SBS 2003 to SBS 2008 Migration Guide – v1.4.0

This migration guide is meant to pull together the disparate Microsoft resources into one spot.

This post is deeply tied into the following blog post:

• SBS 2008 Install Guide

Between the Install Guide and this Migration Guide you will have a fairly comprehensive view of the entire migration process from start to finish.

At the bottom of this post you will find troubleshooting links for the various problems we or others have encountered in the migration processes.

The Microsoft resources:

• Migration Word Document: Migrating to Windows Small Business Server 2008 from Windows Small Business Server 2003
• SBS Migration Help Document: Windows Small Business Server 2008 Migration Help
• TechNet Help: Migrate to Windows Small Business Server 2008 from Windows Small Business Server 2003

This post is truly rudimentary in form. However, it will provide the necessary guidance to work through the Microsoft resources and come through the migration process successfully.

Here are some additional resources:

• Preparatory Steps:
  • SBSDiva (Susan Bradley): Making sure you have a clean AD.
  • David Overton: Active Directory Health Check - Make sure your AD is healthy before you migrate SBS 2003 to SBS 2008.
  • SBS Blog: SBS 2008 Migrations from SBS 2003 – Keys to Success.
• David Overton: SBS 2003 to SBS 2008 migration thoughts and issues.
• Microsoft 5W/50 training series: Core Technical Videos.
• SBS 2003 and SBS 2008 Best Practice Analyzers.

These are some additional options for the migration process:

• Official SBS Blog: SBS 2003 to SBS 2008 Migration to a Different Domain Name

A couple of very important things to note:

• Have a backup of the SBS 2003 box and System State BEFORE beginning the migration process!
• You will need the SBS install disk 2 with the Exchange65 folder for the Exchange uninstall step!

We use both NTBackup to create a system state backup as well as ShadowProtect to create a full server image before initiating any changes on the production network.

In the case of ShadowProtect, we will have it on the SBS 2003 box at least a couple of days before the migration process starts to get a base full backup and set an incremental schedule as well. Then, when it comes time to begin the migration we can run incremental backups during the process which are very short in duration.

If the health of the production network is determined to be troublesome, we will in some cases have the ShadowProtect images shipped up to us to restore on our lab systems for troubleshooting (previous post with WSUS Update error workaround).

We have printed out the various key Help items and shuffled those print outs into the sheets we have the migration steps on.

