Tuesday, September 18, 2012

Migrating Active Directory Domain Controller from Windows Server 2003 to Windows Server 2008

In a nutshell, we will perform the following:
















  1. Raise Domain Functional Level

  2. Prepare your current Windows 2003 Active Directory for Windows Server 2008 domain controllers.

  3. Then, we will need to setup the server ELMAJ-DC2K8 as an additional domain controller, read my previous article Setting Up an Additional Domain Controller With Windows Server 2008 to know the steps required to setup an additional domain controller.

  4. Transfer FSMO roles to the Windows Server 2008 Domain Controller

So lets starts :
  1. Raise Domain Functional Level

    We need to configure the domain to run in native mode, this is done by:
  • On the Windows Server 2003 Domain Controller, run Active Directory User and Computers snap-in by clicking on Start > Administrative Tools > Active Directory User and Computers

  • Right Click the Domain Name node, then click on Raise Domain Functional Level




    If you have Windows 2000 Active Directory domain controllers then choose Windows 2000 native, if you do not have any Windows 2000 Active Directory domain controllers and all of your domain controllers are Windows Server 2003, then choose Windows Server 20003. I don't have any Windows 2000 Active Directory domain controllers, so using the drop down list, I will select Windows Server 2003 and then click the Raise button.



  • A warning message will be displayed, informing you that the changes cannot be reversed. Click OK



  • A confirmation message will be displayed stating that the functional level was raised successfully. Click OK



  • Close Active Directory User and Computers snap-in

  1. Prepare current Windows 2003 Active Directory
  • Before you can have a 2008 server domain controller in your existing 2003 domain, we will need to prepare both the Forest Level and the Domain level, this is done by running the following commands on the Windows Server 2003 Domain Controller.
  • Insert the Windows Server 2008 DVD inside the Windows Server 2003 DVD Drive
  • Open Command Prompt, this is done by Clicking on Start > Run > type CMD > click OK


  • Type D:\sources\adprep\adprep /forestprep (Where D: is the drive of your Windows 2008 DVD)



    Click Enter



    Read the warning message, in my lab I don't have any Windows 2000 Active Directory Domain Controllers, so I can simply skip this by typing C and then press Enter, else quite the Forest Preparation step and upgrade Windows 2000 Active Directory Domain Controller(s) to SP4, then run forestperp again.




  • After Forest preparation is completed successfully, run the Domain preparation command

    Inside CMD, type
    D:\sources\adprep\adprep /domainprep (Where D: is the drive of your Windows 2008 DVD)

    If you have not Raised the Domain Functional Level from Windows 2000 Mixed to Windows 2000 Native or Windows 2003 as was illustrated earlier in step # 1, then you will receive the following error message after you run domainprep command:



    If you did raise the domain functional level, adprep will successfully update the domain-wide information


  • Although adprep /domainprep will update the domain-wide information, you can still run the last command adprep /domainprep /gpprep

    Inside CMD, type D:\sources\adprep\adprep /domainprep /gpprep  (Where D: is the drive of your Windows 2008 DVD)



    As you can see, Domain-wide information has already been updated when we ran the domainprep command,
    as no Group Policy Object (GPO) updates needed, or GPO information has already been updated.


  1. Setting Up an Additional Domain Controller with Windows Server 2008

    Now that Windows Server 2003 Active Directory has been prepared for Windows Server 2008 Domain Controllers, its time to Set Up an Additional Domain Controller With Windows Server 2008 and set it as a Global Catalog. If you already have an additional Windows Server 2008 domain controller and you want to check if it is a Global Catalog or not, then check my article Setting a Windows Server 2008 Domain Controller as a Global Catalog


  2. Transfer FSMO roles to the Windows Server 2008 Domain Controller

    The last step in migrating a domain controller, is transferring the FSMO roles to the new domain controller. I have covered this part in a detailed step by step article, check it here : Transferring FSMO Roles in Windows Server 2008
With all the previous four major steps, you will successfully be able to migrate your old Windows Server 2003 Domain controller to Windows Server 2008.


