Saif
-
Posts
13 -
Joined
-
Last visited
Posts posted by Saif
-
-
Guys please help me asses my situation here.
I have 1 WSUS server (windows 2008 R2) installed from a role. I have performed all the updates. I have created a group policy which is linked to the domain which specifies that all objects (workstaiotns and servers) should point to my WSUS and download updaets and then notify.
In my WSUS i see all my workstations and my servers. I have created 7 groups organized by OS versions (xp, 2000, 2003, 2003 r2, 2008, 2008 r2). I have placed servers and computers in their respective groups.
I have approved all updates ( i approved all updates the first time) and then WSUS started downlaoding them. After couple of hours, all updates have been downloaded (i am only downloading critical, security updates for the above mentioned OS'es).
This is where i am confused. Are my workstation and servers to automatically receive these updates? Under all Updats when i set the fiters to any, any, Most of the updates say 100% and under Approval it says Install. What does that mean? Quite a fiew have the yellow exclamation and some stop icons.
I have disabled auto approval of all updates after the first inital auto approval process.
Basically my question is, this wont hurt my environemnt is it? I am causing any issues with the way it is setup currently is it?
-
I am in the process of rebuilding a new FTP server. Waht i need to know is if i rebuild this new replacement server and install FTP and set it up all the way, will i be able to rename this server to the old FTP server's name and IP?
(I must retain same name and ip of the old ftp server)
thanks
-
Yes dcpromo is the only thing you need to run to demote the DC.
Before doing this though, make sure that all operations master are moved and that it is not the last global catalog server.
What shares do you mean? Do you have fileshares on your DC2?
Exactly, it is also acting acting as a file server. How would i successfully copy all the shares off of it (i know i can use explorer) and retain file/ntfs permissions?
I setup the whole scenario in my test lab. This is what i did and please correct me if did something wrong:
1) Built another 2008 server. Added it to the domain as a normal member server.
2)Used robocopy on the new member server to copy all the files off of DC2 (it copied all the files, but i dont see any permissions being retained, also it placed the files all over the place and not in a specific directory, please advise).
3) I then copied all the FSMO roles off of DC2 to DC1. Ran dcpromo, but in the process received DNS errors. Although it demoted successfully, i had lots of DNS erros.
4) Shut down DC2. When i checked DC1, i still see entries in DNS for DC2, is that OK?
5) renamed new member server to DC2 and ran dcpromo
by then it was 1:00 am and i was tired so i went home. I have not checked the results yet, but this is exactly what i am suppose to do to replace a Domain controller correct? Please advise..
-
ADMT is for migrating objects. This tool will not help you preserve your domaincontroller hostnames.
Why is it so important to keep the DC names?
I guess you could move all roles to w2k3 dc1 and then demote w2k3 dc2.
When this is done, extend the forestprep and domainprep on your remaining w2k3 dc1.
Then install a w2k8 machine and promote it to a domaincontroller (give it the same name as w2k3 dc2 had..).
Move all roles to your new w2k8 machine. Then demote your w2k3 dc1.
Then install your second w2k8 machine and promote it to a domaincontroller.
done..
Remeber though that it is never a good idea to have less then 2 domaincontrollers.
backup backup backup
I like your idea here. I will transfer whatever roles i have on w2k-dc2 on to w2k-dc1. Then demote w2k-dc2, all i have to do is run dcpromo to demote correct? Will i need to do anything else on DC1 or in DNS to completely remove w2k-dc2? Once i build new w2k8 with same name, will i be able to promote to it to DC by running DCpromo? Once that is done, transfer all fsmo roles from w2k-dc1 onto here and repeate again. I will maintain my hostnames and have new domain controllers correct?
How will i be able to keep all my shares on w2k-dc2?
-
You can only have one of each operations master in you AD structure.
Read through this for a better understanding: http://en.wikipedia.org/wiki/Flexible_single_master_operation
Ok first of all i dont know what happened to my original post because it is gone. I must have deleted it by mistake.
You see we only have 2 DCs and both are setup and GC. In addition the primary DC has all the roles assigned to it.
Can't i use ADMT tool to migrate everything over to our new severs? Will that help me keep my original server names?
thanks,
-
This is exactly what i was looking for all over the internet. I have followed your documents on how to install SCCM 2007 and everything is running great.
