Re: Checlist For Domain & Forest Raise


"Muneer Ahmed" <MuneerAhmed@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:DE30939C-F3D0-49E9-8256-1092F378A48A@xxxxxxxxxxxxxxxx
HI All,
WE have removd all windows nt PDC +BDC & Exchannge 5.5 from ad, now the
scenario is we have Parent & child domain enviroment.

Basically for security & recommendation by MS we have design & created AD
parent & Child domain,

in Parent we have around 4 DC & in Child we have major chunk around 30 DC,
now we have planning to RAISE Domain & Forest level to Windows 2003, I got
the task to prepare the project plan e.i

Checklist for Domain & forest raise (Pre & Post checks)
Recovery Plan

For checklis have a idea like

1) Take All DC (Root + Child) System State backup
2) Shutdown 1 DC in Parent & 2 DC in Child.

I would skip this step -- it isn't necesary and just complicates the
replication.

3) Raise the functional Level
4) Check all DC replication & latest event + communication
5) Started the remain DC after 2 or 3 DC


hoping that application which is running on windows NT & windows 2000 will
work after Forest/Domain level raised.

Domain Modes and Forest Functional Level are almost totally about two
things:

1) The DCs (you lose the ability to install downlevel DCs)

2) Improvements in the features or replication of AD.

Thus they have practically nothing to do with clients.

There are some near exceptions (not true exceptions but they may
be perceived as such), for example, once you are in Native Mode(s)
there must be a GC available for user Logon/Authentication to work.

This is really about the "new" availability of Universal Groups in
Native mode(s) which might either allow or deny the user access to
something and would not be a problem if the GCs are available as
they are suppose to be.

Kindly suggest for cheklist & recovery plan

Making the backups is the prudent thing to do, but if you don't need
the oldr BDCs then there is really not much likelyhood of a problem.


.

Relevant Pages

  • Re: Child domain
    ... will there be any issues if the parent domain is a windows 2000 domain ... >> i need to created a child domain for my company. ... i have delegated control to the child domain under dns ... > Microsoft Windows MVP - Windows Server - Directory Services ...
    (microsoft.public.win2000.dns)
  • Re: Publish Certificates in AD - parentchild domain
    ... as there is a different procedure under Windows 2000 domains and Windows ... the Cert Publishers group is a domain global group instead of domain local ... Publishers group from the parent domain." ... I cannot add it from the child domain - cannot be found in the ...
    (microsoft.public.windows.server.security)
  • New domain question
    ... we have a parent, child domain here ... Should I upgrade to Windows 2003 now? ...
    (microsoft.public.win2000.active_directory)
  • Can’t ping parent domain name?
    ... We have a Windows 2000 AD domain cityname-tn.org located at city hall. ... We have a Windows 2000 AD Child domain electric.cityname-tn.org ... located at the electric department. ... except the child domain can?t find domain controllers for the parent ...
    (microsoft.public.win2000.dns)
  • Re: Misconfigured AD
    ... I have a Parent domain with 2 child domains and an exchange server ... user in the child domain and I can view the Mailbox Rights but when I ... I agree with Herb that it's more than likely a DNS misconfiguration. ...
    (microsoft.public.windows.server.active_directory)