Summary

Upgrading Windows Server 2003 domain controller to a Windows Server 2008 domain controller is an easy process if you follow the required steps carefully. The process consist of four major steps and they are : raising the domain level, preparing active directory for Windows Server 2008 domain controllers, setting a Windows Server 2008 as an additional global catalog domain controller and then transferring the FSMO Roles.

Now, you can simply demote the Windows Server 2003 domain controller, if you no longer need it.

Configure ADC in server 2008

To set up an Additional Domain Controller, I will use the dcpromo.exe command.
  1. To use the command, click on Start   > Run > and then write dcpromo > Click OK



  2. The system will start checking if Active Directory Domain Services ( AD DS) binaries are installed, then will start installing them. The binaries could be installed if you had run the dcpromo command previously and then canceled the operation after the binaries were installed.

                            

  3. The Active Directory Domain Services Installation Wizard will start, either enable the checkbox beside Use Advanced mode installation and Click Next , or keep it unselected and click on Next


    The following table lists the additional wizard pages that appear for each deployment configuration when you select the Use advanced mode installation check box.
    Deployment configuration
    Advanced mode installation wizard pages
    New forest
    Domain NetBIOS name
    New domain in an existing forest
    On the Choose a Deployment Configuration page, the option to create a new domain tree appears only in advanced mode installation.
    Domain NetBIOS name
    Source Domain Controller
    Additional domain controller in an existing domain
    Install from Media
    Source Domain Controller
    Specify Password Replication Policy (for RODC installation only)
    Create an account for a read-only domain controller (RODC) installation
    Specify Password Replication Policy
    Attach a server to an account for an RODC installation
    Install from Media
    Source Domain Controller

  4. The Operating System Compatibility page will be displayed, take a moment to read it and click Next



  5. On the Choose a Deployment Configuration page, click Existing forest, click Add a domain controller to an existing domain, and then click Next.



  6. On the Network Credentials page, type your domain name, my domain name is elmajdal.net ( was set in the previous article ) , so I will type elmajdal.net.



  7. To set up an Additional Domain Controller, you will need an account that must be either a member of the Enterprise Admins group or the Domain Admins group. We have two options:
  • My Current logged on credentials ( DomainName\Username or MachineName\Username)
  • Alternate credentials

  • If you have previously joined this server to the domain and you are currently logged in to it with an Enterprise Admin/Domain Admin user, then you can use the first option (My current logged on credentials) . As you can see this option is grayed here, and the reason for this is below it. It is because I'm currently logged in with a local user, the machine is not a domain member. I'm left out with the second option: Alternate credentials
  1. To enter the Alternate credentials, click Set. In the Windows Security dialog box, enter the user name and password for an account that must be either a member of the Enterprise Admins group or the Domain Admins group > then click Next.





    If you have entered a wrong username/password , you will receive the following error message



  2. On the Select a Domain page, select the domain of the Additional Domain Controller, and then click Next, as I already have only one domain, then it will be selected by default.



  3. On the Select a Site page, either enable the checkbox beside Use the site that corresponds to the IP address of this computer, this will install the domain controller in the site that corresponds to its IP address, or select a site from the list and then click Next. If you only have one domain controller and one site, then you will have the first option grayed and the site will be selected by default as shown in the following image



  4. On the Additional Domain Controller Options page, By default, the DNS Server and Global Catalog checkboxes are selected. You can also select your additional domain controller to be a Read-only Domain Controller (RODC) by selecting the checkbox beside it.

    My primary domain controller is a DNS Server is well, and this can be verified by reading the additional information written in the below image, that there is currently 1 DNS server that is registered as an authoritative name server for this domain. I do want my Additional DC to be a DNS server and a Global catalog, so I will keep the checkboxes selected. Click Next



  5. If you select the option to install DNS server in the previous step, then you will receive a message that indicates a DNS delegation for the DNS server could not be created and that you should manually create a DNS delegation to the DNS server to ensure reliable name resolution. If you are installing an additional domain controller in either the forest root domain (or a tree root domain) , you do not need to create the DNS delegation. In this case, you can safely ignore the message and click Yes.



