RE: My First 2008 Server
Three steps actually: Adprep /forestprep Adprep /domainprep Adprep /domainprep /gpprep At least, that's what I do. Regards, Michael B. Smith MCITP:SA,EMA/MCSE/Exchange MVP http://TheEssentialExchange.com -Original Message- From: John Hornbuckle [mailto:[EMAIL PROTECTED] Sent: Thursday, July 17, 2008 8:52 AM To: NT System Admin Issues Subject: My First 2008 Server Woohoo! My new server arrived yesterday, and it'll be my first 2008 server in a domain/forest that currently has all 2003 machines. I'll need to make it a DC, so I want to make sure I don't miss anything. Looking at a couple of TechNet articles, it looks like I need to run adprep /forestprep on the schema operations master and adprep /domainprep /gpprep on the infrastructure operations master server. Is that all? John Hornbuckle MIS Department Taylor County School District 318 North Clark Street Perry, FL 32347 www.taylor.k12.fl.us ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Re: My First 2008 Server
So far that is all I have done. I had mine come in back in May but was told to leave it off until 3rd week of June. I will be doing my DC in Hyper-V which is very nice. Jon On Thu, Jul 17, 2008 at 8:52 AM, John Hornbuckle [EMAIL PROTECTED] wrote: Woohoo! My new server arrived yesterday, and it'll be my first 2008 server in a domain/forest that currently has all 2003 machines. I'll need to make it a DC, so I want to make sure I don't miss anything. Looking at a couple of TechNet articles, it looks like I need to run adprep /forestprep on the schema operations master and adprep /domainprep /gpprep on the infrastructure operations master server. Is that all? John Hornbuckle MIS Department Taylor County School District 318 North Clark Street Perry, FL 32347 www.taylor.k12.fl.us ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: My First 2008 Server
Yes you do...same article. To prepare a Windows 2000 or Windows Server 2003 domain for Windows Server 2008 1. Identify the domain infrastructure operations master role holder as follows: * In the Active Directory Users and Computers snap-in, right-click the domain object, click Operations Masters, and then click Infrastructure. 2. Log on to the infrastructure master as a member of the Domain Admins group. 3. Insert the Windows Server 2008 DVD into the CD or DVD drive. Copy the content of the \sources\adprep folder to an Adprep folder on the infrastructure master. 4. Open a command prompt, and then change directories to the Adprep folder. 5. Type the following command, and then press ENTER: adprep /domainprep /gpprep From: Jon Harris [mailto:[EMAIL PROTECTED] Sent: Thursday, July 17, 2008 9:59 AM To: NT System Admin Issues Subject: Re: My First 2008 Server From TechNet you don't need the adprep /domainprep http://technet2.microsoft.com/windowsserver2008/en/library/7120ec57-ad86-4369-af22-773ed9b097fc1033.mspx?mfr=true Jon On Thu, Jul 17, 2008 at 8:55 AM, Michael B. Smith [EMAIL PROTECTED]mailto:[EMAIL PROTECTED] wrote: Three steps actually: Adprep /forestprep Adprep /domainprep Adprep /domainprep /gpprep At least, that's what I do. Regards, Michael B. Smith MCITP:SA,EMA/MCSE/Exchange MVP http://TheEssentialExchange.comhttp://theessentialexchange.com/ -Original Message- From: John Hornbuckle [mailto:[EMAIL PROTECTED]mailto:[EMAIL PROTECTED]] Sent: Thursday, July 17, 2008 8:52 AM To: NT System Admin Issues Subject: My First 2008 Server Woohoo! My new server arrived yesterday, and it'll be my first 2008 server in a domain/forest that currently has all 2003 machines. I'll need to make it a DC, so I want to make sure I don't miss anything. Looking at a couple of TechNet articles, it looks like I need to run adprep /forestprep on the schema operations master and adprep /domainprep /gpprep on the infrastructure operations master server. Is that all? John Hornbuckle MIS Department Taylor County School District 318 North Clark Street Perry, FL 32347 www.taylor.k12.fl.ushttp://www.taylor.k12.fl.us/ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: My First 2008 Server
