Monday, January 12, 2009

SBS 2008 Migration Notes

Installed SBS 2008 #1 on new server
Brought laptop on wireless and wired network
Removed NetGear ProSafe firewall
Installed SOnicWALL TZ180
Called Cox to get IP address information
Confirmed IP with whatismyip.com
COnfirmed DNS pointers by doing a dig on the nameservers
Followed TechNet SBS 2008 instructions to confirm the following:
- Service pack levels
- Verify network settings (change to operate with only one nic, run IECWI, disble VPN)
- Raise domain and forest functional level from 2000 to 2003
No DVD available on old server
Downloaded the VirtualCDXPControlPanel to old server
Mounted SBS 2008 #1 .iso
Ran SBS 2008 Answer file tool from mounted .iso
Confimed answers with Steven
Chose SERVER1 & 192.168.16.10 for new server
New server already booted to Continue installation screen (not good)
Copied answer file to thumb drive
Connected new server to network
Inserted thumb drive
Clicked Next and confirmed Time/Date settings
Checked for Updates
Had to restart
At that time, I took the opportunity to address Dell shipped RAID (unusual 2 partitions on the RAID 5 container, also re-initialized the RAID 1 to delete the SBS 1st attempt)
Reinstalled, entered Product Key
Started 6:40pm
In the meantime, configured all Sonicwall Security Services
- Content Filter
- Gateway AV
- Intrusion Prevention
- Anti-Spyware
Updated SOnicwall firmware to 3.9.0.1
Exported Sonicwall settings
At roughly 7:10, the installation partially completed and used the answer file
Error that prevented completion, required Adprep not run on old server
Remounted .iso, and ran the following after ensuring no other DCs:
- adprep /forestprep (approx 15 minutes)
- adprep /domainprep
While waiting for adprep, added TermServ rule from Deltyme to new server
Also, required to install the KB943494 hotfix located in the Tool folder in the .iso
Pressed the Check Again button at 7:38pm
At approx 8:15pm received a meesage about AD repl taking a long time and asked if I wanted to continue to wait
At 8:30pm turned off the rule for SMTP to old server on the firewall
Concerned that maybe I need to reboot old server (did not reboot after hotfix and adprep)
Decided to reboot at 8:35pm on old server
Old server has degraded RAID (to be addressed)
Monitor back on new server at 8:45pm
On new server, GPO Task Processor failed (could have issues, but not sure if the GPOs will have much effect)
At 8:58pm the new server has rebooted (at least once) and appears to be continuing normally
At 9pm installation finished, but some non critical issues were encountered:
- The Cert Authority component cannot be configured
- Exchange Server 2007 cannot be installed
- The required Active Directory structure was not created
- The Group Policy setting for the virual private network cannot be created
- The required Active Directory structure was not created (again)
- Window Small Business Server group policies cannot be configured
- Windows Server Update Services cannot be configured
- Incoming and ougoing e-mail for Window SharePoint Services are not configured
- Incoming and ougoing e-mail for Window SharePoint Services are not configured (again)
- Window SharePoint Services is not configured
User the Windows SBS Console to try to handle issues
- Starting with Fix My Network (recommend 1st step)
No luck, the old server and new server did not complete properly
10pm calling MS emergency support
Case # SRX081205601735
10:05pm begin waiting for a callback
Tested remote access to new server
Callback aroun 10:45pm
MS tech looked at errors and recommended starting from scratch
Required Directory Service Restore (SBS DRS password is synched with administrator)
Ran restore on old server without any issues
In the meantime, I decided it would be a good idea to have my own backup copy so I copied the Thursday night backup (~117gb) to my Acomdata USB drive
Wiped RAID 1 partition on new server again using CNTRL-R and FastInit
Reinstalled SBS 2008 #1 on new server
Checked http://technet.microsoft.com/en-us/library/cc546034.aspx for any missed steps and reperformed steps
- Ran Internet connection wizard
- Raised domain and forest levels
- Installed STS SP3 (missed)
- Reran Adprep commands
- Reinstalled the hotfix
Continued installation
New server auto reboot at 1:45am
Note: Recommend having a movie or music on a laptop to keep yourself entertained
New server auto reboot again at 1:50am
Starting to see some slow progress at 2:20am
New server auto reboot again at 2:30am
2:45am viewing installation errors with MS tech because Exchange 2007 didn't install again
http://technet.microsoft.com/en-us/library/cc626197.aspx
Exchange wasn't in native mode
Not documented in the SBS 2008 Technet article (complained to MS tech about it)
Start over again at 3:50am