  6. In the Install from Media page ( will be displayed if you have selected Use advanced mode installation on the Welcome page, if you didn't select it, then skip to step # 15), you can choose to either replicate data over the network from an existing domain controller, or specify the location of installation media to be used to create the domain controller and configure AD DS. I want to replicate data over the network, so I will choose the first option > click Next



  7. On the Source Domain Controller page of the Active Directory Domain Services Installation Wizard, you can select which domain controller will be used as a source for data that must be replicated during installation, or you can have the wizard select which domain controller will be used as the source for this data. You have two options :
  • Let the wizard choose an appropriate domain controller
  • Use this specific domain controller



    If you want to choose from the list, any domain controller can be the installation partner. However, the following restrictions apply to the domain controllers that can be used as an installation partner in other situations:
    • A read-only domain controller (RODC) can never be an installation partner.
    • If you are installing an RODC, only a writable domain controller that runs Windows Server 2008 can be an installation partner.
    • If you are installing an additional domain controller for an existing domain, only a domain controller for that domain can be an installation partner.
  1. Now you will have to specify the location where the domain controller database, log files and SYSVOL are stored on the server.
    The database stores information about the users, computers and other objects on the network. the log files record activities that are related to AD DS, such information about an object being updated. SYSVOL stores Group Policy objects and scripts. By default, SYSVOL is part of the operating system files in the Windows directory

    Either type or browse to the volume and folder where you want to store each, or accept the defaults and click on Next



    Note :
    Windows Server Backup backs up the directory service by volume. For backup and recovery efficiency, store these files on separate volumes that do not contain applications or other nondirectory files.

  2. In the Directory Services Restore Mode Administrator Password (DSRM) page, write a password and confirm it. This password is used when the domain controller is started in Directory Services Restore Mode, which might be because Active Directory Domain Services is not running, or for tasks that must be performed offline.



    Make sure the password meet the password complexity requirements of the password policy, that is a password that contains a combination of uppercase and lowercase letters, numbers, and symbols. else you will receive the following message  :



  3. Summary page will be displayed showing you all the setting that you have set . It gives you the option to export the setting you have setup into an answer file for use to automate subsequent AD DS operations, if you wish to have such file, click on the Export settings button and save the file. Then click Next to begin AD DS installation



  4. Active Directory Domain Services installation will be completed, click Finish, then click on Restart Now to restart your server for the changes to take effect.





  • Open Active Directory Users & Computers, and then click on the Domain Controllers Organizational Unit, and you will see your Additional Domain Controller along with your Primary Domain Controller.



 

Tuesday, June 19, 2012

Change Server 2k8 Theme


Windows Server 2008: Install Desktop Experience to Utilize Vista Theme


If you are tired of using the Windows Classic theme on your Server 2008, you can install Desktop Experience so that you can enjoy the eye candy goodness of the Vista theme. Desktop Experience will also install Windows Media Player, Windows Sidebar and photo gallery. Follow these steps to install Desktop Experience and liven up your server:


1. Click Start and select Server Manager
2. When the Server Manager window appears, go to the left pane and select Features.
3. On the right, click the Add Features link.
4. Check the Desktop Experience checkbox
5. Click Next.
6. Click Install
7. When the installation is complete, Windows will notify you that you must restart your server to complete the process.
After you have rebooted, go to Services and make sure that the Themes service is started and set to Automatically Start (thanks DTron!). After that, you are ready to change the theme on your server.