I thought I had heard somewhere that it wasn't a best practice to run a DC in a VM. I had tried to get confirmation on that a while back, but didn't have much luck. I don't see why running a DC in a Hyper-V VM would be a problem, though-I never really got a good answer on that. John From: Jon Harris [mailto:[EMAIL PROTECTED] Sent: Thursday, July 17, 2008 8:57 AM To: NT System Admin Issues Subject: Re: My First 2008 Server So far that is all I have done. I had mine come in back in May but was told to leave it off until 3rd week of June. I will be doing my DC in Hyper-V which is very nice. Jon On Thu, Jul 17, 2008 at 8:52 AM, John Hornbuckle [EMAIL PROTECTED] wrote: Woohoo! My new server arrived yesterday, and it'll be my first 2008 server in a domain/forest that currently has all 2003 machines. I'll need to make it a DC, so I want to make sure I don't miss anything. Looking at a couple of TechNet articles, it looks like I need to run adprep /forestprep on the schema operations master and adprep /domainprep /gpprep on the infrastructure operations master server. Is that all? John Hornbuckle MIS Department Taylor County School District 318 North Clark Street Perry, FL 32347 www.taylor.k12.fl.us http://www.taylor.k12.fl.us/ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: My First 2008 Server
Let me make sure I'm clear on one other thing... Adprep comes on the Server 2008 disk, but I don't actually run it on the Server 2008 machine, right? Do I put that disk in my Server 2003 DC and run it from there? -Original Message- From: Michael B. Smith [mailto:[EMAIL PROTECTED] Sent: Thursday, July 17, 2008 8:56 AM To: NT System Admin Issues Subject: RE: My First 2008 Server Three steps actually: Adprep /forestprep Adprep /domainprep Adprep /domainprep /gpprep At least, that's what I do. Regards, Michael B. Smith MCITP:SA,EMA/MCSE/Exchange MVP http://TheEssentialExchange.com -Original Message- From: John Hornbuckle [mailto:[EMAIL PROTECTED] Sent: Thursday, July 17, 2008 8:52 AM To: NT System Admin Issues Subject: My First 2008 Server Woohoo! My new server arrived yesterday, and it'll be my first 2008 server in a domain/forest that currently has all 2003 machines. I'll need to make it a DC, so I want to make sure I don't miss anything. Looking at a couple of TechNet articles, it looks like I need to run adprep /forestprep on the schema operations master and adprep /domainprep /gpprep on the infrastructure operations master server. Is that all? John Hornbuckle MIS Department Taylor County School District 318 North Clark Street Perry, FL 32347 www.taylor.k12.fl.us ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: My First 2008 Server
Per MS it's OK as long as they don't hold any FSMO roles. We recommend that you locate critical server roles on domain controllers that are installed directly on physical hardware. Critical server roles include the following: * Global catalog servers * Domain Name System (DNS) servers * Operations master roles, also known as flexible single master operations (FSMO) http://support.microsoft.com/kb/888794 Dave Lum - Systems Engineer [EMAIL PROTECTED] - (971)-222-1025 ..remember that, in the past, those who foolishly sought power by riding the back of the tiger ended up inside - JFK From: John Hornbuckle [mailto:[EMAIL PROTECTED] Sent: Thursday, July 17, 2008 7:15 AM To: NT System Admin Issues Subject: RE: My First 2008 Server I thought I had heard somewhere that it wasn't a best practice to run a DC in a VM. I had tried to get confirmation on that a while back, but didn't have much luck. I don't see why running a DC in a Hyper-V VM would be a problem, though-I never really got a good answer on that. John From: Jon Harris [mailto:[EMAIL PROTECTED] Sent: Thursday, July 17, 2008 8:57 AM To: NT System Admin Issues Subject: Re: My First 2008 Server So far that is all I have done. I had mine come in back in May but was told to leave it off until 3rd week of June. I will be doing my DC in Hyper-V which is very nice. Jon On Thu, Jul 17, 2008 at 8:52 AM, John Hornbuckle [EMAIL PROTECTED] wrote: Woohoo! My new server arrived yesterday, and it'll be my first 2008 server in a domain/forest that currently has all 2003 machines. I'll need to make it a DC, so I want to make sure I don't miss anything. Looking at a couple of TechNet articles, it looks like I need to run adprep /forestprep on the schema operations master and adprep /domainprep /gpprep on the infrastructure operations master server. Is that all? John Hornbuckle MIS Department Taylor County School District 318 North Clark Street Perry, FL 32347 www.taylor.k12.fl.us http://www.taylor.k12.fl.us/ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: My First 2008 Server