SBS 2003 Preparation Steps

1. SBS 2003 with 2 NICS and/or ISA.
   • Uninstall ISA and run CEICW
   • Install firewall appliance or gateway.
   • Set NIC1 Gateway to the new device.
     • IP: 192.168.40.254
     • Subnet: 255.255.255.0
     • Gateway: 192.168.40.1 (gateway device)
     • DNS1: 192.168.40.254 (self)
     • DNS2: Blank
   • Disable NIC2 and run CEICW.
   • Verify that the DNS Server service is working as expected. A reboot may be required.
2. If SBS 2008 will be using an existing RWW URL that is protected by a third party certificate, make sure to export that certificate from SBS 2003 with the key and import it using the wizard on SBS 2008 at the appropriate time.
3. Make sure that the up to date Windows Server 2003 Resource Kit Tools (download) and Service Pack 2 Support Tools (download) are installed on SBS 2003.
4. Verify Active Directory Forest and Domain levels are set to Windows Server 2003 native.
5. Reset the Active Directory Restore Mode password (MS KB322672).
6. Verify that Exchange 2003 is running in Native Mode (Step 17 on the SBS 2003 Setup Checklist).
   • Also make sure the Exchange Management Console is showing the routing groups in step 16 of the above list.
7. Verify that Exchange 2003 has Service Pack 2 installed and functioning as expected.
   • Verify the tabs for the Intelligent Message Filter and the UCEArchive post SP2 fix (previous blog post).
8. Verify that the default SBS SMTP Connector is installed.
   • Also check for any additional connectors installed as they will interfere with the replication of Public Folders
9. Verify and record any custom Send As setups for Exchange users. They will need to be manually set up on the new SBS 2008 server.
10. Verify Windows Server 2003 Service Pack 2 is installed.
    • The SBS 2003 BPA will help with the post SP2 fixes if any were missed.
11. Verify that SBS 2003 has Small Business Server 2003 Service Pack 1.
    • 
    • HKLM\Software\Microsoft\SmallBusinessServer\ServicePackNumber
12. The following are run from the command prompt to test Active Directory health:
    1. DCDiag
    • DCDiag [Enter]
    • DCDiag /test:DNS
    • DCDiag /? (List of switches)
    1. NetDiag
    2. RepAdmin
    • RepAdmin /viewlist *
    • RepAdmin /SyncAll
    • RepAdmin /KCC
    1. NetDom /query FSMO
13. The following can be done to test the health of the Exchange databases at the command prompt and with the stores dismounted (remember to backup):
    • MS KB192185: How to defragment with the Eseutil utility (Eseutil.exe)
    • TechNet: Eseutil /G Integrity Mode.
    • TechNet: Eseutil /P Repair Mode.
    • MS KB301460: Exchange Command-Line Parameters for Isinteg.exe Tool
14. Exchange mailbox prep.
    1. Have everyone empty their Deleted Items folder.
    2. Get everyone to run an Archive process in their Outlook to remove older and not necessarily needed content.
15. Download and run the EBS Prep and Planning Wizards Microsoft IT Environment Health Scanner (download page).
    • If the wizard complains about Subnets in Active Directory Sites and Services it is safe to ignore the error.
    • What to do if the scanner has a DNS WMI error (previous blog post).
16. Run the server time setup step.
    • w32tm /config /syncfromflags:domhier /reliable:no /update [Enter]
    • net stop w32time [Enter]
    • net start w32time [Enter]
17. Verify that the default Administrator (500 Account) has the Primary Group set to Domain Users.
18. Run the SBS 2003 Best Practices Analyzer and follow its recommended steps.
19. Backup SBS 2003 completely.
    • TIME:________
20. Backup the SBS 2003 system state with NTBackup.
    • TIME:________
21. Run the SourcePrep Tool
    • Insert the SBS 2008 DVD and run SourceTool.exe from the Tools folder.
    • Note that a reboot is required.
    • TIME:________
22. Disable the Update Services (WSUS) on SBS 2003 before installing SBS 2008 in Migration Mode.
    • An alternative is to disable Windows Update and Update Services on the SBS 2008 box during the install process (previous blog post).

Install SBS 2008 in Migration Mode assuming that WSUS has been disabled on SBS 2003:

1. Multi-NIC servers: Disable all NICs in the BIOS except #1.
2. Set up the Answer File in Migration Mode with the requisite information.
   • SBSAfg.exe in the Tools folder on the SBS 2008 DVD.
   • We make two copies of the XML file:
     • 09-06-17-ClientName-SBSAnswerFile.XML
     • SBSAnswerFile.XML (goes on the flash drive)
   • The SBSAnswerFile.XML can be saved to a small VHD if running the migration virtually for a lab test or going into a virtual production environment.
3. Begin the SBS 2008 install in Migration Mode (SBS 2008 Setup Checklist).
   • Note that the migration project will jump in and out of the SBS 2008 checklist’s various setup steps.
   • Setup the SBS 2008 RAID 10 array and configure the OS partition.
   • Plug the USB flash drive into the server.
   • Note that on some Tier 1 servers the USB flash drive will need to be plugged in once past the SBS 2008 EULA stage.
   • Use the Load Driver dialogue to verify that the server hardware is reading the USB Flash drive with the Answer File.
   • Depending on the hardware manufacturer, make sure to have the latest RAID controller on hand to install. We put it into a folder on the Answer File USB flash drive to keep things simple.
4. SBS 2008 Migration Mode status will show on SBS 2003:
   1. ADUC: SBS 2008 will show up in the Domain Controllers OU.
   2. DNS:
      • SBS 2008 will show up in _msdcs.SBSDomain.local with its new GUID.
      • SBS 2008 will show up as a Name Server in SBSDomain.local and 192.168.40.0/24 Subnet (whatever subnet being used).
   3. DSSite.msc: SBS 2008 will show up after the above DCPromo reboot.
      • Note that the replication links can take anywhere up to 15-20 minutes to show up in DSSite.msc.
5. SBS 2008 will eventually come up with the Green Check of a successful install.