  • Go to run & type services.msc
  • Select Theme & R/C select properties
  • Select startup type Automatic & click Apply
  • Click on start & ok
  • Go to run & type (gpupdate)
1. Right-click the desktop and select Personalize.
2. Select Theme.
3. From the Theme Settings window, use the Theme dropdown and select the Windows Vistatheme.
4. Click OK.
So you go from a boring look like this:
To a much better visual experience:


Computer Sale, Repairing, Windows & Software Installation, Formating, Networking, AntiVirus, AMC, DATA Recovery,Website,Assembling,Upgrading Home Service. All Over Delhi/NCR cont :step2solution@gmail.com


Sunday, May 27, 2012

Monday, May 14, 2012

Microsoft Management Consoles (MMC) & MSC shortcut's







    MSC File Name in WINNT\System32\ or other location specifiedSnap-in NameWhat is managed (Features)Note
    -ActiveX Control-single category
    Adsiedit.mscADSI Group Policy Editor-Installed as part of Windows 2000 Support Tools.
    gpedit.mscGroup Policy (Editor)Computer Configuration
    User Configuration
    each with Software Settings, Windows Settings, and Administrative Templates
    -
    dns.mscDomain Name Service-dnscmd.exe
    ?.mscSecurity Configuration and Analysis (Editor)Compares a security database for inconsistencies against 13 preconfigured templates such asbasicsv.inf (or your own) in WINNT\Security\template.secedit.exe
    secpol.mscLocal Security SettingsAccount Policies, Local Policies, Public Key Policies, IP Security Policies on Local Machine-
    dcpol.msc 
    in Server WINNT\System32\
    Domain Controller Security Policysame as above-
    domainpol.msc 
    in Server WINNT\System32\
    Domain Security Policysame as above-
    iis.msc 
    in Server WINNT\System32\\inetsrv
    IISHTMLA is WEB-Based manager for IIS 5-
    sfumgmt.msc[Server For] UNIX AdminIntegrates with Server for PCNFS or Server for NIS to provide user authentication of NFS (UNIX/Linus) clients. Allows them to access files on a Win 2000 Pro/Server computer.-
    dfsgui.mscDFS (Distributed File Services)--
    msinfo32.msc 
    in Program Files \Common Files \Microsoft \Shared \MSInfo
    System Information--
    compmgmt.msc 
    in WINNT\System32\
    Computer ManagementSystem Tools, Storage, Services and Applications-
    devmgmt.msc 
    in WINNT\System32\
    Device Manager--
    FPMMC.MSC 
    in Program Files \Common Files \Microsoft \Shared \web server extensions \40 \bin
    Front Page Server ExtensionsFrom Console Root:-
    certmgr.msc 
    in WINNT\System32\
    Certificates--
    ciadv.msc 
    in WINNT\System32\
    Indexing Service-right-click My Computer | Manage | Computer Management | Services And Applications
    dfrg.msc 
    in WINNT\System32\
    DIsk Defragmenter--
    diskmgmt.msc 
    in WINNT\System32\
    Disk Management--
    eventvwr.msc 
    in WINNT\System32\
    Event ViewerApplication Log, Security Log, System Log-
    faxserv.msc 
    in WINNT\System32\
    Fax Service Management--
    fsmgmt.msc 
    in WINNT\System32\
    Shared FoldersShares, Sessions, Open Files-
    ias.msc 
    in WINNT\System32\
    Internet Authentication Service (Local)--
    lusrmgr.msc 
    in WINNT\System32\
    Local Users and Groups (Manager)Users, Groups-
    ntmsmgr.msc 
    in WINNT\System32\
    Removable StorageMedia Pools, Physical Locations, Work Queue, Operator Requests-
    ntmsoprq.msc 
    in WINNT\System32\
    Removable Storage Operator Requests--
    perfmon.msc 
    in WINNT\System32\
    Performance (Monitor)From Console Root:
    System Monitor, Performance Logs and Alerts
    -
    wmimgmt.msc 
    in WINNT\System32\
    Windows Management Infrastructure (Instrumentation service)WMI Control-
    comexp.msc 
    in WINNT\System32\ \Com
    Component ServicesFrom Console Root:-
    services.msc 
    in WINNT\System32\
    {Services}--
    ADCADMIN.MSC 
    in WIN2000PRO \VALUEADD \MSFT \MGMT \ADC
    Active Directory Connector Management--
    acssnap.msc 
    in Server WINNT\System32\
    QoS [Quality of Service] Admission Control--
    domain.msc 
    in Server WINNT\System32\
    Active Directory Domains and Trusts--
    dsa.msc 
    in Server WINNT\System32\
    Active Directory Users and Computers--
    dssite.msc 
    in Server WINNT\System32\
    AD Sites and Services--
    rrasmgmt.msc
    in Server WINNT\System32\
    Routing and Remote Access--
    Sidwalk.msc*SIDWalker Security Manager-Installed as part of Windows 2000 Support Tools.
    tapimgmt.msc
    in Server WINNT\System32\
    Telephony--
    tscc.msc
    in Server WINNT\System32\
    Terminal Services Configuration--
    Step2solutions.blogspot.com
 

