Switching from Mixed to Native Mode (windows 2000 Active Directory)

  • Thread starter Thread starter Steve.Johnsenson
  • Start date Start date
S

Steve.Johnsenson

I'm working in a network with multiple Linux servers, with a mixed mode
Windows 2000 domain for user authentication. I'd like to move the
domain from mixed mode to native mode in order to clean things up
before moving the domain to 2003 and and eventually rolling out
Exchange 2003.

I do not have any NT4 domain controllers running on the network. Are
there any things I should consider before moving from mixed to native?
I do not want to lock out any users or systems in the process.

Thanks

-SJ
 
I'm working in a network with multiple Linux servers, with a mixed mode
Windows 2000 domain for user authentication. I'd like to move the
domain from mixed mode to native mode in order to clean things up
before moving the domain to 2003 and and eventually rolling out
Exchange 2003.

I do not have any NT4 domain controllers running on the network. Are
there any things I should consider before moving from mixed to native?
I do not want to lock out any users or systems in the process.

Thanks

-SJ
Click to expand...

See tip 3963 » How do I use the GUI to convert your Windows 2000 domain to native mode?
and LINKS in the 'Tips & Tricks' at http://www.jsifaq.com

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com
 
I'm in a situation where my company decided (against my advice) to
install a demo version of Exchange 2003 on our production network &
domain (2000 AD). The individual who installed it just hit ignore and
skip everytime a warning came up during the exchange install.

Now they want to deploy exhange in with a fully licensed server, on
decent hardware, etc. and the project has been handed over to me.

I would like to uninstall exchange completely and set everything up
from scratch, especially since I didn' t have any input on the last
setup. I'm wondering, however, how cleanly an Exchange install will be.
Is it likely to do more damage to uninstall & reinstall from scratch or
to try to cleanup the existing "demo" installation.

Any thoughts?

Thanks,

-SJ
 
I've removed exchange (using the /removeorg utility) however I'm still
having a bit of a problem. Exchange does not appear to be completely
removed from AD, plus when I attempt to do a reinstall I get an error.
If I try to run again with the "/removeorg" switch I get the following
error"


"The Component "Microsoft Exchange Forest Preparation" cannont be
assigned the action "RemoveOrg" because:
-to install the first Exchange server in a domain, or to run setup in
"/ForestPrep" mode, you must be an Exchange Full Administrator at the
organization level. You must use an account that has been granted the
Full Exchange Administrator role on the Exchange organization using the
Exchange Administrative Delegation Wizard."

At this point if I try to do anykind of setup of exchange I get the
same error (just replace the "removeorg" with whatever task I am
attempting to do at the time.

Any tips?
=
Steve
 
Re: Forest Prep errors - maybe earlier exchange setup related?
Andi said:
I know that ideally "I wouldn't be starting from here" but I hope
somebody can help me out. We are trying to deploy an exchange server,
and I gave the job to one of the technicians who failed to do what he
was asked/misled me regarding process/failed to document what he'd
done/etc. I've had to take over the job part way through. I do know that
he had installed Exchange on one of the servers, but then uninstalled it
again. He believes he 'undid' the changes made by domain prep but is not
sure what he did regarding the forest prep changes.

I'm working my way through installing Exchange again, working with the
instructions for 'first exchange server' which this will be. When I
tried to run ForestPrep it errored with: "The component "Micrsoft
Exchange Forest Preparation" cannot be assigned to the action "Forest
Prep" because: - To install a 1st exchange server in a domain, or to run
setup in "/ForestPrep" mode you must be an Exchange Full Administrator
at the organization level. You must use an account that has been granted
the full Exchange Administrator role on the Exchange Administrator
Delegation Wizard." The account I'm using is a Domain Admin account.
This error sort of suggests that the Domain 'thinks' it has Exchange
related accounts already, and when I checked in AD there are two groups
"Exchange Domain Servers" and "Exchange Enterprise Servers".

I really need to get this up and running, but due the the history of
this project I have no idea of what situation I'm working in! Any help
would be very gratefully recived here!
Click to expand...

I think my problem is exactly like Andi's

I ran "/removeorg" once but it didn't seem to remove everything and now
it gives me that error and won't let me run it again, or run forestprep
to do a new install.
 
I ran "/removeorg" once but it didn't seem to remove everything and now
it gives me that error and won't let me run it again, or run forestprep
to do a new install.
Click to expand...

Sorry to keep responding to myself, but I wanted to add one other
note..

I was reading this article:
"http://www.msexchange.org/tutorials/Remove-Exchange-server-entire-Exchange-organization.html"

It mentions using ADSI edit to remove the server, and I looked. The
server isn't mentioned there. However there are a number of Exchange
system objects listed. Is it OK to manually delete them in ADSI edit if
the "setup /removeorg" switch did not work?
 
Steve said:
I was reading this article:
"http://www.msexchange.org/tutorials/Remove-Exchange-server-entire-Exchange-organization.html"

It mentions using ADSI edit to remove the server, and I looked. The
server isn't mentioned there. However there are a number of Exchange
system objects listed. Is it OK to manually delete them in ADSI edit if
the "setup /removeorg" switch did not work?
Click to expand...

Here's another discussion thread on the topic:

http://www.mcse.ms/archive80-2005-5-1610302.html

Looks like this guy (after trying advice from Leif) went through and
blew away tree with ADSI edit.

Scary, but I may have to try something like that.
 
Steve said:
I was reading this article:
"http://www.msexchange.org/tutorials/Remove-Exchange-server-entire-Exchange-organization.html"

It mentions using ADSI edit to remove the server, and I looked. The
server isn't mentioned there. However there are a number of Exchange
system objects listed. Is it OK to manually delete them in ADSI edit if
the "setup /removeorg" switch did not work?
Click to expand...

Here's another discussion thread on the topic:

http://www.mcse.ms/archive80-2005-5-1610302.html

Looks like this guy (after trying advice from Leif) went through and
blew away tree with ADSI edit.

Scary, but I may have to try something like that.
 
I guess the reason may you are using the account which is not same as the one
your technican using when he perform forestprep.

Try to do a forestprep again and then do a domainprep. There should have no
problem if you using a same account to install the Exchange again. However,
remember that the account using to install Exchange should have Local
Administrator privilege in the Exchange Server and have administrative level
in the Exchange organization (The one you are using to do the forestprep).

There have a place to specify a Exchange Admin account when you perform
forestprep. You can using the account which is not the same as the one you
logged to performing Forestprep.
 
wickydog said:
I guess the reason may you are using the account which is not same as the one
your technican using when he perform forestprep.

Try to do a forestprep again and then do a domainprep. There should have no
problem if you using a same account to install the Exchange again. However,
remember that the account using to install Exchange should have Local
Administrator privilege in the Exchange Server and have administrative level
in the Exchange organization (The one you are using to do the forestprep).

There have a place to specify a Exchange Admin account when you perform
forestprep. You can using the account which is not the same as the one you
logged to performing Forestprep.
Click to expand...

It happens with the same account and/or a different administrative
account.


The error prevents you from getting to the place in the forest prep
process where you have an opportunity to specify an account anyway.
 
Back
Top