SBS 2008 Preliminary post OS install steps:

1. Verify that the Exchange 2007 services are up and running as expected
   • Start –> Services.msc [Enter]
2. Complete steps 1 through 24 (step 24 is currently Getting Started Tasks – Out of Order – Backup Now) from the SBS 2008 Install Guide.
   • The adding the suggested snap-ins step in the SBS 2008 Install Checklist for the SBS Native Tools Management Console will make the migration process a lot easier to run through.
3. Backup both servers.
   • SBS 2003: TIME: ________
   • SBS 2008: TIME: ________

SBS 2003 and SBS 2008 Migration up to and including the Exchange mailbox move:

1. Edit the SBS 2003 Folder Redirection Policy.
   • file:////NewSBS/RedirectedFolders
   • IMPORTANT:
     • SBS 2003 while a DC will maintain the 21 day period before SBCore starts shutting the server down.
     • SBS 2003 DCPromod to a domain member server will only have 7 days to complete the redirected data move.
     • Folder redirection caveat and settings suggestion: SBS 2003 to SBS 2008 Migrations – Folder Redirection Caveat (previous blog post)
2. Log onto SBS 2008 with the existing 500 Admin account and create the new SBS 2008 account using the SBS 2008 Console.
   • We like famous or not so famous generals for the necessary admin accounts created on our SBS domains.
   • Note the absence of the UAC.
   • What happens when the SBS Migration Wizard is opened while logged on with the original SBS 2003 domain admin account:
3. Log off SBS 2008 and log back on with the new SBS 2008 Domain Admin account.
4. Export the Public Folders to PST via an Outlook client connected to the existing SBS 2003 as a precautionary measure.
   • Official SBS Blog: Cannot Reply To Old Emails Or Modify Old Calendar Items After PST Mail Migration.
   • Once the Exchange connectors are gone, there will be no more access to the SBS 2003 Exchange. SBS 2008 Exchange will be the go-to from there on in.
5. Run the Migration Wizard from the SBS Console.
   1. Move the Data folders.
      1. WSS (SharePoint) Data.
      2. Users’ Shared Folders.
      3. Users’ Redirected Folders Data.
      4. WSUS Update Repository Data.
         • Enable Access-based Enumeration on the Users Shared Folders and Users Redirected Folders after moving them.
   2. Connect to the Internet.
      • Check off the appropriate step in the Getting Started Tasks section in the SBS 2008 Setup Checklist.
   3. Configure the Internet Address.
      • Check off the appropriate step in the Getting Started Tasks section in the SBS 2008 Setup Checklist.
   4. Migrate Network Settings
      1. Migrate DNS Forwarders.
      2. Migrate the Mobile Users Group.
      3. Migrate any existing SSL Certificates (link in the wizard).
   5. Migrate Exchange mailboxes and settings
      1. Remove the Internet Connectors
         • SBS SMTP Connector
      2. POP3 Connectors
         • This is a manual process. A screenshot of the existing list can be used as a checklist.
         • Account removal is done now on the source SBS 2003 server.
         • Adding the mail accounts to the SBS 2008 POP3 Connector is indicated later in this guide.
      3. Move the Offline Address Book.
         1. Move OAB to SBS 2008.
         2. Enable Web-based Distribution in Exchange 2007.
      4. Move the mailboxes to SBS 2008.
         • Done from the Exchange 2007 Console on SBS 2008.
         • SBS 2008 is GC and AD.
         • We use 100 messages as the default setting for corrupt messages.
         • OPTION: Enable Circular Logging on the destination server.
         • Have a look at the mailboxes on the Source SBS 2003 server. The new SBS 2008 created domain admin account starts logging into each one. The move progresses from there.
         • It can take a long time before anything seemingly happens. Please be patient.
      5. Migrate the Exchange Server public folders (TechNet).
         • Get-PublicFolderStatistics in Exchange PS to verify the replication of the public folders.
         • Note that this process may take some time and caution should be taken so as to not move on before the folders have replicated.
   6. Some important considerations for this point in the migration:
      1. Port forwarding can be changed for SMTP to the new SBS server once the mailboxes are moved.
      2. Obtaining a third party trusted certificate before this stage would be a good idea so that remote users do not deal with the need to import the self-issued SBS 2008 certificate. Use the SBS 2008 wizard to generate the CSR if required, or to import the certificate exported from the source server previously.
   7. Remove legacy Group Policy objects and logon settings.
      1. Remove old logon scripts including the SBS_Login_Script.bat file.
         • %windir%\sysvol\sysvol\SBSDomain.local\Scripts
      2. Remove the batch file from all users in ADUC.
         1. Select them all and right click on any highlighted user account and click on Properties.
            • 
         2. Profile Tab
         3. Check Logon Script and leave blank.
         4. Apply and OK. All users will no longer have the batch file associated with them.
      3. Remove old GPOs from SBS 2003:
         • Click the Details tab to see the Created/Modified date for the GPOs before deleting.
         • Small Business Server Auditing Policy
         • Small Business Server Client Computer
         • Small Business Server Domain Password Policy
         • Small Business Server Internet Connection Firewall
         • Small Business Server Lockout Policy
         • Small Business Server Remote Assistance Policy
