Raising the functional level of the domain from 2000 to 2003

[Bruce123]

Has anyone had any experience of raising the functional level of the domain?

 

I plan to raise the functional level of our domain from 2000 native to 2003. I have done some research and it appears as it only affects the way DCs communicate with each other (and the internal ADS database of the DCs) and not how member servers/clients communicate with the DCs, so it should not cause many or any issues.

 

All the DCs are 2008, but I thought that a smaller step (to 2003) might be preferable.

 

As a precurser, I've checked the event logs on the DCs for any errors, ran a tool to verify replication, deleted a lot of old GPOs and old network accounts, and done a full backup of a DC (to get a snapshot of ADS)

 

The main reason for raising that another project that I am working on (Data Protection Manager 2010) requires the level to be 2003 (or more).

 

We have OFSTED coming in a couple of weeks, so I think we will gave to defer raising the level until after the inspection, just in case.

 

Thanks,

 

Bruce.

 

Leeds, UK.

[ChrisH]

You are correct in saying the DFL is mostly to do with the domain controllers. You will not notice much difference or issues by raising the level. You will need to do the forest level first. I would go to 2008 if I were you.

[EduTech]

I'll 2nd what chris has said, if you no longer have any 2000/2003 Domain Controllers, I would Raise the Domain Fuction Level to 2008 As Christ said your right it only effects the way the Domain Controllers talk to each other etc. so providing you have no Domain Controllers running on 2000/2003 you will be fine to go ahead to 2008

 

James.

[glennda]

Yeah you should be able to do that without any problems - again I would recommend going to 2008 as it saves you doing it at a later stage.

[Bruce123]

Thanks everyone for the advice, I think just to be careful we'll wait until OFSTED have been, the momet the step out of the door.... I am keen to get DPM 2010 setup.

[gshaw]

Will be interested to see how DPM works for you, feedback I've had so far is either that's it's brilliant or useless, with nothing in between!

[Arthur]

I would Raise the Domain Functional Level to 2008

Would it be worth raising the forest functional level too?

[maark]

2 things

dpm 2010 has been good here but you really need firestreamer to get data to external disks - I am using it but have not raised domain level to 2008 yet.

If you have exchange 2003 be careful - search other threads as there is a warnng about effect of raising domain level to 2008.

[Domino]

Probably not an issue, but worth mentioning - if you've any older Unix or Linux boxes that authenticate with the domain it's worth checking the samba, PAM and ldap resources all support the newer schemas.

 

We had issues with some older CentOS and Redhat boxes here when we went to 2008

[Bruce123]

Thanks for all of the feedback over the last few days; we will certainly take it into consideration.

 

Yes we are still on Exchange 2003, and we have one linux box (SugarCRM).

 

I hadn't considered the need to raise the Forest level as there is just the one domain in the Forest, but I guess this needs doing first?

 

I will update this thread on how we get on with DPM2010, I have seen the same feedback. Either it's brilliant and "just works" or rushhish and "could never get it to work and gave up".

 

I am hoping were's in the former, as we have invested a lot of time and money (on the hardware and software).

 

Re Firestreamer, that was the plan, but we are considering a use a tape drive (once per week), rather than firestreamer, since this is natively supported by DPM2010.

 

I really don't know how people afford the likes of BackExec...

 

Thanks,

 

Bruce.

[chazzy2501]

also Windows ME machines won't be able to login either.

 

I had 1!

[Domino]

also Windows ME machines won't be able to login either.

 

I had 1!

 

KILL IT!

 

KILL IT WITH FIRE!

[EduTech]

Would it be worth raising the forest functional level too?

 

Yeah Of Course! I just forgot to add it lol

 

[Arthur]

Yes we are still on Exchange 2003.

In that case you are going to have to stick with a forest and domain functional level of 2003.

 

http://blogs.dirteam.com/blogs/davestork/ExchangeandDFL_6FD869AB.png

 

http://blogs.dirteam.com/blogs/davestork/ExchangeandFFL_799D0F7C.png

 

The 2008 DFL is only supported from Exchange 2007 SP1 and higher. Neither Exchange 2000 and 2003 can function with a 2008 FFL. More details here.

[Bruce123]

With the Full OFSTED inspection now a distant memory, I plan to raise the Functional Level of our Forest then Domain from 2000 to 2003.

 

Hopefully I will have time to do this this afternoon (after doing a full backup of a DC with the FSMO roles). Would there be any problems with do this while people are still logged on? MS don't provide any info on this in the guidance article, or maybe they just assume that no users will logged on or logging on as the process takes place? But as it is half term week, there aren't many users on (just a few staff).

 

We will then progress with the DPM 2010 project. I will provide an update on here as some people have expressed an interest in how it goes.

 

We have 4x NASes for the continuous backup storage and DPM will be installed onto a Dell R200 server dedicated to DPM. We plan to purchase a Quantum auto changer (8 slots) LTO-5 1.5TB Tape drive for the long term (offline) backups (either full backup each day or just Fridays, yet to be decided).

 

I have my doubts about depending on Firestreamer (VTL software) to portable USB as I am concerned what would happen if the company behind Firestreamer goes under.

 

Thanks, Bruce.

 

Leeds, UK.

Edited February 25, 2011 by Bruce123

[timzim]

Would there be any problems with do this while people are still logged on?

 

Shouldn't be. I've done this with people logged in.

[Bruce123]

Forest then Domain....

 

Here goes.... fingers X-ed!!

 

Bruce.

[Bruce123]

That was painless!