Announcement

Collapse
No announcement yet.

Recommendation for Server 2003 to Server 2008 Migration!

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Recommendation for Server 2003 to Server 2008 Migration!

    Hi,

    We have a very small network consisting of five servers. All five of them are running Server 2003 Standard edition with latest patches and updates. One of them is the main central server that is running following services:

    - Domain Server
    - Active Directory
    - DHCP, and
    - RRAS (VPN and NAT using two Ethernet cards)
    - Symantec Endpoint Protection Manager

    Other four servers are members of the main server domain and are running SAP ERP software. We use the main server as the gateway to connect to SAP ERP remotely via VPN. Due to the very slow performance of the main server we decided to bring in a new and better server and also thought that this would be the right time to upgrade the main server to Windows Server 2008. So, now we have this new server with Windows Server 2008 Standard Edition pre-installed.

    Now, my question is how should we move all current running services from our main server to the new server? What sequence should we follow so that the other four domain members do not cause any problem and continue working normally with the new server?

    We would really appreciate your response on this.

    Thanks and Regards,
    Vasu

  • #2
    Re: Recommendation for Server 2003 to Server 2008 Migration!

    Personally I really would recommend to not using a DC as Remote Access (VPN/NAT) server.
    Rather let this handle by a firewall like a Cisco ASA, Juniper, Microsoft ISA/TMG, Check Point or what ever...
    Marcel
    Technical Consultant
    Netherlands
    http://www.phetios.com
    http://blog.nessus.nl

    MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
    "No matter how secure, there is always the human factor."

    "Enjoy life today, tomorrow may never come."
    "If you're going through hell, keep going. ~Winston Churchill"

    Comment


    • #3
      Re: Recommendation for Server 2003 to Server 2008 Migration!

      Thanks for the suggestions Dumber. We have been thinking of getting Microsoft TMG on the new server but only after migration.

      What about other services (AD, DNS and DHCP)? How should we migrate those services?

      Personally we are feeling a little nervous when we think of AD and DNS migration.

      Regards,
      -V

      Comment


      • #4
        Re: Recommendation for Server 2003 to Server 2008 Migration!

        Keep TMG on a seperate server and do not combine them with a DC or whatever.
        The AD migration doesn't have to be hard...

        Add the Windows 2008 as an addition DC, and install DNS.
        For DHCP, recreate the scope or if you have loads of DHCP scopes, you can backup and restore with Netsh.
        Marcel
        Technical Consultant
        Netherlands
        http://www.phetios.com
        http://blog.nessus.nl

        MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
        "No matter how secure, there is always the human factor."

        "Enjoy life today, tomorrow may never come."
        "If you're going through hell, keep going. ~Winston Churchill"

        Comment


        • #5
          Re: Recommendation for Server 2003 to Server 2008 Migration!

          Thanks again Dumber. I was checking for some hardware VPN's (like Cisco ASA) as another option and I was wondering that the server would still need to run NAT service (to provide internet connectivity to private network)? Or is there any other option to avoid this?

          Thanks and Regards,

          Comment


          • #6
            Re: Recommendation for Server 2003 to Server 2008 Migration!

            ASA will do NAT, just like other firewalls.
            The DC doesn't need to do NAT or VPN or whatever. Just let him be a DC.

            However keep in mind that with firewalls other then ISA/TMG you probably need to buy additional licenses for VPN client software with their licenses.
            Personally I'm quite fond of ISA or TMG the next generation.
            Marcel
            Technical Consultant
            Netherlands
            http://www.phetios.com
            http://blog.nessus.nl

            MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
            "No matter how secure, there is always the human factor."

            "Enjoy life today, tomorrow may never come."
            "If you're going through hell, keep going. ~Winston Churchill"

            Comment

            Working...
            X