MCITP 70-640: Upgrading Active Directory

This video looks at upgrading your current Active Directory environment so that you can deploy Windows Server 2008/R2 domain controllers in your environment. The video looks at the prerequisites required, the commands you need to run and a demonstration of how to prepare your environment for Windows Server 2008/R2

Upgrading demo 05:40

The following only needs to be done if you are planning to deploy Windows Server 2008 or Windows Server 2008 R2 Domain controllers on your network. If you only want to use Windows Server 2008 as a member server (that is, you do not want to promote it to a domain controller), you can do this without having to perform any of the steps in this video.

Upgrading Prerequisites
Remove all NT4 Domain controllers
Upgrade all Domain controllers to Windows Server 2000 SP4 or above
Domain functional level needs to be Windows 2000 or higher
Forest functional level needs to Windows Server 2000 or higher
The user performing the upgrade needs to be a member of the following groups:
Schema /Enterprise/Domain Administrator

For more information on the domain and forest functional levels, please see the following videos.
Forest Functional Level Video
http://www.youtube.com/watch?v=q02SEygch1M
Domain Functional Levels Video
http://www.youtube.com/watch?v=iwGLpy-Hwyk

Preparing your environment
In order to prepare your environment you need to run a tool called ADPrep. This can be found on the Windows Server 2008/R2 DVD under the Support folder. ADPrep has been updated since Windows Server 2008 and thus the first two commands listed below need to be run again when installing your first Windows Server 2008 R2 Domain Controller on a network with Windows Server 2008 Domain Controllers.

This command needs to be run once per forest. The command needs to be run on the server holding the schema operational master role.
ADPrep /ForestPrep
The following commands need to be run once on every domain in which you are going to deploy Windows Server 2008/R2 Domain Controllers. The following commands need to be run on the Domain controller holding the infrastructure master.
ADPrep /DomainPrep
ADPrep /DomainPrep /GPPrep
The following command only needs to be run if you are going to deploy Windows Server 2008 Read Only domain controllers. If you are not sure, run the command anyway as it does not affect the run of Active Directory if Read Only Domain Controllers are not deployed.
ADPrep /RODCPrep

Upgrading demo
To check the forest level, run Active Directory Domain and Trusts, right click the domain and select raise domain functional level. Make sure it is Windows Server 2000 native or higher.
To find out which domain controllers are holding which operational master roles, run the following command:
netdom query fsmo
To upgrade the forest, on the Domain Controller holding the schema operational master role, run the command line ADPrep /ForestPrep.
The process normally takes about 5 minutes or so. Once it is completed, allow some time for the changes to replicate through your network or force a replication.

To check whether your domain meets the minimum requirement for the domain functional level Windows Server 2000, run the command Active Directory Users and Computers. Right click the domain and select raise domain functional level.

The following commands need to be run on all domains on which you want to deploy Windows Server 2008 domain controllers. The following commands also need to be run on the Domain Controller holding the infrastructure operational master role.
ADPrep /DomainPrep
ADPrep /DomainPrep /GPPrep
The following command only needs to be run if you are planning on using Windows Server 2008 Read Only Domain Controllers.
ADPrep /RODCPrep

See http://itfreetraining.com or http://youtube.com/ITFreeTraining for our always free training videos. This is only one video of the completely free course for the 70-640 exam available for free on YouTube.

Category:

Education

Tags:

• Upgrading Active Directory
• Active Directory
• 70-640
• MCITP
• MCTS
• ITFreeTraining

[Maniello]

hi, and thank a lot for your work! There are few people like you! i study for exam 70-640 and with your videos I was able to have a good basis for studies...

you have planned in the short to end the collection 70-640?

[itfreetraining]

@Maniello We are working on some more videos for the 70-640 course. They should be on the channel soon.

[Schmylie1]

Another great video! TY

[itfreetraining]

@Schmylie1 Thanks for the comment.

[itfreetraining]

@christianrevival Your forest functional level will determine how high you can raise your domain functional level. If you lowest domain functional level is 2003 you will only be able to raise your forest functional level to 2003. Thus I guess in answer to your questions the domain functional level needs to be raised first.

[christianrevival]

@itfreetraining you planning on raising our functional level which one do you raise first? Forest Functional Level or Domain Functional Level

[itfreetraining]

@msmit1993 I have put two videos responses for this video. These cover how to configure the Windows Server 2008 side and how to configure the Windows 7 side. 

[msmit1993]

I'm looking for a VPN tutorial, is this something you could do. Further keep op the good work and manny thanks for the other tutorials.