         • Small Business Server Windows Firewall
         • Small Business Server Update services Client Computer Policy
         • Small Business Server Update Services Common Settings Policy
         • Small Business Server Update Services Server Computer Policy
         • Small Business Server – Windows Vista Policy (RipCurl Policy)
      4. Remove the SBS 2003 WMI Filters:
         • PostSP2
         • PreSP2
         • Vista (RipCurl Filter)
   8. Migrate users’ shared data
      • We use the Company folder created in the SBS 2008 Checklist (previous post).
      • We use BeyondCompare for our data migration purposes. RoboCopy is another option.
   9. Migrate the Companyweb internal Web site.
      1. Option 1 (Microsoft method):
         • Run the Prescan tool.
         • Migrate the entire Companyweb site by detaching the databases on SBS 2003 and reattaching them on SBS 2008.
         • This method is pretty straightforward in that it preserves all of the existing data structures.
         • Create a DNS CNAME for OldCompanyweb that points to SBS 2008 FQDN.
         • Update the existing Companyweb CNAME to point to the new SBS 2008.
         • Remember to edit the DNS CNAME record for Companyweb to point to SBS 2008.
      2. Option 2 (direct data copy):
         • SharePoint list data that is Outlook integrated can be moved into new SharePoint libraries.
         • If versioning is not required, then opening the existing document libraries in Explorer View enables us to copy the data straight across.
   10. Migrate fax data.
   11. Migrate users and groups.
       1. Migrate Security Groups and Distribution Lists.
          1. No longer a manual process: Download and install the Windows Small Business Server 2008 Active Directory Group Converter on SBS 2008. Run the utility to migrate the Security groups.
       2. Run the Change User Role Wizard.
          • Map to Standard User.
          • Note: To view the user accounts that were migrated from the Source Server, in the Users list view, click the Display all the user accounts in the Active Directory check box.
       3. Delete the following legacy AD accounts:
          • STS Worker
          • SBSBackup
          • IUSR_SBS
          • IWAM_SBS
       4. Map appropriate RWW RDP user permissions to domain workstations.
       5. OPTION: POP3 Connector setup the user account’s POP3 e-mail to their mailbox.
   12. Enable Folder Redirection and Quotas in the SBS 2008 Console.
       • Select all users for the policy.
       • We redirect Documents and Desktop by default.
       • We will disable exclusivity for the user and set it to move back to the local system. This causes FR to appear off in the SBS Console though.
       • GPUpdate /force on both source and destination.
       • Verify GPO settings on source before DCPromoing the source server. Manually initiating AD replication would be a good idea too.
   13. Migrate SQL Server Data.
       • TechNet: Move SQL Server data for Windows SBS 2008 migration.
   14. Migrate Terminal Services Licensing.
       • TechNet: Move Terminal Service licensing server for Windows SBS 2008 migration.
   15. Finish the Migration.
       1. Update the Recipient Update Services on SBS 2003.
          1. Recipient Update Service (SBSDOMAIN)
             1. Click the Browse button, put SBS 2008’s name for the Exchange field and click the Check Names button before clicking OK.
          2. Recipient Update Service (Enterprise Configuration)
             1. Exchange: SBS 2008
       2. Delete the Routing Group Connectors
          1. Delete: SBSNew-SBSOLD
          2. Delete: SBSOld-SBSNew
             • 
       3. Uninstall Exchange 2003 (previous blog post) from the source server.
          • Add/Remove Programs –> Small Business Server –> Change/Remove.
          • Remove: Exchange Server
          • SBS CD 2 will be required for this uninstall.
   16. DCPromo SBS 2003 to remove the DC role.
       • REMINDER: SBS 2003 will start to reboot 7 days from the introduction of the SBS 2008 box when a domain member server only!
       • If Certificate Services has been installed on the source SBS 2003 box previously it will need to be uninstalled before the DCPromo process will run.
       • NOTE: If the DCPromo fails due to NETLOGON time-out, BACK UP in the wizard and start it again. It will run successfully the second time.
       • A reboot will be required.
   17. Run a final image of the source SBS 2003 box.
   18. Disjoin SBS 2003 from the SBS 2008 domain.
       • The generic WORKGROUP works here.
6. Delete the original SBS 2003 Folder Redirection Policy.
   • If it is seemingly missing, click on Refresh in the GPMC to bring it up.
   • For comparison (in our case since we enabled both above):
     • Old policy will refer only to the Documents folder.
     • New policy will refer to Documents and Desktop.
     • We can check the time stamp for each GPO for clarification as well.
7. Clean up any references to the old SBS 2003 server on the SBS 2008 server:
   • ADUC: Delete from SBSComputers OU.
     • Yes to the “…other objects” message.
   • DNS: Remove ALL references to SBSOld NS and DNS A in all zones.
   • DNS: Remove ALL references to SBSOld’s IP Addresses in all zones.
   • Active Directory Sites and Services: Remove the old SBS 2003 server reference.
8. Download, install, and run the Windows Small Business Server 2008 Best Practices Analyzer.
9. Verify user quotas for the Standard User Role.
   • Exchange Mailbox
   • Redirected Folders
   • NOTE: Any changes made to the Standard User Role will affect any user that has that role.