Wednesday, May 9, 2012

Install XP in 15 Minute's


STEP1 : After the Copy Part is Over ... System is Rebooted as we all know In general Foramatting Procedure...
Now After Reboot 

STEP 2: Now As This Image APPEARS You Have to Press  "Shift + F10 "  . This Will Open The command Prompt...  Now type  taskmgr  in it. This will open the Task manager..

STEP 3 : After The task Manager Opens Goto Processes ... And Find "Setup.exe"  process and Right CLICK on It.... and set the Priority to Highest...


STEP 4: Now Just Watch the Set It will take around 9 minutes and 2 minutes for Tolerance(depends System to system)....










step2solutions.blogspot.com

Windows Tricks


Open COMMAND PROMPT while Locked by User.
 
>open notepad
>type www.command.com
> then save as cmd.bat at desktop
>then enter now its open.....enjoy


>>If your computer is slow?
then clean up the ram..

>Open notepad
>type FREEMEM=SPACE(64000000)
>Save it as ram.vbs
now run the script.
Check out !!



>>CracK BIOS Password
>Open the CPU
>Observe the Motherbord
>Remove the Silver Battery(3v)
>Wait 2 minutes and place the Battery
>>Restoring a Lost Desktop-
>Start
>Run
Type a period " . "
Then press Enter



>>If ur PC is hanged then do this.
Press shift+ctrl+esc or ctrl+alt+del
n den click on 'END TASK'
ur PC is runing now


>>create folder without name
>select any folder
>rename it
>press alt & type 0160 or 255
>enter


>>Amazing trick for use
Windows Backup Utility if installed
go to run
type ntbackup
ok
Now use backup


>>Increase the speed of your file sharing
Simple Way to Share Multiple Folders :
Goto Run and Type SHRPUBW.EXE then press Enter
Select the folder you want to share and Set permissions,
your share folder is ready now.....  



>>Turning off the Help on Min, Max, Close Icons
When the mouse goes over the minimize, maximize and close icons on the upper
right hand side of a window.

To disable that display:
1. Start Regedit
2. Go to HKEY_CURRENT_USER \ Control Panel \ Desktop
3. Create a String Value called MinMaxClose
4. Give it a value of 1
5. Reboot


>>FIX CORRUPTED FILE IN WINDOW XP
1.Load XP cd into cd drive

2. go to Run

3. type sfc/scannowok

4. Then copy its lost file frm cd. 


  
>>AUTO DELETE TEMPORARY FOLDER.!!
what i prefer is %temp% " without quotes.. at Start -> Run.. this opens ur temp folder n den u cal erase it nearly
First go into gpedit.msc
Next select -> Computer Configuration/Administrative Templates/Windows Components/Terminal Services/Temporary Folder
Then right click "Do Not Delete Temp Folder Upon Exit"
Go to properties and hit disable. Now next time Windows puts a temp file in
that folder it will automatically delete it when its done! Note from Forum Admin: Remember, GPEDIT (Group Policy Editor) is only available in XP Pro.