You shouldn't use VM DR techniques to restore a DC, that's what it comes down to. You can search at support.microsoft.com for a KB that discusses USN Rollback for the technical details why not to do that. There is also a white-paper at Microsoft.com/downloads named something like Best Practices for Running Domain Controllers in a Virtualization Environment. Sorry I didn't do the searches. :-P Regards, Michael B. Smith MCITP:SA,EMA/MCSE/Exchange MVP http://TheEssentialExchange.com From: John Hornbuckle [mailto:[EMAIL PROTECTED] Sent: Thursday, July 17, 2008 10:15 AM To: NT System Admin Issues Subject: RE: My First 2008 Server I thought I had heard somewhere that it wasn't a best practice to run a DC in a VM. I had tried to get confirmation on that a while back, but didn't have much luck. I don't see why running a DC in a Hyper-V VM would be a problem, though-I never really got a good answer on that. John From: Jon Harris [mailto:[EMAIL PROTECTED] Sent: Thursday, July 17, 2008 8:57 AM To: NT System Admin Issues Subject: Re: My First 2008 Server So far that is all I have done. I had mine come in back in May but was told to leave it off until 3rd week of June. I will be doing my DC in Hyper-V which is very nice. Jon On Thu, Jul 17, 2008 at 8:52 AM, John Hornbuckle [EMAIL PROTECTED] wrote: Woohoo! My new server arrived yesterday, and it'll be my first 2008 server in a domain/forest that currently has all 2003 machines. I'll need to make it a DC, so I want to make sure I don't miss anything. Looking at a couple of TechNet articles, it looks like I need to run adprep /forestprep on the schema operations master and adprep /domainprep /gpprep on the infrastructure operations master server. Is that all? John Hornbuckle MIS Department Taylor County School District 318 North Clark Street Perry, FL 32347 www.taylor.k12.fl.us http://www.taylor.k12.fl.us/ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: My First 2008 Server
Correct and correct. Regards, Michael B. Smith MCITP:SA,EMA/MCSE/Exchange MVP http://TheEssentialExchange.com -Original Message- From: John Hornbuckle [mailto:[EMAIL PROTECTED] Sent: Thursday, July 17, 2008 10:18 AM To: NT System Admin Issues Subject: RE: My First 2008 Server Let me make sure I'm clear on one other thing... Adprep comes on the Server 2008 disk, but I don't actually run it on the Server 2008 machine, right? Do I put that disk in my Server 2003 DC and run it from there? -Original Message- From: Michael B. Smith [mailto:[EMAIL PROTECTED] Sent: Thursday, July 17, 2008 8:56 AM To: NT System Admin Issues Subject: RE: My First 2008 Server Three steps actually: Adprep /forestprep Adprep /domainprep Adprep /domainprep /gpprep At least, that's what I do. Regards, Michael B. Smith MCITP:SA,EMA/MCSE/Exchange MVP http://TheEssentialExchange.com -Original Message- From: John Hornbuckle [mailto:[EMAIL PROTECTED] Sent: Thursday, July 17, 2008 8:52 AM To: NT System Admin Issues Subject: My First 2008 Server Woohoo! My new server arrived yesterday, and it'll be my first 2008 server in a domain/forest that currently has all 2003 machines. I'll need to make it a DC, so I want to make sure I don't miss anything. Looking at a couple of TechNet articles, it looks like I need to run adprep /forestprep on the schema operations master and adprep /domainprep /gpprep on the infrastructure operations master server. Is that all? John Hornbuckle MIS Department Taylor County School District 318 North Clark Street Perry, FL 32347 www.taylor.k12.fl.us ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Re: My First 2008 Server
I have no choice in the matter by year end I have to migrate both of my physical DC's to the virtual environment. One of the machines has been having hardware issues for the last 6 months the other has not. Of the 6 boxes I have up at the moment 2 are setup to be virtual hosts. One of the machines to be shutdown is more than 10 years old and ready to be retired. At the moment I can shut down 2 physical boxes with no loss to the network. I hope by the end of next week to make it 3 down with no loss. Politics is not a good reason to do things and this is all due to politics. Jon On Thu, Jul 17, 2008 at 10:15 AM, John Hornbuckle [EMAIL PROTECTED] wrote: I thought I had heard somewhere that it wasn't a best practice to run a DC in a VM. I had tried to get confirmation on that a while back, but didn't have much luck. I don't see why running a DC in a Hyper-V VM would be a problem, though—I never really got a good answer on that. John *From:* Jon Harris [mailto:[EMAIL PROTECTED] *Sent:* Thursday, July 17, 2008 8:57 AM *To:* NT System Admin Issues *Subject:* Re: My First 2008 Server So far that is all I have done. I had mine come in back in May but was told to leave it off until 3rd week of June. I will be doing my DC in Hyper-V which is very nice. Jon On Thu, Jul 17, 2008 at 8:52 AM, John Hornbuckle [EMAIL PROTECTED] wrote: Woohoo! My new server arrived yesterday, and it'll be my first 2008 server in a domain/forest that currently has all 2003 machines. I'll need to make it a DC, so I want to make sure I don't miss anything. Looking at a couple of TechNet articles, it looks like I need to run adprep /forestprep on the schema operations master and adprep /domainprep /gpprep on the infrastructure operations master server. Is that all? John Hornbuckle MIS Department Taylor County School District 318 North Clark Street Perry, FL 32347 www.taylor.k12.fl.us ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: My First 2008 Server
There is a really good whitepaper on this on the Microsoft website. I posted the link a few weeks ago - check the archives. The main issue is USN rollback. That is just a fact of reverting to a previous snapshot - no matter what the virtualisation product Cheers Ken From: John Hornbuckle [mailto:[EMAIL PROTECTED] Sent: Friday, 18 July 2008 12:15 AM To: NT System Admin Issues Subject: RE: My First 2008 Server I thought I had heard somewhere that it wasn't a best practice to run a DC in a VM. I had tried to get confirmation on that a while back, but didn't have much luck. I don't see why running a DC in a Hyper-V VM would be a problem, though-I never really got a good answer on that. John From: Jon Harris [mailto:[EMAIL PROTECTED] Sent: Thursday, July 17, 2008 8:57 AM To: NT System Admin Issues Subject: Re: My First 2008 Server So far that is all I have done. I had mine come in back in May but was told to leave it off until 3rd week of June. I will be doing my DC in Hyper-V which is very nice. Jon On Thu, Jul 17, 2008 at 8:52 AM, John Hornbuckle [EMAIL PROTECTED]mailto:[EMAIL PROTECTED] wrote: Woohoo! My new server arrived yesterday, and it'll be my first 2008 server in a domain/forest that currently has all 2003 machines. I'll need to make it a DC, so I want to make sure I don't miss anything. Looking at a couple of TechNet articles, it looks like I need to run adprep /forestprep on the schema operations master and adprep /domainprep /gpprep on the infrastructure operations master server. Is that all? John Hornbuckle MIS Department Taylor County School District 318 North Clark Street Perry, FL 32347 www.taylor.k12.fl.ushttp://www.taylor.k12.fl.us/ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: My First 2008 Server
