Page 1 of 1 1
Topic Options
#116388 - 2004-03-19 04:55 AM NT4 to AD migration
Sealeopard Offline
KiX Master
*****

Registered: 2001-04-25
Posts: 11165
Loc: Boston, MA, USA
Situation: Migration of an NT4 domain to Windows Server 2003 AD consisting of 1 PDC/fileserver, 1 BDC, 3 network printers, 20 computers (mostly WinXP, some Win2K), 8 employees, no roaming profiles. There is no full-time administrator and the person administering the domain is doing at most account management and patching.

I've been asked to perform the migration. Additionally, they will introduce a new server into the network. I have three options:
1) Start a new AD domain from scratch and do not migrate any users
2) Start a new AD domain on the new server and use ADMT to migrate users/computers/printers
3) In-place upgrade of the NT4 PDC to Windows Server 2003 and use new server as second DC, however then the GC will be on the older former NT4 PDC.

I'm also planning to install SUS for patch management.

Anybody got any recommendations regarding this? Would be my first AD migration.
_________________________
There are two types of vessels, submarines and targets.

Top
#116389 - 2004-03-19 05:36 AM Re: NT4 to AD migration
Radimus Moderator Offline
Moderator
*****

Registered: 2000-01-06
Posts: 5187
Loc: Tampa, FL
install NT on the new server, join domain, promote to PDC, unplug the old PDC for backup, then upgrade the new server.

You can use step 2 as well.

considering the small size of the network/domain, and that everything (data/shares/etc) will be migrated, I'd just as soon build the whole thing from scratch
_________________________
How to ask questions the smart way <-----------> Before you ask

Top
#116390 - 2004-03-19 07:37 AM Re: NT4 to AD migration
Kdyer Offline
KiX Supporter
*****

Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
I would tend to agree with Rad. It is my understanding that building a new server addresses may legacy issues with NT4.

Kent
_________________________
Utilize these resources:
UDFs (Full List)
KiXtart FAQ & How to's

Top
#116391 - 2004-03-19 09:00 AM Re: NT4 to AD migration
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11628
Loc: CA
Quote:

There is no full-time administrator




Well, I hope you're around for a lot of question/answer/fixing.

This is not black box technology that just sits in the corner of some closet.

NT 4 (people to call and ask help = 10's of thousands)
2000 AD (people to call and ask help = 1000's )
2003 AD (people to call and ask help = 100's )
(Your mileage may vary)

With so few employees and given that I'm sure there NT 4 is paid for by now. Why the "need" (fear of no support from MS? ohhh... I'm scared) to upgrade? 2003 is not free, and neither is new hardware if required)

Think most people would agree with the upgrade, but I think I would at least TRY an all new setup myself with such a small user/server group. However, you may not have the time/hardware/etc... to do so in which case it is probably better to do an in-place update.

Top
#116392 - 2004-03-19 10:41 AM Re: NT4 to AD migration
Co Offline
MM club member
***

Registered: 2000-11-20
Posts: 1342
Loc: NL
I also agree with Radimus. As told in another topic: OT: Seminar AD Security by John Craddock there is a great book about AD:http://www.kimberry.co.uk/Books/Index.aspx. It is a very in-dept book. It could help you with SID history and things like that...



_________________________
Co


Top
#116393 - 2004-03-19 10:46 AM Re: NT4 to AD migration
Radimus Moderator Offline
Moderator
*****

Registered: 2000-01-06
Posts: 5187
Loc: Tampa, FL
I just built a 2000 AD server for a 10 client NT4 network.

I built the new server, setup AD (company.network), copied the data to the new server, built new user accounts, and pushed the old server into the street to make a skateboard ramp

The only slightly tricky thing, was setting up DNS and DHCP (from the 2 linky routers they used)

The best thing about the new setup, it the $25.00/hr I get for support calls. My prices are about to go up though...
_________________________
How to ask questions the smart way <-----------> Before you ask

Top
#116394 - 2004-03-19 11:10 AM Re: NT4 to AD migration
Co Offline
MM club member
***

Registered: 2000-11-20
Posts: 1342
Loc: NL
It has nothing to do with this topic but

Radimus,

the link to your site doesn't work...

Quote:


The page cannot be found
The page you are looking for might have been removed, had its name changed, or is temporarily unavailable.






Jens,

Here is a presentation about migration...

http://www.microsoft.com/mexico/windowsserver2003/presentaciones/downs/Session3_Upgrading_Active_Directory.ppt




Edited by Co (2004-03-19 11:34 AM)
_________________________
Co


Top
#116395 - 2004-03-19 12:41 PM Re: NT4 to AD migration
Radimus Moderator Offline
Moderator
*****

Registered: 2000-01-06
Posts: 5187
Loc: Tampa, FL
It has... I haven't gotten around to replacing the site
_________________________
How to ask questions the smart way <-----------> Before you ask

Top
#116396 - 2004-03-19 03:56 PM Re: NT4 to AD migration
Les Offline
KiX Master
*****

Registered: 2001-06-11
Posts: 12734
Loc: fortfrances.on.ca
I have always had a distaste for in-place upgrades, but as long as you don't mind the extra work of transferring the FSMO roles to new cleanly built DCs, (scrubbing the old NT4 DCs in the process) then you avoid the SIDhistory thing. Personally, I have not had problems with SIDhistory.

