Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
amishpurple
Jul 21, 2006

I'm not insane, I'm just not user-friendly!

Crazak P posted:

I hope this is the right place to ask.

I'd like to upgrade our active directory domain controllers from windows 2000 to windows 2008. I'm wondering if it's possible to add a 2008 domain controller to a 2000 AD schema after I run adprep? Then I could just give the new 2008 DC all the roles, demote the other DCs, format and install 2008 on the old DCs, then promote them back.

We currently have four DCs and I'm about to demote two of them. The remaining two DCs would be virtualized, so I can test run adprep. We were thinking of pairing our domain controllers down to only two machines, one physical and one virtual, but maybe we want more. We have about 300 users. Am I going about this the right way?

Yep just run adprep on the 2000 schema master and you'll be able to install a new 2008 server as a DC. May as well go 2008 R2 (run adprep32 instead if you do) unless you have a specific reason to just stay on 2008, though. Transfer all the roles to the new 2008 server then unjoin the other DC's from the domain and you're good to go to raise the functional and domain levels.

If you go the one virtual, one physical route make sure the physical DC has the PDC Emulator role or be sure to read your vendors documentation on virtualizing domain controllers so you can avoid clock drift issues on the VM.

Two DC's for 300 users is just fine.

Adbot
ADBOT LOVES YOU

amishpurple
Jul 21, 2006

I'm not insane, I'm just not user-friendly!

LoKout posted:

It might be an issue with 2k8. By default it uses an authentication method that Samba doesn't support, but it will fall back to a less restrictive one if that fails. I read about that in an article just yesterday. You might try finding some settings (in local policy perhaps) relating to NTLM versions or look around on Microsoft's site for slow 2k8 login with a Windows 2000 PDC - that would simulate a similar environment to Samba.

I've seen the settings before but I'm drawing a blank right now. Sorry for not being more specific, but hopefully it helps.

He could be on to something here. Check the below registry key on the 2k8 box and maybe try setting it to 0:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\LmCompatibilityLevel

amishpurple
Jul 21, 2006

I'm not insane, I'm just not user-friendly!
Question for the SCOM pro's. I just started a new job and the previous SysAdmin installed SCOM 2012 but it's pretty much an out of the box setup. It seems like SCOM is a little overzealous and a CRITICAL alert is generated for everything even the stupidest poo poo. I did find this http://blogs.technet.com/b/kevinholman/archive/2008/06/26/using-opsmgr-notifications-in-the-real-world-part-1.aspx which helped me setup a subscription for only High Priority Critical alerts and that has definitely reduced the noise quite a bit.

I'm wondering if following the article's suggestion of adding Overrides on priority to the stuff you want to actually be paged/emailed for is still the recommended way in SCOM 2012? Or is there a better guide/way to start customizing these alerts so I'm actually getting notified on what I want? Any other general advice, words of wisdom, or links to good reads on SCOM 2012 also appreciated, thanks.

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply