Complex server migration (cc4 to vanilla problems: rootkit + corrupted hard drive)

[TheGoodGuy]

Hello all,

 

I am planning a server migration from an old CC4 server (win 2003) that has problems with a corrupted hard drive and a rootkit that seems to be contained but not removed.

 

I have installed server 2012 on the new server, setup the dns (increased the range and changed subnet so we can have more devices) and the DHCP, AD etc and tested it via mini network to be sure it is working.

 

The thing is i'd like to make sure that I have all the updates for windows, sql server etc and the easiest way to do that would be to use windows update but that would mean connecting to the old network. I have setup the new server to be on a different domain (as the schools have changed names), so is it possible to access the internet without interacting with the old server? Would there be a risk of the rootkit spreading to the new server?

 

Any thoughts are welcome,

 

Cheers,

Paul

[Meldrew]

When we did our migration from CC3 to vanilla, I made sure that the old and new networks were on totally different cabling, so there was absolutely no chance of there being interference between the two.

 

If I were you I'd do the same and for internet access, setup a firewall (ie endian on an old desktop PC with 2 NICs) between the two so you know that there's only Internet traffic between the two.

 

Meldrew

[TheGoodGuy]

So is the firewall pc connected to a domain at all? Never set one up before so I am curious as to how it works.

 

Are there any guides anywhere for doing such a thing?

Edited August 16, 2013 by TheGoodGuy

[TheGoodGuy]

Guess I will try using internet connection sharing.

[TheGoodGuy]

Got it working now. Thanks all. Edited August 20, 2013 by TheGoodGuy

[psydii]

Could you not build a new WSUS server standalone (keeping the firewall enabled), and pull all the windows / server updates onto that... then move it to the new network and point your new servers at the new WSUS server?

 

If you needed to be very careful you could build it away from either network, and just before school closes for the day unplug the CC3 network from the firewall and plug the new WSUS server directly into that to avoid exposing it to any potentially infected machines while it pulls down the necessary updates overnight?