Windows Server 2k to 2k8

[Xsorovan]

Hey everyone,
We are running a Windows Server 2000 domain controller/ file server where I am and we have recently gotten our hands on Windows Server 2008. I was originally thinking that a migration of the DC from 2k to 2k8 would be just fine, however we are going from a Lotus Domino based mail system to an Exchange 2007 mail system.

I was pretty sure I read somewhere that creating new users through Exchange 2007 opened up some options that creating them in AD or migrating them didn't include.

So a few questions: 1. In your opinion(s) should I migrate? Or put in the extra work to just create a new DC from scratch? Or should I migrate everything and then go through and try to manually change things? (Note: We're not currently using GP (Note: I'm new to this job and I inherited this server, things are changing, don't berate me for things I didn't originally setup! I know things are more secure, or easier, or whatever with certain things...))

Thanks!

 

[Genx87]

I am not familiar with Lotus notes and how it integrates within AD. However you shouldnt have a problem introducing a Windows 2008 AD into the network. However you will have to updates you active directory version to match what is required of Windows 2008.

I guess it depends on how many users you have and what kind of timeframe is available.
Also depends on how tightly integrated Notes is to AD.

 

[Xsorovan]

Notes isn't integrated at all. We've got over 200 logins in AD right now, and those folks have (some) permissions on the file server.

I figured it wouldn't be an issue migrating the two. MS plays fairly well with other MS stuff. Our Notes to Exchange (content) migration will be different from the AD migration.

I have as much time as I need to get this done right. However, everyone here is getting sick of Lotus. =)

 

[Genx87]

Well then I would introduce the 2008 server into the AD and setup exchange and bring people over one by one. 200 logins is a bitch to recreate if you dont have to.

Browse Microsofts site about updating your active directory in preparation for windows 2008 AD.

 

[Xsorovan]

Do you know about migrating vs creating new? Is there a difference in how the user looks in AD?

 

[drebo]

Originally posted by: Xsorovan
Do you know about migrating vs creating new? Is there a difference in how the user looks in AD?

No.

The user can be used with Exchange even if it was created before Exchange wasn't installed.

 

[Jamsan]

Originally posted by: Xsorovan
Do you know about migrating vs creating new? Is there a difference in how the user looks in AD?

If you mean how a user looks in AD when recreating their account, absolutely. Each user will have a different SID, so anywhere permissions are set, local admin rights granted, etc, will now have to be reset.

 

[Genx87]

Originally posted by: Xsorovan
Do you know about migrating vs creating new? Is there a difference in how the user looks in AD?

The account options dont change. I believe most of the updates are security fixes and functionality updates. For instance updating from 2000 AD to 2003 allows you to drag and drop objects and changes security model a bit to stop man in the middle attacks. I learned that the hardway when I changed to native 2003 AD and the Macs stopped authenticating.

 

[redbeard1]

On point you need to be aware of is Microsoft strongly recommend that you do not put Exchange 2007 on a domain controller. So if you plan on putting 2008 and Exchange 2007 into your enviroment, you should put in two 2008 servers, one to be a domain cotroller, and one to host Exchange.

The other thing to be concerned with is that Exchange 2007 has the requirement of needing at least one domain controller running 2003 server with SP1(?), or any later version of OS like 2008, on it.

Joining a 2008 server in as a domain controller with 2000 is supported. It would save you the hassle of creating users from scratch. Touching 200 computers to migrate then into a new domain would be a major time investment.