Important checks on source server
Service Packs and software
- SBS 2003 SP1
- Windows 2003 SP2
- Exchange 2003 SP2
- WSS (STS) SP3 is 11.0.8173.0 after install (check from Add/Remove, Support Info)
- Companyweb level in SharePoint Central 6.0.2.8165
- Verify .NET 2.0 or greater
- MSXML 6 SP1 or greater
- MS SQL MGMT 2005 SP2
Internet connection wizard (disable other network adapters)
Raise levels
- Forest
- Domain
Check for hotfix
Run SBS BPA
Take NTBackup of System State
Run Migration Tool from .iso which does the following
- Rerun adprep (/forestprep, /domainprep, /domainprep /gpprep)
- Exchange to Native Mode

Wiped RAID 1 on new server
Started install from CD
Noted procedure that states when to insert USB key (after language, before pressing Install Now)
5:39am manually confirmed time
6:41am installation complete with only one warning about an update that wasn't installed
Begin to perform Migration tasks
- Prior to doing any tasks, it was recommended to perform a complete backup of the new server
- Used my Acomdata (it formats the drive)
- Started backup job manually at 6:55am, finished in about 20 minutes for 22gb

Followed TechNet article with great care

7:40am began moving mailboxes
23 mailboxes, approx 13gb
10:45am, wow, completed finally, no errors


10am entered Frontbridge SMTP rules on SOnicwall
10:15am turned off allow all SMTP until Sam instructs me about spam prevention
10:30am sent an email to Premier Support requesting DNS change or login info for DNS Control Panel

Enabled Circular logging on new server

Noticed space on E: drive was extremely low, Circular logging wasn't turned on there
Turned it on and reclaimed some space

11am waiting on a callback from Sam


Sundday:

12pm copy Finances from \\server\finances on old server to D:\Finanances on new server
Reviewing Sam's email
Troubleshooting email issues
Testing http:\\remote.imaginationent.com
- Requires that the CertTrust package be installed from new server on PC
- Emailed myself the InstallCertPackage, installed on laptop
- Added remote.imaginationent.com A record to Apollo DNS
- Temporarily added host record on laptop to test
- Had to enable the Terminal Service Active X control on IE7
- remote.imaginationent.com is working properly

Found artcile on SBS 2008 Exchange AntiSpam (built-in) and requirement to add trusted SMTPServers to allow all email from EHS/Frontbridge (placed as a solution in SupportCenter)

Followed instructions on the Remote site to configure Outlook Anywhere and it works fine (requires InstllCertPackage)

2:20pm going to test Windows Mobile
- Run InstallCertPackage with option to install to mobile device

2:35pm begin copy of Users Shared Folder from old server to new server
Remove old server Group Poicy Objects according to TechNet - http://technet.microsoft.com/en-us/library/cc527585.aspx

Tested InstallCert, OWA, Remote, SharePoint, Outlook Anywhere with Sam, but it required a host entry for remote.imaginationent.com. Waiting fo Apollo hosting to update DNS (propogate). Received confirmation that it would be done by 9:45pm tonight.

