I have collected some upgrade considerations from a couple colleagues of mine and have been sharing them on our internal technical DLs as the question comes up. I have gotten positive feedback on the notes and have been encouraged to post them. So, here they are. Though, the real thanks go out to my colleagues Tom and Arren. Further guidance on AD upgrades has been released to technet. The current title of the document "Microsoft Product Support Quick Start to Adding Windows Server 2008 or Windows Server 2008 R2 Domain Controllers to Existing Domains" can be found here. http://technet.microsoft.com/en-us/library/ee522994(WS.10).aspx
Here are some of the problems customers may run into when upgrading W2K3 AD deployment to W2K8 and/or W2K8R2 AD deployment:
b. For DNS Servers
c. For DCs running on hyper-V & VMWARE
a. install a UPS
b. brief all admins on the risks of USN rollbacks caused by restoring snapshots on DC role guests. Review http://technet.microsoft.com/en-us/library/dd363553(WS.10).aspx
c. P2V conversions should be done in offline mode. If converting multiple DC’s in same forest, then all need to be offline @ same time.
d. Disaster Avoidance & Recovery
a. Enable delete protection on OU containers
b. Enable system state backups
c. If using 3rd party backup, test system state restores + alternant backup like Windows Server backup so that PSS can restore when 3rd party product fails to restore
9. ADMIN STUFF
10. RECYCLE BIN STUFF
a. With Identity Lifecycle Manager (ILM), including Feature Pack 1 (FP1), the Management Agent for Active Directory is not supported with the Recycle Bin feature. KB2018683
Love the new look.
Might be worthwhile to add support.microsoft.com/.../982020
Great article!! Please give us the honor to know the new ones issues compilation for Windows 2012 upgrade!! Thanks!!
Any new upgrade considerations concerning AD upgrade from W2K3 to W2012 R2 ? Thanks !
hi Soumia, please try this link for Server 2012 ADDS upgrade consideration:http://blogs.technet.com/b/askpfeplat/archive/2013/04/29/upgrading-or-migrating-active-directory-to-windows-server-2012-build-your-roadmap-now.aspx
For 1p, to find a list of DES enabled accounts see
Is there anything that needs to be done or considered when migrating from 2003 domain/forest level to 2008R2 with all DC's at 2008R2 with 2 other 2003 seperate Domain incoming and outgoing Trusts, one Trust that is a Forest Trust and the other is an External
Trust? Is there any chance or risks that doing this upgrade will break either one of these Trust relationships? Some of the user accounts with SID history have been migrated from both Domain Trusts to our domain. Any chance that this upgrade will break these
relationships for users that are using SID history for access to folders and files in their old Domains? If so what can be done to protect these trusts and SID history, prior to moving the Domain to 2008R2
Going from DFL/FFL 2003 to 2008 - would this article/hotfix also apply (it says just 2008r2, but would like to confirm):
FIX: "The requested mode is invalid" error message when you run a managed application that uses the .NET Framework 3.5 SP1 or an earlier version to access a Windows Server 2008 R2 domain or forest