Now i need to install SCOM 2007. I came across this forum, but it says it is password protected. How would i be able to get a password to access these step by step instructions?
Please advise.
thanks
-
You can not do an inplace upgrade to 2008, prepare the schema with adprep
command for 2008 on the 2000 Schema master and you have to add a 2008 server
as member server and run dcpromo on it. Then make it DNS server (choose AD
integrated zones) Global catalog server and move all 5 FSMO roles to the
2008 DC.
Good Luck!
If i promote it to AD, wouldn't all five FSMO roles automatically replicate over?
-
Hi!
Hope this can be of use. Your Server 2000 might not have the same roles as the one in this guide, but you'll get the general idéa
NOTE! I found this guide on http://forums.techarena.in/server-migration/1010582.htm
The general steps to migrate from Windows Server 2000 to Windows Server
2008 is almost the same as the steps to migrate from Windows Server 2003 to
Windows Server 2008.
Scenario:
Old server: Windows Server 2000 box
New server: Windows Server 2008 box
1. Verify that Windows 2000 SP4 have been installed on the old server and
Windows Server 2008 SP1 have been installed on the new server
Note: the domain functional level should be in Windows 2000 native mode for
the Windows 2000 domain.
2. Upgrade the Windows 2000 forest schema by running "adprep /forestprep"
command on old server
Note: you can copy the adprep folder from the Windows Server 2008
installation disc to the old server to run "adprep /forestprep".
The location is \source\adprep on the installation disc.
3. Upgrade the Windows 2000 domain schema by running "adprep /domainprep"
command on old server
4. Verify the new server's TCP/IP configuration has been pointed to
existing DNS server.
5. Add new server to existing Windows 2000 domain as a member server.
6. Run dcpromo on new server to promote it as an additional domain
controller in existing Windows 2000 domain, afterwards you may verify the
installation of Active Directory.
7. Enable Global Catalog on new server and manually Check Replication
Topology and afterwards manually trigger replication to synchronize Active
Directory database between 2 replica.
8. Disable Global Catalog on old server.
9. Use NTDSUTIL utility to transfer all the 5 FSMO roles from old server to
new server. You'd better transfer FSMO roles via GUI method instead of
using NTDSUTIL.
10. Install DNS component on new server and configure it as a new DNS
Server(Active Directory Integrated-Zone is preferred)
Note: all the DNS configuration need to be transferred from the existing
DNS Server.
11. Migrate DHCP service from Windows Server 2000 to Windows Server 2008
Please refer to:
How to move a DHCP database from a computer that is running Windows NT
Server 4.0, Windows 2000, or Windows Server 2003 to a computer that is
running Windows Server 2003
http://support.microsoft.com/default.aspx/kb/325473
(This should work on Windows Server 2008)
12. Migrate File Sharing service from
You can also use robocopy.exe from the Windows Server Resource kit to copy
the files and maintain NTFS permissions.
For the shares, the shares definitions and permissions are stored in the
following registry key on the server:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\lanmanserver\Shares
If you export out the whole key and import in the new server, and if you
have the files and folders in the same path as in the old server, then you
will retain all you shares and share permissions.
12. It's better to make the old DC offline for several days and check
whether everything works normally with the new server online. If so, you
may let the old DC online and run DCPROMO to demote it.
For more information, please refer to:
Identifying Your Windows Server 2008 Functional Level Upgrade
http://technet2.microsoft.com/window...03a77-d9ba-4a2
6-b756-eba5499f15581033.mspx?mfr=true
How To Install and Configure DNS Server in Windows Server 2003
http://support.microsoft.com/kb/814591/EN-US/
How To Convert DNS Primary Server to Active Directory Integrated
Thank you for the extensive explanation and steps. will try this in a lab environment first.
-
-
GOT IT!!!
To be honest i have no idea what the issue could have been. I went through your full SCCM doc and configured this sucker from step A to Z.
What i did notice was that WebDve was not setup. So i set it up according to MS and your docs. Disabled the firewall and configured the local admin account. It finally worked after ( i kid you not) 4 hours of playing around.
thanks for excellent documentation.
Saif
-
is the firewall enabled or disabled on the clients ? (disable it for testing purposes)
is the client installation account a local administrator of the computers you are attempting to install the client on ?
It didnt work. I have turned off the firewall and nothing.
I set the domain admin account as local admin account and nothing.
