Tag Info

Hot answers tagged

6

Some of the potential attacks involve putting a rogue router or DHCP server on your network. The best protection is to let the L2 switches filter the traffic. If a switch port goes to a workstation it probably should not send out packets that usually a DHCP server or a router would send. If you want such protection you should look at the protocols that the ...


6

How about a zero downtime migration? This is my general plan for such migrations: Set up an ad hoc VPN between the old server and the new server (e.g. with OpenVPN). Copy the entire application from the old server to the new server. Set up database replication between the old server and the new server, with the old server as master and the new server as ...


5

You'll have to reassign or seize the RID master role on a functioning domain controller. Microsoft says: Do not seize the RID master role if you can transfer it instead. Seizing the RID master is a drastic step that should be considered only if the current operations master will never be available again. For more information about transferring ...


5

It depends on whether you want them to do anything IP-aware. An ethernet frame is an ethernet frame is an ethernet frame, as Gertrude Stein didn't say; a good switch will repeat it based on MAC addresses without caring what the payload is, so if that's all your switches do - layer-2 stuff like VLANs and port-mirroring - you should be fine regardless. The ...


4

There is no such mechanism. This is because it is the way DNS and its caching mechanisms work. This is usually handled before the migration by setting the TTL for the A record to the minimum value possible, so that DNS servers keep the IP address cached for the least possible time. However, only in rare cases you can set the TTL to zero, which would ...


4

There are a lot of different ways to migrate the databases. Backup and restore is the most commonly recommended, but if you have more than 100 databases you might want to script something to detach and attach the databases. I've successfully used this to migrate a very large number (hundreds) of databases to a new server: @ECHO ON set ...


4

Licensing questions aside: First, you can see here: In-place upgrade from Windows Server 2012 Foundation to Windows Server 2012 Standard that an in-place upgrade isn't supported. However, your scenario is supported just fine. Be sure and move over the FSMO roles and properly decommission the Foundations server (dcpromo it and then remove it from the ...


4

Use the native tools, assuming you have a vCenter. You could perform a live-migration or cold-migration (change host and datastore), depending on your license level. However, vCenter may not be happy if the DC is down. Do you only have one domain controller?


4

Really, this is a non-issue. Copy the data on media of appropriate size, if ncessary encrypted, make a checksum, package it appropriately (depending on the media used, e.g. an optical disc doesn't need ESD shielding), ship it, decrypt and restore it, check with the checksum and you are done. If the checksum fails, rinse and repeat, with better packaging ...


4

All of these issues can be resolved by deploying a secondary domain controller Full Stop. You should have at least two domain controllers available. Trust me. You really want at least two domain controllers. I think if you spend a bit of time reading about Active Directory design and how it works and you will see that multiple domain controllers should ...


4

If all you truly have is "Outlook Anywhere" access, then I'd presume that you don't have access to administer the Exchange Org in Forest A. If that's the case, then you'll need to manually migrate, which won't be fun with a lot of mailboxes. You'll also be dealing with issues related to if you have public folders, GAL issues when it comes to replies to ...


4

Simple: Start up a Windows Server 2012 VM in AWS. VPN from that server back to your corporate network. Configure the new VM as an additional domain controller on your domain, ensuring that you also specify that it should be a global catalog. Wait for replication to complete successfully. Disconnect the VPN and uninstall/unconfigure the software to prevent ...


3

Exchange 2007 and newer versions stop you from performing a domain rename. Since you say that you're ditching on-premise Exchange that's not a factor. That opens up the door for what I think would be a much easier process than any kind of creation of a new forest or domain: Complete your migration to Office 365 and remove Exchange from your SBS 2011 ...


3

No. You cannot make an O365 instance be a "clone" of your own Exchange instance. A single mailbox can only be in one or the other. You can also not stretch a DAG between your Exchange server and O365.


3

DISCLAIMER: While the below "should" work...I'd be cautious about undertaking it as your "backup" solution, as that's not what it is designed for. Because you haven't setup O365 at all, in theory you could do the following, assuming you plan on going to O365 within 60 days (I believe that's the limit): Setup O365 for a cutover migration (you need to ...