So if I don't do that with the VM that acts as a DC, I should be okay? Could I think have that VM DC handle FSMO roles? From: Ken Schaefer [mailto:[EMAIL PROTECTED] Sent: Thursday, July 17, 2008 11:46 AM To: NT System Admin Issues Subject: RE: My First 2008 Server There is a really good whitepaper on this on the Microsoft website. I posted the link a few weeks ago - check the archives. The main issue is USN rollback. That is just a fact of reverting to a previous snapshot - no matter what the virtualisation product Cheers Ken From: John Hornbuckle [mailto:[EMAIL PROTECTED] Sent: Friday, 18 July 2008 12:15 AM To: NT System Admin Issues Subject: RE: My First 2008 Server I thought I had heard somewhere that it wasn't a best practice to run a DC in a VM. I had tried to get confirmation on that a while back, but didn't have much luck. I don't see why running a DC in a Hyper-V VM would be a problem, though-I never really got a good answer on that. John From: Jon Harris [mailto:[EMAIL PROTECTED] Sent: Thursday, July 17, 2008 8:57 AM To: NT System Admin Issues Subject: Re: My First 2008 Server So far that is all I have done. I had mine come in back in May but was told to leave it off until 3rd week of June. I will be doing my DC in Hyper-V which is very nice. Jon On Thu, Jul 17, 2008 at 8:52 AM, John Hornbuckle [EMAIL PROTECTED] wrote: Woohoo! My new server arrived yesterday, and it'll be my first 2008 server in a domain/forest that currently has all 2003 machines. I'll need to make it a DC, so I want to make sure I don't miss anything. Looking at a couple of TechNet articles, it looks like I need to run adprep /forestprep on the schema operations master and adprep /domainprep /gpprep on the infrastructure operations master server. Is that all? John Hornbuckle MIS Department Taylor County School District 318 North Clark Street Perry, FL 32347 www.taylor.k12.fl.us http://www.taylor.k12.fl.us/ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: My First 2008 Server
Be aware that the kb article that you referenced deals with Server 2000 and Server 2003, NOT Server 2008 (check the Applies To section at the bottom). The DC role is one of the built in adds for Hyper-V so I would think that Microsoft would have a hard time selling Don't put DC's on Hyper-V when they baked it in in the first place. Tim From: David Lum [mailto:[EMAIL PROTECTED] Sent: Thursday, July 17, 2008 9:19 AM To: NT System Admin Issues Subject: RE: My First 2008 Server Per MS it's OK as long as they don't hold any FSMO roles. We recommend that you locate critical server roles on domain controllers that are installed directly on physical hardware. Critical server roles include the following: * Global catalog servers * Domain Name System (DNS) servers * Operations master roles, also known as flexible single master operations (FSMO) http://support.microsoft.com/kb/888794 Dave Lum - Systems Engineer [EMAIL PROTECTED] - (971)-222-1025 ..remember that, in the past, those who foolishly sought power by riding the back of the tiger ended up inside - JFK From: John Hornbuckle [mailto:[EMAIL PROTECTED] Sent: Thursday, July 17, 2008 7:15 AM To: NT System Admin Issues Subject: RE: My First 2008 Server I thought I had heard somewhere that it wasn't a best practice to run a DC in a VM. I had tried to get confirmation on that a while back, but didn't have much luck. I don't see why running a DC in a Hyper-V VM would be a problem, though-I never really got a good answer on that. John From: Jon Harris [mailto:[EMAIL PROTECTED] Sent: Thursday, July 17, 2008 8:57 AM To: NT System Admin Issues Subject: Re: My First 2008 Server So far that is all I have done. I had mine come in back in May but was told to leave it off until 3rd week of June. I will be doing my DC in Hyper-V which is very nice. Jon On Thu, Jul 17, 2008 at 8:52 AM, John Hornbuckle [EMAIL PROTECTED]mailto:[EMAIL PROTECTED] wrote: Woohoo! My new server arrived yesterday, and it'll be my first 2008 server in a domain/forest that currently has all 2003 machines. I'll need to make it a DC, so I want to make sure I don't miss anything. Looking at a couple of TechNet articles, it looks like I need to run adprep /forestprep on the schema operations master and adprep /domainprep /gpprep on the infrastructure operations master server. Is that all? John Hornbuckle MIS Department Taylor County School District 318 North Clark Street Perry, FL 32347 www.taylor.k12.fl.ushttp://www.taylor.k12.fl.us/ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