This is what the ccm.log file says:
Getting a new request from queue "Incoming" after 100 millisecond delay. $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 18:57:32.351 2010 Central Standard Time><thread=4760 (0x1298)>
Waiting for change in directory "C:\Program Files\Microsoft Configuration Manager\inboxes\ccr.box" for queue "Incoming", (30 minute backup timeout). $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 18:57:32.351 2010 Central Standard Time><thread=4760 (0x1298)>
======>Begin Processing request: "XSTRDCMH", machine name: "CL2-NY-XP" $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 18:57:32.352 2010 Central Standard Time><thread=4176 (0x1050)>
---> Trying the 'best-shot' account which worked for previous CCRs (index = 0x0)~ $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 18:57:32.352 2010 Central Standard Time><thread=4176 (0x1050)>
---> Attempting to connect to administrative share '\\CL2-NY-XP.saifahmadSPAM!\admin$' using account 'saifahmadSPAM!\supercoach'~ $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 18:57:32.353 2010 Central Standard Time><thread=4176 (0x1050)>
---> The 'best-shot' account has now succeeded 25 times and failed 6 times. $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 18:57:32.518 2010 Central Standard Time><thread=4176 (0x1050)>
---> Connected to administrative share on machine CL2-NY-XP.saifahmadSPAM! using account 'saifahmadSPAM!\supercoach'~ $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 18:57:32.518 2010 Central Standard Time><thread=4176 (0x1050)>
---> Attempting to make IPC connection to share <\\CL2-NY-XP.saifahmadSPAM!\IPC$> ~ $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 18:57:32.518 2010 Central Standard Time><thread=4176 (0x1050)>
---> Searching for SMSClientInstall.* under '\\CL2-NY-XP.saifahmadSPAM!\admin$\'~ $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 18:57:32.519 2010 Central Standard Time><thread=4176 (0x1050)>
---> System OS version string "5.1.2600" converted to 5.10 $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 18:57:32.688 2010 Central Standard Time><thread=4176 (0x1050)>
---> Service Pack version from machine "CL2-NY-XP" is 3 $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 18:57:32.689 2010 Central Standard Time><thread=4176 (0x1050)>
CWmi::Connect(): ConnectServer(Namespace) failed. - 0x8004100e~ $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 18:57:32.825 2010 Central Standard Time><thread=4176 (0x1050)>
---> Unable to connect to WMI ® on remote machine "CL2-NY-XP", error = 0x8004100e. $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 18:57:32.825 2010 Central Standard Time><thread=4176 (0x1050)>
---> Creating \ VerifyingCopying exsistance of destination directory \\CL2-NY-XP\admin$\system32\ccmsetup.~ $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 18:57:32.826 2010 Central Standard Time><thread=4176 (0x1050)>
---> Copying client files to \\CL2-NY-XP\admin$\system32\ccmsetup.~ $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 18:57:32.886 2010 Central Standard Time><thread=4176 (0x1050)>
---> Updated service "ccmsetup" on machine "CL2-NY-XP". $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 18:57:32.987 2010 Central Standard Time><thread=4176 (0x1050)>
---> Started service "ccmsetup" on machine "CL2-NY-XP". $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 18:57:33.066 2010 Central Standard Time><thread=4176 (0x1050)>
---> Deleting SMS Client Install Lock File '\\CL2-NY-XP.saifahmadSPAM!\admin$\SMSClientInstall.SAI'~ $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 18:57:33.068 2010 Central Standard Time><thread=4176 (0x1050)>
---> Completed request "XSTRDCMH", machine name "CL2-NY-XP". $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 18:57:33.071 2010 Central Standard Time><thread=4176 (0x1050)>
Deleted request "XSTRDCMH", machine name "CL2-NY-XP" $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 18:57:33.071 2010 Central Standard Time><thread=4176 (0x1050)>