Realized that I should use the Migration Wizard to relocate the Users share
Also, moved the Redirected Folder using the wizard as well

robocopy\\\Users\\\UserShares/E /COPY:DATSOU /LOG:C:\Copyresults.txt

Actually, it looks as thought they only use those Users folder on the old server for folder redirection. I need to confirm and ensure that users My Docs get copied into the newly set Redirected Folders on the D: drive of the new server (D:\User\FolderRedirections)

Went into File Server Resource Manager and removed disk quotas for all users.
Changed Server Configuration (Exchange), Mailbox, First Storage Group, Mail Database, Properties and changed the Warning to 3gb and removed Prohibit levels.

Tuesday, November 18, 2008

Obama CTO website

I find it quite amazing the level of excitement and participation that Barrack Obama has generated simply by becoming our next president.

There is a website online at http://obamacto.org that is engaging the public to help direct the nation's next and first Chief Technology Officer. Visitors to the website can vote on the issues that they think are most important. Has there ever been a time when you could provide this type of feedback?

I voted for a US firewall. Since I'm a network administrator and I constantly see attacks from overseas on my customers' firewall, I know that a US firewall would be a good idea as long as it is implemented to prevent attacks while maintaining net neutrality and privacy.

Monday, November 10, 2008

San Diego Information Technology Group

I've started a new San Diego Information Technology Group for the purpose of exchanging ideas and information between career IT personnel.

The SDITGroup has a Ning (really handy tool) website at http://sditgroup.ning.com. Each month the group will get together to discuss current IT issues facing the members, ask questions, and debate trends in our industry.

I'm going to be very strict about this group's membership so as to avoid any people who do not meet the group's guidelines for membership (ie. a career IT person actively managing a business network).

Monday, October 27, 2008

Adventures in SEO

The DELTYME website http://www.deltyme.com is going to be the subject of an ongoing Search Engine Optimization project for me.

As of today, I have installed the sh404sef component on the Joomla CMS system that hosts our website. In addition, I have verified the website with the Google Webmaster Tools in order to make full use of the tool available to me.

And I also discovered that I can easily add Google Analytics to my Joomla CMS based DELTYME website by simply editing the Site Template/Edit HTML and adding the Analytics code just before the closing body tag. This will help give a baseline for tracking traffic stats.

Lastly, I used the Joomap 1.0 component to create a Google Sitemap that the Webmaster Tools recommends creating.

Friday, October 10, 2008

64 bit on your desktop

I hope you find this information useful. You can find out more about DELTYME at http://www.deltyme.com

64 bit computing will quickly become the standard in the Windows world. A 64 bit computer improves performance and reliability from the current 32 bit standard.

Why do I need Vista 64 bit?
Microsoft has phased out Windows XP. You will either need to pay an additional fee from the PC manufacturer or load XP yourself. Thus, Windows Vista 32 or 64 bit has become the de facto standard. In addition, 32 bit computing is being quickly replaced by 64 bit computing as it provides better performance.

What exactly is a 64 bit computer?
A 64 bit computer consists of a CPU/processor that is 64 bit capable and an operating system that is designed for running in 64 bit mode. Most new computers made by a name brand manufacturer are equipped to run a 64 bit operating system. And both XP (for an additional fee) and Vista come in 64 bit, but you must specify when ordering.

Can I run Vista 64 bit in my office or at home?
In any case, you will need to perform some testing to ensure that all of your applications and peripherals work properly. Microsoft provides a website that lists compatible software and hardware. If you would like Deltyme to create and/or execute a test plan for you, please contact us when you are ready.

What are the benefits of using a 64 bit computer?
I have been running Vista 64 on my desktop for several months. My experience has been very positive. I cannot remember any operating system crashes. Performance has been excellent. In terms of hardware, a 64 bit operating system is capable of addressing nearly an unlimited amount of RAM (memory) which translates into a faster computer. As time goes on, applications will be written in the true 64 bit mode which will allow them to run faster as well. In the meantime, Vista 64 is capable of running both 32 bit and 64 bit applications.

How much does a 64 bit operating system cost?
The cost for Microsoft Vista 64 is the same as Vista 32.

Summary:
I strongly recommend that you establish a plan and time line for moving to Vista 64 bit.