Re: DC Hardware Upgrades

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

If you have Certificate services installed on a DC you cannot rename it
without first uninstalling Certificate services. Plus you have those other
pitfalls you mentioned with the vendor. Why can't you introduce the new
hardware as additional DCs - then work with your vendor to point over to
them, and after everything settles down you can decommission the old
hardware.

This white paper outlines the entire migration process, including potential
pitfalls with WINS, DHCP, DNS, etc. (Chapter 4) . Start here:
http://www.microsoft.com/downloads/details.aspx?familyid=e92cf6a0-76f0-4e25-8de0-19544062a6e6&displaylang=en

--
Todd J Heron, MCSE
Windows Server 2003/2000/NT; CCA
----------------------------------------------------------------------------
This posting is provided "as is" with no warranties and confers no rights

"Mick Surname" <mick377_1[remove]@hotmail.com> wrote in message
news:eW9TdcDrFHA.3424@xxxxxxxxxxxxxxxxxxxxxxx
2 x Windows 2003 DCs. Both were built from scratch with 2003 and are fairly
pure.
A) has certificates and RSA, B) has printing.

I am planning a hardware upgrade and would like to keep the names and IP
addresses
the same as we have a trust relationship through our firewall with another
organisation and it would be difficult to change their firewalls, lmhosts,
etc.

Microsoft articles such as KB 249694 says "This procedure is not recommended
for
domain controllers".

Given the choice, would it also be wise to use something like CommVault or
Symantec
LiveState to do the upgrade ?

I am happy to go the safe path if that is best. I could move all the roles,
GC, DNS,
IAS, DHCP, Certificates, etc from A) to B). Then demote A), remove from
domain,
replace with new hardware, build from scratch with 2003SP1, promote, move
roles back.

I would do this one weekend and then the next look at upgrading the B) DC to
new
hardware. I can see this as more difficult as I have a lot of printer
drivers to
locate and install.

Thanks
Mick


.

Relevant Pages

  • Re: DC Hardware Upgrades
    ... I've haven't previously moved certificate services, ... > hardware as additional DCs - then work with your vendor to point over to ... > I am planning a hardware upgrade and would like to keep the names and IP ... > domain controllers". ...
    (microsoft.public.windows.server.general)
  • Move Enterprise Root CA to new hardware
    ... Backup the CA (and reg key) ... Install certificate services on the new hardware doing Advanced ...
    (microsoft.public.win2000.security)
  • DC Hardware Upgrades
    ... has certificates and RSA, ... I am planning a hardware upgrade and would like to keep the names and IP ... domain controllers". ...
    (microsoft.public.windows.server.general)
  • Adding new 2003 R2 Domain controllers to existing Server 2003 domain
    ... I have a Server 2003 domain and need to upgrade the hardware of 2 of my domain controllers. ... I've built the hardware and installed Server 2003 R2 and understand that the next step is to run the forest prep. ... I've got good tape backups of the domain controllers and individual system state backups of each as well. ...
    (microsoft.public.windows.server.general)
  • RE: Event ID 13 - AutoEnrollment
    ... the Users container in Active Directory Users and Computers by default. ... Add the Domain Controllers group to the ... I also do have Certificate Services running. ... Automatic certificate enrollment for local system failed to enroll for one ...
    (microsoft.public.windows.server.general)