<======End request: "XSTRDCMH", machine name: "CL2-NY-XP". $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 18:57:33.071 2010 Central Standard Time><thread=4176 (0x1050)>
The Site Control File has not changed since the last parameter update. $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 19:00:36.093 2010 Central Standard Time><thread=4936 (0x1348)>
Updating Site Parameters $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 19:00:36.093 2010 Central Standard Time><thread=4936 (0x1348)>
~MP Ports: 80 $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 19:00:36.094 2010 Central Standard Time><thread=4936 (0x1348)>
~MP SSL Ports: 443 $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 19:00:36.094 2010 Central Standard Time><thread=4936 (0x1348)>
~IISPreferedPort: 80 $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 19:00:36.094 2010 Central Standard Time><thread=4936 (0x1348)>
~IISSSLPreferedPort: 443 $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 19:00:36.094 2010 Central Standard Time><thread=4936 (0x1348)>
~Default MP: NY-MEM1-2K8 $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 19:00:36.094 2010 Central Standard Time><thread=4936 (0x1348)>
~SSL State: 0 $$<SMS_CLIENT_CONFIG_MANAGER><Tue Mar 02 19:00:36.095 2010 Centra
this is what the ccmsetup.log on the client says:
required.]LOG]!><time="17:57:26.654+360" date="03-02-2010" component="ccmsetup" context="" type="1" thread="1144" file="ccmsetup.cpp:4093">
<![LOG[Command line: "C:\WINDOWS\system32\ccmsetup\ccmsetup.exe" /runservice /config:MobileClient.tcf]LOG]!><time="17:57:26.654+360" date="03-02-2010" component="ccmsetup" context="" type="1" thread="1144" file="ccmsetup.cpp:4102">
<![LOG[CCMHTTPPORT: 80]LOG]!><time="17:57:26.654+360" date="03-02-2010" component="ccmsetup" context="" type="1" thread="1144" file="ccmsetup.cpp:8008">
<![LOG[CCMHTTPSPORT: 443]LOG]!><time="17:57:26.654+360" date="03-02-2010" component="ccmsetup" context="" type="1" thread="1144" file="ccmsetup.cpp:8023">
<![LOG[CCMHTTPSSTATE: 0]LOG]!><time="17:57:26.654+360" date="03-02-2010" component="ccmsetup" context="" type="1" thread="1144" file="ccmsetup.cpp:8041">
<![LOG[CCMHTTPSCERTNAME: ]LOG]!><time="17:57:26.654+360" date="03-02-2010" component="ccmsetup" context="" type="1" thread="1144" file="ccmsetup.cpp:8069">
<![LOG[FSP: ]LOG]!><time="17:57:26.654+360" date="03-02-2010" component="ccmsetup" context="" type="1" thread="1144" file="ccmsetup.cpp:8084">
<![LOG[CCMFIRSTCERT: 0]LOG]!><time="17:57:26.654+360" date="03-02-2010" component="ccmsetup" context="" type="1" thread="1144" file="ccmsetup.cpp:8126">
<![LOG[Config file: C:\WINDOWS\system32\ccmsetup\MobileClient.tcf]LOG]!><time="17:57:26.654+360" date="03-02-2010" component="ccmsetup" context="" type="1" thread="1144" file="ccmsetup.cpp:4497">
<![LOG[Retry time: 10 minute(s)]LOG]!><time="17:57:26.654+360" date="03-02-2010" component="ccmsetup" context="" type="1" thread="1144" file="ccmsetup.cpp:4498">
<![LOG[MSI log file: ]LOG]!><time="17:57:26.654+360" date="03-02-2010" component="ccmsetup" context="" type="1" thread="1144" file="ccmsetup.cpp:4499">
<![LOG[MSI properties: INSTALL=ALL" SMSSITECODE="SAI" CCMHTTPPORT="80" CCMHTTPSPORT="443" CCMHTTPSSTATE="0" CCMFIRSTCERT="0]LOG]!><time="17:57:26.654+360" date="03-02-2010" component="ccmsetup" context="" type="1" thread="1144" file="ccmsetup.cpp:4500">
<![LOG[source List:]LOG]!><time="17:57:26.654+360" date="03-02-2010" component="ccmsetup" context="" type="1" thread="1144" file="ccmsetup.cpp:4508">
<![LOG[ \\NY-MEM1-2K8.SAIFAHMADSPAM!\SMSClient]LOG]!><time="17:57:26.654+360" date="03-02-2010" component="ccmsetup" context="" type="1" thread="1144" file="ccmsetup.cpp:4515">
<![LOG[ \\NY-MEM1-2K8\SMSClient]LOG]!><time="17:57:26.654+360" date="03-02-2010" component="ccmsetup" context="" type="1" thread="1144" file="ccmsetup.cpp:4524">
<![LOG[MPs:]LOG]!><time="17:57:26.654+360" date="03-02-2010" component="ccmsetup" context="" type="1" thread="1144" file="ccmsetup.cpp:4527">
