Home All Groups Group Topic Archive Search About

Re: Exchange 2007 & AD2008 Topology preparation, a little confused

Author
23 Sep 2008 9:53 AM
Meinolf Weber
Hello -,

See inline.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello,
>
> We are upgrading our AD environment and the setup steps, as well as
> our mixed-OS environment are making things a little murky for me
> trying to figure out when and how to prepare our AD forest for
> Exchange 2007.
>
> Here's some quick background info:
>
> - We have all Windows 2000 DC's
> - A week ago, I ran the Exchange 2003 /forestprep (and /domainprep)

But you didn't upgrade to Exchange 2003? So why running the schema extension?

> - A few days later, I ran the AD20003 R2 SP2 /forestprep (and
> /domainprep)
> - The postmaster still needs to get rid of the ADC which is showing up
> in
> the DSSITE snapin

What do you mean with this? Please clarify.

Show quoteHide quote
> - We will have Exchange 2000 servers in the environment for the
> foreseeable
> future
> - We plan to extend the AD schema to 2008 (/forestprep and
> /domainprep) but
> won't install 2008 DC's until mid-2009
> Before Exchange 2007 I do know that I still need to do the following:
>
> - Install a new W2003 DC in the root domain and transfer the schema
> master
> to it
> - Install a new W2003 DC (with GC) in each child domain
> Here are my questions:
>
> 1.    Should I keep in chronological order in the sense that I should
> do Exchange 2007 schema extensions before I do AD2008 schema
> extensions?

You need to prepare the schema at the moment if you install either exchange
2007 or a 2008 as DC, not earlier.

> 2.     Regarding /PrepareSchema warning:  "You must not run this
> command in a forest in which you do not plan to run setup /PrepareAD.
> If you do, the forest will be configured incorrectly, and you will not
> be  able to read some attributes on user objects."
>
> Does that mean that in the interim after we run /PrepareSchema and
> wait for it to replicate but before we do /PAD the forest will be
> configured incorrectly?  If so, is is not better to run /PAD and allow
> it to include /PS?

See above.

> 3.    I was reading a Technet article which I cannot currently find
> which talked about Exchange 2000 being able to run in an AD2008 schema
> environment, but advised against running W2008 DC's while EX2000
> servers were present.  Is this accurate?

See here:
However, if you still have Exchange 2000 deployed, you'll want to either
hold off on deploying Windows Server 2008 domain controllers in the Active
Directory site where those Exchange servers reside or hard-code the Directory
Service Access (DSAccess) settings so that Exchange 2000 doesn't attempt
to use the Windows Server 2008 domain controllers.

From: http://technet.microsoft.com/en-us/magazine/cc137736.aspx

Also look the last entry from "Exchange_Geek" in this one:
http://forums.msexchange.org/m_1800479396/mpage_1/key_/tm.htm#1800479417

> 4.    It would appear that the schema extensions are found in
> /PrepareSchema as well as /PrepareAD, but if /PS has been run then
> /PAD will skip it, right?
>
> 5.    Other than the schema extensions, does it hurt to run one of the
> steps more than once?

Should not, i think it will complain that the step is done before.

> 6.    In the Technet article
> http://technet.microsoft.com/en-us/library/bb125224(EXCHG.80).aspx it
> appears that its steps 1, 2 and 3 are cumulative, is this correct?

First you have to prepare the schema then AD, if you mean that with cumulative.

Author
23 Sep 2008 3:07 PM
-
Greetings Meinholf,

thanks for your response.  I have put some clarifications you asked for
below:


<Meinolf Weber> wrote in message
Show quoteHide quote
news:ff16fb667e4b8caeb8a1e987482@msnews.microsoft.com...
> Hello -,
>
> See inline.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Hello,
>>
>> We are upgrading our AD environment and the setup steps, as well as
>> our mixed-OS environment are making things a little murky for me
>> trying to figure out when and how to prepare our AD forest for
>> Exchange 2007.
>>
>> Here's some quick background info:
>>
>> - We have all Windows 2000 DC's
>> - A week ago, I ran the Exchange 2003 /forestprep (and /domainprep)
>
> But you didn't upgrade to Exchange 2003? So why running the schema
> extension?

## The Exchange admin is trying, but it's complaining that the Active
Directory connector is still present, so he's researching if it's safe to
remove and then he will proceed.

>
>> - A few days later, I ran the AD20003 R2 SP2 /forestprep (and
>> /domainprep)
>> - The postmaster still needs to get rid of the ADC which is showing up
>> in
>> the DSSITE snapin
>
> What do you mean with this? Please clarify.
>

## In Active Directory Sites and Services, the server object for the
Exchange Active Directory Connector is present in one of the sites


Show quoteHide quote
>> - We will have Exchange 2000 servers in the environment for the
>> foreseeable
>> future
>> - We plan to extend the AD schema to 2008 (/forestprep and
>> /domainprep) but
>> won't install 2008 DC's until mid-2009
>> Before Exchange 2007 I do know that I still need to do the following:
>>
>> - Install a new W2003 DC in the root domain and transfer the schema
>> master
>> to it
>> - Install a new W2003 DC (with GC) in each child domain
>> Here are my questions:
>>
>> 1.    Should I keep in chronological order in the sense that I should
>> do Exchange 2007 schema extensions before I do AD2008 schema
>> extensions?
>
> You need to prepare the schema at the moment if you install either
> exchange 2007 or a 2008 as DC, not earlier.

## But will it hurt if I do 2008 first, then 2007 next?

>> 2.     Regarding /PrepareSchema warning:  "You must not run this
>> command in a forest in which you do not plan to run setup /PrepareAD.
>> If you do, the forest will be configured incorrectly, and you will not
>> be  able to read some attributes on user objects."
>>
>> Does that mean that in the interim after we run /PrepareSchema and
>> wait for it to replicate but before we do /PAD the forest will be
>> configured incorrectly?  If so, is is not better to run /PAD and allow
>> it to include /PS?
>
> See above.

## I have to let the schema extensions from /PrepareSchema replicate
overnight before I do the /PrepareAD.  Am I "incorrect" during the overnight
period?


>> 3.    I was reading a Technet article which I cannot currently find
>> which talked about Exchange 2000 being able to run in an AD2008 schema
>> environment, but advised against running W2008 DC's while EX2000
>> servers were present.  Is this accurate?
>
> See here:
> However, if you still have Exchange 2000 deployed, you'll want to either
> hold off on deploying Windows Server 2008 domain controllers in the Active
> Directory site where those Exchange servers reside or hard-code the
> Directory Service Access (DSAccess) settings so that Exchange 2000 doesn't
> attempt to use the Windows Server 2008 domain controllers.
>

## Yes, I read that too, and that's why we didn't go directly to 2008.
We'll have to completely transition out of Exchange 2000 before installing
it, which by that time a service pack for 2008 will be out hopefully.

Show quoteHide quote
> From: http://technet.microsoft.com/en-us/magazine/cc137736.aspx
>
> Also look the last entry from "Exchange_Geek" in this one:
> http://forums.msexchange.org/m_1800479396/mpage_1/key_/tm.htm#1800479417
>
>> 4.    It would appear that the schema extensions are found in
>> /PrepareSchema as well as /PrepareAD, but if /PS has been run then
>> /PAD will skip it, right?
>>
>> 5.    Other than the schema extensions, does it hurt to run one of the
>> steps more than once?
>
> Should not, i think it will complain that the step is done before.
>
>> 6.    In the Technet article
>> http://technet.microsoft.com/en-us/library/bb125224(EXCHG.80).aspx it
>> appears that its steps 1, 2 and 3 are cumulative, is this correct?
>
> First you have to prepare the schema then AD, if you mean that with
> cumulative.
>
>
Author
23 Sep 2008 4:32 PM
Meinolf Weber
Hello -,

Again inline.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Show quoteHide quote
> Greetings Meinholf,
>
> thanks for your response.  I have put some clarifications you asked
> for below:
>
> <Meinolf Weber> wrote in message
> news:ff16fb667e4b8caeb8a1e987482@msnews.microsoft.com...
>
>> Hello -,
>>
>> See inline.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hello,
>>>
>>> We are upgrading our AD environment and the setup steps, as well as
>>> our mixed-OS environment are making things a little murky for me
>>> trying to figure out when and how to prepare our AD forest for
>>> Exchange 2007.
>>>
>>> Here's some quick background info:
>>>
>>> - We have all Windows 2000 DC's
>>> - A week ago, I ran the Exchange 2003 /forestprep (and /domainprep)
>> But you didn't upgrade to Exchange 2003? So why running the schema
>> extension?
>>
> ## The Exchange admin is trying, but it's complaining that the Active
> Directory connector is still present, so he's researching if it's safe
> to remove and then he will proceed.