Continue the SBS 2008 setup according to the SBS 2008 Setup Checklist.

1. Complete steps 24 (step 24 is currently Getting Started Tasks – Out of Order – Backup Now) and up from the SBS 2008 Install Checklist.

Troubleshooting

• Migration Process

  • SBS 2008 Migration Mode install fails seemingly around AD Replication: SBS 2003 to 2008 Migration Stall – Event 1001 SBSSetup.exe and CLR20r3 – Workaround Found!
  • Official SBS Blog: SBS 2008 Migrations Fail When The Migration Preparation Tool Has Not Been Run.
  • Microsoft IT Enviornment Health Scanner Errors:
    • SBS 2003 Error: A Connection Cannot Be Made To The DNS WMI Provider In MS IT Environment Health Scanner
    • Journal Wrap Error Fix.

• Exchange and E-mail

  • Official SBS Blog: SBS Migrations: Troubleshooting Moving Public Folder Replicas
  • SBS 2003 to 2008 Migration – Exchange OAB 9331 and 9335 Along with Outlook 0x8004010F Errors
  • Official SBS Blog: Cannot Reply To Old Emails Or Modify Old Calendar Items After PST Mail Migration

• User Profiles

  • User’s Documents etc will not redirect after seemingly doing so post migration:
    • SBS 2008 – Vista Business Folder Redirection Failing Long After The Migration
  • Folders will not automatically redirect:
    • SBS 2003 to SBS 2008 Migrations – Folder Redirection Caveat (during the migration process or just after)

As we run through this list, since it is quite long and complicated, there may be errors or omissions. Please make sure to verify these steps against the Microsoft sanctioned documentation to make sure.

If you find any mistakes or things we missed, please comment!

This post will be updated. When we do, we will make every effort to keep this specific post updated. The SBS 2008 Migration Guide link on the right hand side of this blog will always point to the up to date blog post.

Updates to this post:

• 2009-07-13: Added the Folder Redirection caveat link.
• 2009-08-10: Added the Troubleshooting Section.
• 2009-08-11: Updated the DCDiag command in the source server prep section.
• 2009-08-25: Added links to the TechNet articles for moving SQL and TS Licensing.
• 2009-09-05: Added more troubleshooting resources along with the article link to renaming the domain during the process near the beginning of this post.
• 2009-09-07: Updated the download link for the Microsoft IT Health Scanner tool that was once the EBS migration tools.
• 2009-09-26: A lot of updated steps, added steps, and further step clarification.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

*All Mac on SBS posts will not be written on a Mac until we replace our now missing iMac! (previous blog post)

Windows Live Writer

Subscribe in a reader