<![LOG[ NY-MEM1-2K8.SAIFAHMADSPAM!]LOG]!><time="17:57:26.654+360" date="03-02-2010" component="ccmsetup" context="" type="1" thread="1144" file="ccmsetup.cpp:4542">
<![LOG[updated security on object C:\WINDOWS\system32\ccmsetup\.]LOG]!><time="17:57:26.685+360" date="03-02-2010" component="ccmsetup" context="" type="0" thread="1144" file="ccmsetup.cpp:8849">
<![LOG[A Fallback Status Point has not been specified. Message with STATEID='100' will not be sent.]LOG]!><time="17:57:26.685+360" date="03-02-2010" component="ccmsetup" context="" type="1" thread="1144" file="ccmsetup.cpp:9330">
<![LOG[Running as user "SYSTEM"]LOG]!><time="17:57:26.685+360" date="03-02-2010" component="ccmsetup" context="" type="1" thread="916" file="ccmsetup.cpp:2690">
<![LOG[Detected 37773 MB free disk space on system drive.]LOG]!><time="17:57:26.685+360" date="03-02-2010" component="ccmsetup" context="" type="1" thread="916" file="ccmsetup.cpp:463">
<![LOG[DetectWindowsEmbeddedFBWF() Detecting OS Version]LOG]!><time="17:57:26.685+360" date="03-02-2010" component="ccmsetup" context="" type="1" thread="916" file="ccmsetup.cpp:509">
<![LOG[Client OS Version is 5.1, Service Pack Version 3]LOG]!><time="17:57:26.685+360" date="03-02-2010" component="ccmsetup" context="" type="1" thread="916" file="ccmsetup.cpp:533">
<![LOG[Client OS is not a supported Windows Embedded Platform]LOG]!><time="17:57:26.685+360" date="03-02-2010" component="ccmsetup" context="" type="1" thread="916" file="ccmsetup.cpp:535">
<![LOG[successfully ran BITS check.]LOG]!><time="17:57:26.950+360" date="03-02-2010" component="ccmsetup" context="" type="1" thread="916" file="ccmsetup.cpp:7105">
<![LOG[Failed to successfully complete HTTP request. (StatusCode at WinHttpQueryHeaders: 404)]LOG]!><time="17:57:26.982+360" date="03-02-2010" component="ccmsetup" context="" type="3" thread="916" file="ccmsetup.cpp:5969">
<![LOG[A Fallback Status Point has not been specified. Message with STATEID='308' will not be sent.]LOG]!><time="17:57:26.982+360" date="03-02-2010" component="ccmsetup" context="" type="1" thread="916" file="ccmsetup.cpp:9330">
not working!
-
is the firewall enabled or disabled on the clients ? (disable it for testing purposes)
is the client installation account a local administrator of the computers you are attempting to install the client on ?
I never thought about that. I will give it a try when i get back to the lab. Will post back with my results.
thank you
Saif
-
My setup:
AD 2008 running in native mode.
Domain controllers:
PriDC1
SecDC2
2008 standard server with SCCM 2007 sp2 / SQL installed.
SCCMSvr
Client macnines:
ClientXP1
ClientXP2
I have installed SCCM to run in mix mode on my SCCM sever. I followed all the guidelines, installed all the prerequisites (by running the prechecker and fixing all the issues: extending the schema, installing iis, webdav, remote differental and so on...). Everything installed without any issues. I was able to go in and set my boundaries (currently set to Active Directory). I was able to go into Client installation methods and check all that.
When i go down to All systems, i do see all my systems on my network, but the issue is when i click to install client, nothing happens. under Assigned it says "Yes", but under Client it says No".
I have gone over all my documentation and i cannot figure out why this is happening. PLEASE HELP!
WSUS Proper configuration
in WSUS
Posted
OK so i have figured it out to this point:
1. i have WSUS installed and it is downloading updates.
2. Under the All updates section, when i set the filters to any, any, i see a whole bunch of yellow exclamation icons and for each update it says at the bottom "this superseded by another update....." so how do i find the update before it and install it? Also, next to the yellow exclamation icons in the All Updates, it also says Install count 2 , not applicable count 77 , install/not applicable 98% and approval install . What does that mean? I have read the documentation, but i do not understand this part.
Thank you