I assume the ADC is from an older migration/connection to exchange5.5? See
here about removal:
http://www.exchangelog.info/2007/04/how-to-remove-active-directory.html

>>> - A few days later, I ran the AD20003 R2 SP2 /forestprep (and
>>> /domainprep)
>>> - The postmaster still needs to get rid of the ADC which is showing
>>> up
>>> in
>>> the DSSITE snapin
>> What do you mean with this? Please clarify.
>>
> ## In Active Directory Sites and Services, the server object for the
> Exchange Active Directory Connector is present in one of the sites

Ok. I mixed ADC with additional domain controller.

Show quoteHide quote
>>> - We will have Exchange 2000 servers in the environment for the
>>> foreseeable
>>> future
>>> - We plan to extend the AD schema to 2008 (/forestprep and
>>> /domainprep) but
>>> won't install 2008 DC's until mid-2009
>>> Before Exchange 2007 I do know that I still need to do the
>>> following:
>>> - Install a new W2003 DC in the root domain and transfer the schema
>>> master
>>> to it
>>> - Install a new W2003 DC (with GC) in each child domain
>>> Here are my questions:
>>> 1.    Should I keep in chronological order in the sense that I
>>> should do Exchange 2007 schema extensions before I do AD2008 schema
>>> extensions?
>>>
>> You need to prepare the schema at the moment if you install either
>> exchange 2007 or a 2008 as DC, not earlier.
>>
> ## But will it hurt if I do 2008 first, then 2007 next?

Depends what you like to upgrade, different schema changes, that will normally
not conflict. So upgrade one complete, either exchange or 2008 and then start
the other one.

Show quoteHide quote
>>> 2.     Regarding /PrepareSchema warning:  "You must not run this
>>> command in a forest in which you do not plan to run setup
>>> /PrepareAD. If you do, the forest will be configured incorrectly,
>>> and you will not be  able to read some attributes on user objects."
>>>
>>> Does that mean that in the interim after we run /PrepareSchema and
>>> wait for it to replicate but before we do /PAD the forest will be
>>> configured incorrectly?  If so, is is not better to run /PAD and
>>> allow it to include /PS?
>>>
>> See above.
>>
> ## I have to let the schema extensions from /PrepareSchema replicate
> overnight before I do the /PrepareAD.  Am I "incorrect" during the
> overnight period?

You can do it and wait over night, normally replication will not take so
long. After waiting run diagnostics with dcdiag /v, netdiag /v and repadmin
/showrepl so that you can see all is fine or maybe you have errors. BTW,
you should also use the tools before starting.

Show quoteHide quote
>>> 3.    I was reading a Technet article which I cannot currently find
>>> which talked about Exchange 2000 being able to run in an AD2008
>>> schema environment, but advised against running W2008 DC's while
>>> EX2000 servers were present.  Is this accurate?
>>>
>> See here:
>> However, if you still have Exchange 2000 deployed, you'll want to
>> either
>> hold off on deploying Windows Server 2008 domain controllers in the
>> Active
>> Directory site where those Exchange servers reside or hard-code the
>> Directory Service Access (DSAccess) settings so that Exchange 2000
>> doesn't
>> attempt to use the Windows Server 2008 domain controllers.
> ## Yes, I read that too, and that's why we didn't go directly to 2008.
> We'll have to completely transition out of Exchange 2000 before
> installing it, which by that time a service pack for 2008 will be out
> hopefully.

If you check 2008 after install you see SP1 is directly included. :-)

Show quoteHide quote
>> From: http://technet.microsoft.com/en-us/magazine/cc137736.aspx
>>
>> Also look the last entry from "Exchange_Geek" in this one:
>> http://forums.msexchange.org/m_1800479396/mpage_1/key_/tm.htm#1800479
>> 417
>>
>>> 4.    It would appear that the schema extensions are found in
>>> /PrepareSchema as well as /PrepareAD, but if /PS has been run then
>>> /PAD will skip it, right?
>>>
>>> 5.    Other than the schema extensions, does it hurt to run one of
>>> the steps more than once?
>>>
>> Should not, i think it will complain that the step is done before.
>>
>>> 6.    In the Technet article
>>> http://technet.microsoft.com/en-us/library/bb125224(EXCHG.80).aspx
>>> it appears that its steps 1, 2 and 3 are cumulative, is this
>>> correct?
>>>
>> First you have to prepare the schema then AD, if you mean that with
>> cumulative.
>>