Upgrade from Windows 2000 to Server 2003 active directory th

Andrew Hodgson · Guest

Hi,

I have a Windows 2000 server AD which I was going to upgrade to
Windows Server 2003 AD, by running the relevant utilities on a DC,
then promoting/demoting, and doing fresh installs of the OS. I had
plans for this and everything, even did a test setup.

However. My boss wants me to do a fresh AD altogether, and somehow
migrate everything across to the new AD.

If I do this, could I do something with trust relationships, and/or
the Active Directory migration assistant? Its really annoying,
because our new domain will have to have a different name and
everything, which is going to cause issues.

We don't have Exchange, but have an application that uses single
sign-on in IIS, which I am trying to deal with the vender - hoping
they can push us down the upgrade route.

Other thing, is it worth going straight to Windows 2008, or leaving it
a bit? By the time I get this all sorted/tested etc, it may be out
and the dust settled by then!

Thanks.
Andrew.

Ryan Hanisco · Guest

Hi Andrew,

First off, I would not suggest migrating to 2008 unless you are willing to
wait a bit. The product is not yet released and you really don't want to be
in that early-adopter wave unless you have been working with it for some
months and have a high-level of experience with the betas and AD itself.

That said, you can meet all of the requirements you outlined by using the
ADMT to do an inter-forest migration. This does force you to have all new
hardware and does a copy of Users and groups, rather than a move like an
intra-forest move would do. This would give you a platform to try out your
SSO applications before you commit to the migration. (If you are not really
using SSO through MIIS or a third party, you may have no issues just relying
on windows authentication to the app.)

There is lower risk in moving to another forest rather than doing an
in-place upgrade, but there are certainly reasons to do each. I'll leave you
to fight that battle as I don't have enough information to make that call,
but ADMT will get you there. Just go slow and test everything.

You may also want to search this NG for ADMT as there are a number of posts
with great information and guidance.
--
Ryan Hanisco
MCSE, MCTS: SQL 2005, Project+
www.techsterity.com
Chicago, IL

Remember: Marking helpful answers helps everyone find the info they need
quickly.

"Andrew Hodgson" wrote: