Decommisioning 2003 with Directory Services/Exchange/Certificate Authority

-

i have server 2003 sp2 standard server used physical box. it's running exchange 2003, directory services , certificate authority. used fsmo role holder.

two server 2012 servers installed , both configured domain controllers. 1 of these took on fsmo roles.

the 2003 server virtualized p2v. then, because of snapshot rollback, server fell usn rollback state. since time, have raised it's priority level unlikely handle authentication requests logon attempts.  also, have installed new server 2003 virtual machine that's running exchange 2003 , migrated mailboxes it. have yet decommission old exchange server because i'm not sure of step take next gracefully decommission it. plan on migrating office 365, sooner better.

i want remove certificate authority , demote can turned off good.this server has been headache since inherited network year ago.

my questions are:

do need remove exchange before start messing ca?

can install new server 2012 ca or have migrate ca 2003 2012?

if can install new server 2012 ca without touching ca on 2003, have worry corruption when demote 2003 server?

vr//

brian mc

both exchange , ca must removed before allow demote properly. 1 of reasons exchange, ca or sql or other major app/service, should not installed on dc.

to remove exchange, must install exchange server in organization move mailboxes, public , system/hidden folders (which include org guid).

however, if dc exchange on won't communicate due usn rollback, new member server exchange installed, other option export ca config, export certificates, export mailboxes , public folders pst files, dump box , run metadata cleanup. way can install ca on new member server, , exchange on member server, , import mailboxes.

exchange:

you can use exmerge export in exchange 2003:
http://www.microsoft.com/downloads/details.aspx?familyid=429163ec-dcdf-47dc-96da-1c12d67327d5&displaylang=en

how use exmerge tool upgrade exchange 2000 server or exchange server 2003
http://support.microsoft.com/kb/327304

-

ca:

how manually remove enterprise windows certificate authority windows 2000/2003 domain
http://support.microsoft.com/kb/555151

how decommission windows enterprise certification authority , how remove related objects windows server 2003 , windows server 2000
http://support.microsoft.com/?id=889250

howto: move certificate authority new server running on 2003 or 2008 ca, standard or enterprise (same windows 2008 r2 , 2012)
http://directoryservicesconsulting.ca/index.php/2009/04/17/howto-move-a-certificate-authority-to-a-new-server-running-on-a-domain-controller/

ace fekay
mvp, mct, mcitp/ea, mcts windows 2008/r2 & exchange 2007, exchange 2010 ea, mcse & mcsa 2003/2000, mcsa messaging 2003
microsoft certified trainer
microsoft mvp - directory services
technical blogs & videos: http://www.delawarecountycomputerconsulting.com/

this post provided as-is no warranties or guarantees , confers no rights.

facebooktwitterlinkedin




Windows Server  >  Directory Services



Comments

Post a Comment

Popular posts from this blog

server manager error: ADAM.events.xml could not be enumerated.

-
firewall off isnt it. rerun ldap wizard:?  why?  will screw exchange server running on machine?  ldap wizard asks questions don't understand. please dont send generic links to: http://social.technet.microsoft.com/wiki/contents/articles/13444.windows-server-2012-server-manager-troubleshooting-guide-part-ii-troubleshoot-manageability-status-errors-in-server-manager.aspx thanks, john hi john, >> ok. server manager app. these questions refer this. nothing else 2.  do need create app dir or not?  this server manager, shouldnt done? (why did break in first place?) how check if app dir exists server manager or not. 3.  if "lightweight" implementation of anything, sure hate see "heavyweight" version. the waring events can't enumerated. , cause not completing configuration of ad lds. ad lds not related server manager. used provide flexible support directory-enabled applications. if not implementing such applications, remove role. her
Read more

Cannot access Anywhere Access using domain name?

-
after installing anywhere access in windows server 2012 essentials r2, cannot use anywhere access using setup domain name in wizard such remote.mydomain.com? if enter public ip address, example, 72.2.34.5 works. before set anywhere access, created a record pointing public address...pinged , worked...so not sure doing wrong?  is wizard supposed create record etc , make remote.mydomain.com work? if enter public ip address while on lan, takes me router webpage.  shouldn't work on lan if accessed via public ip? thank you, tim. the wizard can configure remote.microsoft_names.com  remote.remotewebaccess.com but cannot configure domains purchased outside wizard.  depends on how domain configured if wildcard.yourdomain.com should work  if try ping remote.your_domain.com afar , not give proper  public ip, need add record mariette said. much have record domain.com www.domain.com , if have website somewhere else www.domain.com , need remote.domain.com go box gr
Read more

WMI Failure: Unable to update Local Resource Group

-
Image
hi i have windows server 2008 r2 enterprise terminal services installed. this has been working fine, unable add new computers local computer groups policy on rd gateway manager i following error wmi failure: unable update local resource group  just confirm on , resource authorization policies then manage local computer groups hi hussain, posting in windows server forum. firstly please let know, did find particular event log issue? please ensure have configured rap settings correctly , set correct value , permissions rap.xml file , rapstore registry key. please check below thread more details. 1. wmi failure- unable create resource access policy (answered clarence) 2. event id 543 — rd gateway server configuration 3. event id 642 — rd gateway server availability hope helps! thanks, dharmesh Windows Server
Read more