Hi,
I have done a similar migartion and here is a plan that I would suggest:
1. Evaluate the current situation – check Active Directory health with DCDIAG, NETDIAG in verbose mode, SYSVOL status, Examine the event logs, check DNS zone (do you have the correct name servers, forwardes – if you are using such, DNS server listening on the wrong interfaces, bindings and IP settings etc).
2. Correct the problems (as much as it is possible).
3. Promote the existing Windows Server 2003 as a DC. Be careful – if the member server is R2 you will need to run adprep on the SBS server to extend the schema (you have to use the 32 bit media disk as SBS 2003 is 32 bit OS). Replicate, check the result of the replication, make it a GC, restart (you need to restart for the GC to become active as you are running Exchange in your network), wait for events 1119 and 1869 (this means that the new server is really a GC). Alternatively you can use LDP to query the new server and check whether it is advertising itself as a GC. The reason I am so through about the GC is that if you loose your GC you loose your domain.
4. Perform a cold backup of the Exchange DataBases (mdbdata folder).
5. (Optional)Install DNS server on the new DC.
At this point if the existing SBS dies:
1. You haven’t lost your domain (you can seize the FSMO roles in a minute with NTDSutil)
2. You haven’t lost your Exchange org – you can reinstall Exchange and forklift the databases
You can have two SBS servers in a domain for as long as 7 days (after that they will start rebooting hourly)
The next phase is to install the new SBS server in the same domain.
1. Stop the SBS installation after the OS installation part finishes and manually DCPROMO the server as an additional DC to an existing domain.
2. Replicate and check the status of the replication. Make it a GC, restart etc. (as I’ve said before).
3. Move the FSMO roles
4. Replicate, check the replication status, run “NETDOM QUERY FSMO” and confirm that every DC sees the new FSMO master correctly.
5. Move DNS, WINS and DHCP services and their databases to the new server .
6.
7. Point all machines to the new server as a DNS and WINS. Change the DHCP server options (to provide the new server as a DNS and WINS server).
8. Do not forget – you have 7 days to demote the old SBS server.
9. Proceed with the SBS installation – it will detect the existing Exchange 2003 Org and install the new Exchange server in it.
10. Move mailboxes, switch the Exchange org to native mode, change the routing master, rehome public folders and RUS, set the new server as the server used for OAL generation.
At this point mailboxes are moved and you have to wait for everybody to login, open outlook and get redirected to the new server which holds their mailboxes (this automatically modifies the users Outlook profiles). The old server is still the bridgehead server (incoming and outgoing e-mail is flowing through it).
Next phase:
1. Install antivirus and antispam software on the new server (if you are using such)
2. Move the SSL certificate (if you are using a public one for OWA) to the new server.
3. Reconfigure the routing connector to include the new server and change the firewall to point to the new server.
4. Remove the old SBS from the routing connector and stop Exchange services on it for a day (couple of days).
5. Uninstall Exchange from the old server
6. Demote the old SBS server
At this point there is no time pressure on you. The old SBS is not a DC anymore and the 7 days restriction is gone.
Next phase:
1. Uninstall DNS from the old SBS server and remove manually its name from the list with name servers for the domain.
2. Manually delete the old SBS from AD Site and Services - first confirm that there are no child objects under it before you do this. If there are child objects you can wait for the KCC to recalculate the new configuration or force it by running “repadmin /kcc yournewSBS”
3. Robocopy file shares to the new server.
4. If you are using Sharepoint services backup, and restore them to the new server.
5. Remove the old SBS server from the domain.
Most people fail:
1. Detecting that there are currently problems with AD which prevent the process of successfully adding a new DC and replicating AD and the SYSVOL to it.
2. Configuring correctly the new DC as a GC - not rebooting or not waiting for successful replication and events 1119, 1869.
3. Moving the FSMO roles – you have to check the result of the move.
4. Wrong DNS configuration – DNS servers listening to the wrong interface, wrong bindings, wrong (non existent name servers or forwarders) etc.
Regards,
Dean
Online Screencasts and Video-Tutorials