>>Locking Folders:
  • Consider you want to lock a folder named XXXX in your E:\, whose path is E:\XXXX.
  • Now open the Notepad and type the following
[code]ren xxxx xxxx.{21EC2020-3AEA-1069-A2DD-08002B30309D}[/code]
  • Where xxxx is your folder name. Save the text file asloc.bat in the same drive.
  • Open another new notepad text file and type the following
[code]ren xxxx.{21EC2020-3AEA-1069-A2DD-08002B30309D} xxxx[/code]
  • Save the text file as key.bat in the same drive.
Steps to lock the folder:
  • To lock the xxxx folder, simply click the loc.bat and it will transform into control panel icon which is inaccessible.
  • To unlock the folder click the key.bat file. Thus the folder will be unlocked and the contents are accessible.
>>Locking Drives:
We don’t usually prefer to lock our drives, but sometimes it becomes nesscary. Say for instance you might have stored your office documents in D:\ and you don’t want your kids to access it, in such case this technique can be useful for you. Please don’t try this tweak with your root drive (usually C:\ is the root drive) since root drives are not intended to be locked because they are mandatory for the system and application programs.
  • Start & Run and type Regedit to open Registry editor
  • BrowseHKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer
  • Create a new DWORD value NoViewOnDrive and set its value as
2^ (Alpha Number of Drive Letter-1) where Alpha number are simple counting of alphabets from A to Z as 1 - 26
For example: to lock C:\, Alpha number of C is 3 so 2^ (3-1) = 4 (decimal value)
  • To lock more drives, calculate the value of each drive and then set sum of those numbers as value
  • To unlock your drive just delete the key from the registry.
>>To Remove Recyle Bin From Your Desktop
Open Regedit by going to START - RUN and type Regedit and hit enter. Then you should navigate to following entry in registry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ Desktop\NameSpace\{645FF040-5081-101B-9F08-00AA002F954E} and delete it. This action should remove recycle bin from your desktop.
>>Disable the Security Center warnings
Follow the given steps to edit the computer registry for disable message:
First click on Start button then type Regedit in Run option.
Here locate the location to:
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
Here in right side panel, double click on Anti Virus Disable Notify and set its value 1.
Now close the registry editor and restart your computer after any changes to go into effect.


>>HIDE DRIVES
How to Hide the drives(c:,d:,e:,a:...etc)


To disable the display of local or networked drives when you click My Computer.
1.Go to start->run.Type regedit.Now go to:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies
 \Explorer

2.In the right pane create a new DWORD item and name it NoDrives(it is case sensitive).

3.Modify it's value and set it to 3FFFFFF (Hexadecimal) .

4.Restart the computer.

5.Now when you click on My Computer, no drives will be shown(all gone...).

To enable display of drives in My Computer, simply delete this DWORD item that you created. Restart your computer. All the drives are back again.

>>Show your name in taskbar

Trick to Show Your name after time in taskbar...
Try this trick to add up ur name in place of AM and PM beside time Its simple

Step-1:- Navigate to -> Start -> Control Pannel -> Regional and Language Option -> Click on Customize -> Go to TIME Tab -> Change AM symbol and PM symbol from AM and PM to ur name -> Apply -> Ok ...
Did It change? If not, follow step-2 below.

Step2:- Now go to time in taskbar and Double Click it to open "Date and time property" ...Look place where time changes in digital form i.e. 02:47:52 AM , click to arrow to change the AM or PM by selecting and press arrow. It will Show ur name or name that was entered by u, Apply -> OK
 Done

step2solutions.blogspot.com

Thursday, May 3, 2012

How to Move user Mailbox in exchange 2007


How to Move user Mailbox in exchange 2007

Moving Mailboxes via the Exchange Management Console
Run the Exchange Management Console and in the console tree, navigate to the Recipient Configuration node and expand it.
Under the Recipient Configuration node, select Mailbox.
In the result pane you’ll now see a list of mailboxes within your Exchange organization. If this is the first time you are migrating user mailboxes, they will obviously still be located on Exchange 2000 or Exchange 2003 servers and thus will appear as a Legacy Mailbox as identified in the Recipient Type Details column. Mailboxes that have already been moved to Exchange 2007 servers will appear as a User Mailbox. The different types of mailboxes are shown in Figure 1 below where you can see that User3 is a mailbox still located on Exchange 2003.

