Re: Backout Plan for Windows 2003 Domain Upgrade

Tech-Archive recommends: Fix windows errors by optimizing your registry




Great post.
DON'T USE IMAGES AS A BACKUP MECHANISM FOR DCs!!!!!!!!! NEVER, NEVER, NEVER
USE IMAGES FOR DCs!!!!

Any reason why?

Thanks.


"Jorge de Almeida Pinto [MVP]" wrote:

DON'T USE IMAGES AS A BACKUP MECHANISM FOR DCs!!!!!!!!! NEVER, NEVER, NEVER
USE IMAGES FOR DCs!!!!

The best and easiest way is to disable replication on the schema master

repadmin /options <FQDN SCHEMA FSMO> +DISABLE_INBOUND_REPL
+DISABLE_OUTBOUND_REPL (disables inbound and outbound replication)
repadmin /options <FQDN SCHEMA
FSMO> -DISABLE_INBOUND_REPL -DISABLE_OUTBOUND_REPL (enables inbound and
outbound replication)

As additional safe measures:
(1) Fully sync a DC from EACH domain and put it offline
If the schema upgrade goes bad, shutdown all DCs. Put the DCs that were
offline online again and force demote all other DCs and repromote again ->
sounds like the disaster recovery plan white paper MS has

(2) Backup at least the SYSTEM STATE of ALL DCs in the forest
If the schema upgrade goes bad, restore all domain controllers from backup

(3) Backup at least the SYSTEM STATE of at least 2 DCs in each domain in the
forest
If the schema upgrade goes bad, shutdown all DCs in the forest. Restore the
two DCs in each domain in the forest and demote all other DCs and repromote
again

for upgrading the w2k AD to w2k3 AD see also:
http://blogs.dirteam.com/blogs/jorge/archive/2005/11/19/110.aspx

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
"Orvs" <Orvs@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:65F753C3-E316-4917-9DE0-94645EE58FB1@xxxxxxxxxxxxxxxx

Establishing some backout plan for the Windows 2003 domain upgrade.

- Does backing up system state is enough to do backout in case the upgrade
of the Forestprep did'nt work out?

I'm thinking of another plans like:
- I'm planning to have a make an image of at least one of the DC
- Disconnect one of the production DCs and keep it somewhere.

any feedback on this.

thanks



















.



Relevant Pages

  • Re: Backout Plan for Windows 2003 Domain Upgrade
    ... by disabling replication on the schema master you are able to update the ... schema, but the schema changes do not replicate out to other DCs. ... If the schema upgrade goes bad, shutdown all DCs. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Article 314649
    ... about adprep /forestprep and adprep /domainprep ... adprep /domainprep command on the schema master of the 2000 DC. ... running is dcpromo on the 2003 servers and adding it to 2000 forest. ... All I am doing is adding two 2003 DCs to my forest which has two ...
    (microsoft.public.windows.server.active_directory)
  • Re: Backout Plan for Windows 2003 Domain Upgrade
    ... that is why schema changes are made on the schema master. ... The only way to undo schema changes is to recover/restore the DCs. ... it is OK you enable replication again. ... If the schema upgrade goes bad, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Backout Plan for Windows 2003 Domain Upgrade
    ... Call me an idiot but if you disable replication to your Schema Master (which ... If the schema upgrade goes bad, shutdown all DCs. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Backout Plan for Windows 2003 Domain Upgrade
    ... DON'T USE IMAGES AS A BACKUP MECHANISM FOR DCs!!!!!!!!! ... If the schema upgrade goes bad, shutdown all DCs. ... Backup at least the SYSTEM STATE of ALL DCs in the forest ...
    (microsoft.public.windows.server.active_directory)