3

For Chef Server 11, they switched from CouchDB to Postgres which rules out couchdump. chef_server_backup.rb has also been abandoned, but knife-backup can handle both 10 and 11. If on both systems you have knife-backup installed and a knife user setup, you can originalserver$ knife backup export -D ~/chef-backup/ Copy over ~/chef-backup/ to the new ...


3

I would say you have a lot more to consider than just hard drives. You are intending to transfer to a completely different virtualization package, which will take much more than a days worth of work. Theoretically you would need to: - Transcribe the VM configurations (more than likely by hand) from Microsoft's spec to QEmu's spec. - Convert the VHD images ...


3

See, you were talking about Active Directory migration - suggest you edit your question to include more such details. Have a look at the following articles for some guidance. http://blogs.technet.com/b/canitpro/archive/2014/04/02/step-by-step-active-directory-migration-from-windows-server-2003-to-windows-server-2012.aspx ...


3

Move to new Service / their own domain. Have the current ISP setup a mail forward to the new email address, and hopefully an autoresponder that says something along the lines of 'In order to better serve you, we are now XXX@company. please update your address books'. Gmail has an option to pop into your old mail account on a schedule, other cloud services ...


3

Scary the situation you're in, but not impossible, and can be solved easily by enabling "SMTP matching", which is a process of transferring the source of authority from your Office 365 to your local active directory. this can be achieved by matching the SMTP address of your Office 365 accounts to the SMTP address of your Active Directory accounts, and using ...


3

Yes, you can move the virtual machine from one host to the other. It's less than ideal, since your VM will be scheduled across two physical CPUs, but it will definitely work.


3

Ugly, but this would work. Except when it doesen't;). Be very careful when specifying the partitions and when replacing the disks try it in am VM beforehand, setup the virtual disks like your hardware an dry run it 1 or 2 times. make a scrub before you start and take a look at the S.M.A.R.T info from the disks. You would not try this with an already ...


3

No, you cannot transfer IP addresses like that in general. You can only transfer IP addresses if you have control over both networks' Internet-wide routing.


3

Dovecot allows you to configure a master user which can be used to access user mailboxes without knowing their passwords. The master user can be used with imapsync (as well as most other IMAP tools) to copy the messages between servers. From the dovecot configuration file on my server: By adding master=yes setting inside a passdb you make the passdb a ...


3

There's a tool made for this very thing, called the Microsoft Virtual Machine Converter (currently at version 3.0). As to your questions about time and the best way to do this, those are highly variable, environment-specific things you'll have to figure out on your own. Shouldn't be too hard - pick some typical VMs, time their conversions, extrapolate how ...


2

You can enable IP forwarding and then do forwarding of the traffic at the IP level (see http://www.debuntu.org/how-to-redirecting-network-traffic-to-a-new-ip-using-iptables/ for an example). I believe this has a benefit over proxying because you maintain the IP address of who is connecting to the website and that's logged properly.


2

I've replicated this way before. It's just a zone transfer, really. I had to do it as part of a migration to new 2008 DC's in preparation for raising the functional level and replacing old hardware. The issue I had with 2003 was ad-integrated DNS not playing nicely. May have simply been because this domain had been an upgrade from NT 4.0 -> win2k -> ...


2

Edit: Please note the below only transfers A records and no other so you would still need to manually input remaining. I've never done the above, but another alternative would be to: export your A records and zones from 2003. Save it - c:\dnsrecords.txt re-importing into Server 2012. Replicate other 2003 settings on 2012 that covers external lookups. ...


2

We can't help you with licensing here, but I can offer a couple tips with SQL. You will want to take note of the SQL features you have installed on your SBS 2003 box, and setup the installation the same way on the 2012 machine (features, instance name, etc). You can script out the stored procedures and run them on the new instance, and restore your ...


2

Does /usr/bin/pygrub file really exist on your Dom0? Have you tried to run it without PyGrub? Remove bootloader and add kernel = '/vmlinuz' ramdisk = '/initrd.img' to use host system's kernel. If you haven't configured GRUB on the guest system properly, PyGrub will not be able to boot. Also check this ...



Only top voted, non community-wiki answers of a minimum length are eligible