In light of the size and structure of our existing NT4 domains, we opted to migrate using NetIQ and ADMT2 into a pristine forest and yes, we used SIDhistory.

As for the comments of staying with NT4, I think it is just foolish talk. I am quite certain that after the end-of-life for NT4, the virus writers will have a field day, knowing that exposed vulnerabilities will only be fixed by M$ upon reciept of a $100,000.00 purchase order.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.

Top
#116397 - 2004-03-19 04:13 PM Re: NT4 to AD migration
Sealeopard Offline
KiX Master
*****

Registered: 2001-04-25
Posts: 11165
Loc: Boston, MA, USA
I prefer clean builds as well. However, the option of installing NT4 on the new server, convert to PDc, take offline,... has occurred to me as well. I just can't find any info on how clean the new W2K3 server will be after this in-place upgrade.

I don't hope for many support calls, that's why I want to set it up as simple as possible. right now I'm tending towards ADMT. Though, the in-place upgrade might be faster.

I have a suspicion that whatever I do, the local profiles must be preserved. I'll be meeting with them next week and see what they want.

RAD: You should increase your rates, it feels like below average. :-)
_________________________
There are two types of vessels, submarines and targets.

Top
#116398 - 2004-03-19 04:24 PM Re: NT4 to AD migration
Les Offline
KiX Master
*****

Registered: 2001-06-11
Posts: 12734
Loc: fortfrances.on.ca
The security translation in ADMT2 does preserve the local profiles. Just remember that the built-ins cannot be migrated.

$25 an hour is way too cheap. When I was one of those high priced consultants (last century), I was billing out at $75 (yeah, CDN... but our dollar was strong then). Today's rates here are more in the range of $100 - $200.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.

Top
#116399 - 2004-03-19 04:26 PM Re: NT4 to AD migration
Radimus Moderator Offline
Moderator
*****

Registered: 2000-01-06
Posts: 5187
Loc: Tampa, FL
I know... but it is convenient for spare change... once I get too busy, I'
ll raise my prices
_________________________
How to ask questions the smart way <-----------> Before you ask

Top
#116400 - 2004-03-19 10:25 PM Re: NT4 to AD migration
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11628
Loc: CA
Don't worry Les. MS will always love you and keep upgrading on you. No end in sight. Hope to see you go back and upgrade all your sites to Longhorn.

I'm not advocating a NEW install of NT4 I'm simply asking why a company so small is wanting or willing to spend such money in the first place.

If there is not a significant ROI or other reason to spend the money then I don't see why there doing it. Not every small Mom & Pop shop out there has or wants to spend the money trying to keep up with MS releases when using computers is a minor part of their business.

I'm also not one to be so afraid of "hackers". There is much more hype then fact on that subject. There are also many small shops out there that have no outside connectivity so remote hacking is impossible anyways.

Jens,
I vote for clean install. Just discuss pros / cons with the client and let them participate in the decision after you supply them with the information.

Top
#116401 - 2004-03-19 11:19 PM Re: NT4 to AD migration
Co Offline
MM club member
***

Registered: 2000-11-20
Posts: 1342
Loc: NL
Quote:

1 PDC/fileserver, 1 BDC, 3 network printers, 20 computers (mostly WinXP, some Win2K), 8 employees, no roaming profiles




Jens,

You are probably faster when you do a clean install and sychronise your data with a robocopy script instead of upgrading your old NT4 domain...
_________________________
Co


Top
#116402 - 2004-03-19 11:57 PM Re: NT4 to AD migration
Bryce Offline
KiX Supporter
*****

Registered: 2000-02-29
Posts: 3167
Loc: Houston TX
20 computers and only 8 employees?!?

i agree... you would be ebtter off doing a clean install, with that size of e network, the pain involved in starting from scratch is small....


Top
#116403 - 2004-03-20 01:38 AM Re: NT4 to AD migration
Sealeopard Offline
KiX Master
*****

Registered: 2001-04-25
Posts: 11165
Loc: Boston, MA, USA
It's actually more than 20 computers, a couple of Windows CE devices as well, they are an R&D-heavy small company that manufactures data acquisition systems and sensors. Actually, they are our technology-spin-off where we transfer the technology that we develop to in order to comercialize it. They're also compartmentalized in order to comply with research grants they receive, thus e.g. the Navy development environment is separate for the Army developmental stuff.
_________________________
There are two types of vessels, submarines and targets.

Top
#116404 - 2004-03-20 12:52 PM Re: NT4 to AD migration
Co Offline
MM club member
***

Registered: 2000-11-20
Posts: 1342
Loc: NL
Do a clean install on the new server and keep the old domain alive for a while as fallback...
_________________________
Co


Top
Page 1 of 1 1


Moderator:  Arend_, Allen, Jochen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Mart 
Hop to:
Shout Box

Who's Online
1 registered (Allen) and 1198 anonymous users online.
Newest Members
M_Moore, BeeEm, min_seow, Audio, Hoschi
17883 Registered Users

Generated in 0.11 seconds in which 0.064 seconds were spent on a total of 12 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org