Saturday, July 26, 2008

SBS 2008 RC1 Is Out

Microsoft have made SBS 2008 RC1 available via Public Preview. It can be downloaded from here.

Other useful links from the TechNet site:

Release Notes, Installation Guide, SBS Documentation, SBS Resources and the SBS 2008 Evaluation Centre.

 

Very handy documents to download and read:

Windows Small Business Server 2008 Installation Guide

Windows Small Business Server 2008 Console Help

Windows Small Business Server 2008 Migration Help

Migrating to Windows Small Business Server 2008 from Windows Small Business Server 2003

Migrating to Windows Small Business Server 2008 from Windows Small Business Server 2008

Windows Small Business Server 2008 Release Candidate Reviewer’s Guide

 

Three very useful resources to keep an eye on while evaluating and testing SBS 2008:

The Official SBS Blog

SBSfaq.com

Smallbizserver.Net

 

And finally, if you plan on testing this in a Virtual Machine, check out:

VMWare Settings for SBS 2008

Note that SBS 2008 requires 4GB of RAM. It won’t install with any less memory than this. You can use an evaluation of VMWare Workstation or either VMWare Server or VMWare Server 2.0 Release Candidate. Both VMWare Workstation and VMWare Server 2.0 Release Candidate support USB 2.0 devices, so you can test server backups/recovery with removable USB drives with these products.

Thursday, July 10, 2008

How to Demote a Long-Disconnected Domain Controller

Just looking back on some old notes.

Found out nearly 4 years ago that I had to reconnect a branch office Windows Server 2003 domain controller that had a reasonable amount of data (in DFS) and apps on it and I had a weekend in which to do it. A re-install would have been pushing it. Especially the DFS replication (don't even ask about the backups...).

I distinctly remember at the time that there wasn't anything on TechNet, except one of those teaser PowerPoint presentations saying how Windows Server 2003 had better support for long-disconnected domain controllers (which I can no longer seem to find with Google. Hmph.).

Some of my Kerberos experience on FreeBSD and - at that time - my new-found knowledge of pointing Google at Microsoft to search for useful information helped me to try to understand what was going on.

After having a good guess of what I thought was wrong and running down some dead-ends, I ended up surprising myself when the following process worked:

  • Change tombstone on FSMO DC to 180 days
  • Push out changes from FSMO DC to other DCs using replmon
  • Remove GC role from long-disconnected DC on both FSMO DC and on long-disconnected DC using AD Sites and Services
  • Push out changes from FSMO DC to other DCs using replmon
  • Stop and Disable KDC on long-disconnected DC
  • Use netdom to reset machine account password for long-disconnected DC on FSMO DC
    • netdom resetpwd /server:<FSMO DC hostname> /ud:<Domain>\<Admin Account> /pd:<Admin Passwd>
  • restart long-disconnected DC
  • Use dcpromo repeatedly to demote server (I got timeouts for netlogon taking too long to respond; WAN authentication latency problem?)
  • restart the now demoted long-disconnected DC
    • Click OK to "one or more services failed to start"; not finding a DC
  • Use Terminal Services to remove demoted DC as a DNS NS from AD-integrated zones on the FSMO DC
  • Use Terminal Services to connect to FSMO DC and replicate the entire domain
  • run dcpromo to promote standalone server

Thought I'd post this to help out any other poor sod stuck in this sorry state.

Might just have to run up a couple of VMs to verify this still works...

TechNet now has guidance on this with the Reconnecting a Domain Controller After a Long-Term Disconnection article. Doesn't look like what I've got above.

Wednesday, July 09, 2008

The Power of Community (Susan Bradley, You Rock!)

April was a bad month for me. My father was hospitalised on Monday 7th and I spent the early part of that week trying to help Dad work out what he was going to do after leaving hospital. My father was fiercely independent and had been living independently up until that point. Things got worse on Thursday 10th when Dad was told that his kidneys were shutting down. I'd organised a flight for Friday, but due to a bird strike I wasn't able to get there until Saturday morning. My father had passed away during my flight over on the Saturday. Renting a hire car turned out to be a painful process, but the drive from the airport to the hospital was great as I was able to recollect all the good times I'd had with my father. I've still got a great image of my father with his large black-framed glasses, thinning hair, his close cropped beard and a cheeky smile showing his broken, yellow teeth. The look he'd give after saying something pithy.

My sister had recently separated from her husband and was looking after her three children, so the task of packing up my Dad's rental place, organising the funeral and carrying out the executor role fell primarily on me. I was able to get the flat emptied, organise those tasks that needed doing locally and organising the funeral all in five days so I could get home to my 8-month pregnant wife.

During this time I still had work commitments. Most of the tasks I was able to delegate accordingly with the exception of a budget submission for a client that was going to be performing asset transfers to a new entity in their new financial year and also required moving from SBS 2003 due to the 75 CAL limit. I was recommending an SBS 2003 to Essential Business Server migration, but due to the lack of pricing details I wasn't able to come up with software licensing costs. My alternative was to price up the SBS 2003 Transition Pack as well as full priced versions of the SBS components. The Transition Pack got tricky as the SBS licenses were Open Licences with Software Assurance at Government pricing. The Transition Pack was Retail license only. As you can see this got ugly early.

In a fit of desperation I sent an e-mail to the SBS Diva, Susan Bradley, asking if she knew of anyone that would be able to assist me with working out the best transition method license-wise. Not only did Susan find me a group of people who were able to provide answers to some of the questions I was posing but she also sent me some very nice e-mails of support during the flat-clearing stage. Susan also kept an eye on the replies I got and followed up with me to ensure I was getting useful feedback. Pretty amazing seeing that I only met Susan once in person at the SMB Security Summit in Sydney last year and other communication via e-mail and blog comments.

This epitomises the power of community (and just how amazing Susan Bradley is!). Engaging with like-minded people, building relationships and helping one another. Now I'm not saying that I pretend to know Susan, but her blog demonstrates her generous nature, her attention to detail and her professionalism. Without this record I never would have sent her the e-mail asking for assistance. I sent the e-mail knowing that I could rely on the answers to be correct.

This trust is the most valuable attribute you can develop when engaging in community activities. Opinions are great as they help define you and your world view to others, but trust is developed by providing high quality and correct information. And when the information isn't correct or incomplete, then prompt apology and providing correct information is paramount to re-establish trust. On top of this consistency is important. If you look at Susan Bradley's blog you get all of this and more.

So in my roundabout way I'm really trying to publicly acknowledge Susan for her amazing contribution in what was a very difficult time for me. Susan you are a LEGEND! You are the glue for the SBS community and I thank you very much for the help you have provided me and I hope that I'm able to repay the generosity that you extended to me. If not to you directly, then to the others in the SBS community by means of paying it forward.

My Blogging Hiatus

It's been a bit quiet in terms of posting lately.

My father passed away on April 12 for which I had to fly over and organise the funeral as well as finalise his estate and my wife gave birth to our second child (Sarah Grace) on May 9.

Assisting clients with IT budgets for the next financial year (plus lining up subsequent years) on top of the usual day-to-day business has also kept me out of trouble.

I'll be resuming my posting shortly.