domain and assign share permissions if they differ from what is inherited
from the top share level. In most cases, share permissions are
"everyone-full control" anyway in windows 2000, and access is controlled at
the NTFS level (That's the Windows way in W2K). The default share
permissions in W2K3 are "Everyone-Read", so you will have to change them on
shares where users need to write. Obviously, you'll need to be sure that any
of the FSMO roles this DC has are transferred to another DC prior to taking
it down. You can just go to computer management, expand the shares entry and
take a screenshot for a quick list of what needs to be re-shared.

....kurt

<Fran> wrote in message news:g24102p3s9n9kfmom3fcj90l68vte60fb4@xxxxxxxxxx
Thanks, Bob. I'm not sure NTBackup is what I need though. What would I
backup? I don't need to backup the OS or files as I'm wiping the
system of Win2k (and all the data in all the shares are on other
drives/partitions). All I need is the shares and security permissions.
The AD is on several DC's so that's in good shape.

-Fran-

In article <10ivv1d7hlgc9k2dbmir9isaqnja236ohb@xxxxxxx>, Fran <> says...
We're upgrading a Windows 2000 server to Windows Server 2003. Because
of some OS problems on the 2000 server I want to completely reformat
the drive (the OS is on C: and is the only thing installed there) and
do a clean install of the OS. However, as you can imagine there are
shares and security items I would like to NOT have to manually
recreate...so...

Is there a way I can backup or save (or something) the information
regarding shares and other security items (other than AD...I have a
second DC) on this server so after installing Win 2k3 I can restore
these security settings?

Any thoughts are welcomed.

-Fran-


ntbackup, the built in backup program can save the existing security
rights as it backs up the data to a file or tape drive. I did see a
reference to a registry key you can export and re-import to keep the
shares but with both of these mothods not sure once up to 2003 if either
would be compatible and I cant remember the detail of which key.

i would like to assume 2003 ntbackup can read 2000's backups but would
prefer to confirm that for sure before doing it.


.



Relevant Pages

  • [Full-Disclosure] RE: mi2g - fud, lies and libel
    ... Internet where system administrators and Independent Third Party Security ... **About 1 in 10 potential vulnerabilities that were submitted to PivX ... the Company granted 232,500 shares of Company's common stock. ...
    (Full-Disclosure)
  • Re: Site or Domain
    ... Domain aren't security Boundaries, ... forest, and they are not themselves the ultimate security boundary. ... Each Active Directory domain is authoritative for the ... Domain controller hardware and security facilities Each Windows Server ...
    (microsoft.public.windows.server.active_directory)
  • Re: SBS 2003 and TS-App Mode
    ... It's not secure... ... functionality over security and now you want functionality back. ... open and easy to use...they want TS on a domain controller back. ... Do not enable application server mode on a domain controllers. ...
    (microsoft.public.windows.server.sbs)
  • RE: Share Point?
    ... make it on a domain controller. ... I'm not sure about sharepoint server, ... Has anyone here tested Share Point's security? ... INCLUSIVE curriculum utilizes lectures, ...
    (Focus-Microsoft)
  • Re: Windows domain user is sometimes denied access to server share
    ... I would also check the server with the share security log ... He can access the shares that do not have security on them OK, ... with windows user and or windows group accounts. ...
    (microsoft.public.windows.server.security)