Figure 1: Mailboxes Displayed in Exchange Management Console
To move a mailbox, simply highlight the relevant mailbox, right-click it and choose Move Mailbox… from the context menu. Note that you can select multiple mailboxes at the same time. Choosing the Move Mailbox… option invokes the Move Mailbox wizard, the first screen of which is the Introduction screen as shown in Figure 2.

Figure 2: Move Mailbox Wizard Introduction Screen

On the Introduction screen, select the target Exchange 2007 server, storage group and database that will house the mailbox that will be moved. When this is set correctly, click the Next button.
Next, the Move Options screen is presented, shown in Figure 3. This allows you to control what happens if the move mailbox process encounters corrupt messages. Here you have a choice of skipping the mailbox and therefore not moving it, or skipping a number of corrupted messages. You can inform the move mailbox process how many corrupt messages you’ll tolerate skipping. In Exchange 2003, the maximum number of corrupt items you could specify was 100, but within the move mailbox wizard now, you can enter up to 2^31-1, or 2,147,483,647. If you ask me, 100 is more than enough since if you are seeing mailboxes with many corrupted items, you probably have a bigger problem on your hands. Once you’re happy with your choice, click Next.

Figure 3: Move Mailbox Wizard Move Options Screen
Next up is the Move Schedule screen, as shown in Figure 4. This allows you to begin the mailbox move immediately, or later at a scheduled time. This is invaluable during migrations, as it is likely you’ll want to move the mailboxes out of hours, perhaps in an unattended fashion. If you choose the At the following time option, the date and time is set to the current time, so you’ll have to choose your custom time when you want the move process to start. Also note the Cancel tasks that are still running after (hours) option, which allows you to specify how long the process will run before being cancelled. Again, this is particularly useful when moving large numbers of mailboxes overnight. For example, Figure 4 shows that mailbox moves will be cancelled after 8 hours, meaning that if they are started at 21:00, mailbox moves will stop at 5am, thus ensuring that any users that may arrive early for work are not affected. If a mailbox is in the middle of being moved at 5am in this case, this mailbox is moved back to the source server; all previously migrated mailboxes remain on the target server. Again, once you’re happy with your selections, click Next.

Figure 4: Move Mailbox Wizard Move Schedule Screen
The penultimate screen to be displayed is simply a summary screen for the move operation that will be performed, giving you a chance to review the details of the move. Once you’re happy, clicking the Movebutton commences the mailbox move process. If you’ve elected to move the mailboxes at a scheduled time, the summary screen will then give you a countdown process as you can see in Figure 5. You can cancel the move process at any time by clicking the Cancel button.

Figure 5: Move Mailbox Wizard Scheduled Countdown
If you do choose to move multiple mailboxes at the same time, you’ll see a screen similar to the one shown in Figure 6 since the move mailbox wizard is multi-threaded. You can see that 4 mailboxes are being moved at the same time, with the 5th mailbox, User9’s mailbox, shown at the bottom with a state of Pending. Within the Exchange Management Console, it’s not possible to move more than 4 mailboxes at a time, although it is possible to change the number of threads when using the Exchange Management Shell, which we’ll look at in part two of this article.

Figure 6: Multiple Mailbox Moves
If all has gone well, the final screen to be displayed will be a completion screen similar to the one shown in Figure 7.

Figure 7: Successful Mailbox Move
The Exchange Management Console cannot be used to move mailboxes across forests. To do this, you will need to use the Exchange Management Shell but as I said earlier we’ll only be looking at intra-organization moves in this article.
Exchange performs plenty of checks to make sure that the move mailbox process will be successful. For example, if you try to move a mailbox to an Exchange 2007 database that has a lower mailbox size limit than the actual size of the mailbox being moved you will see the error shown in Figure 8. As an example of another error check performed, you will see in Figure 9 that I managed to create a duplicate mailbox during some testing, resulting in the duplicate mailbox being deleted prior to another attempt to move the mailbox.


Figure 8: Mailbox Size Checking

Figure 9: Duplicate Mailbox Error
Diagnostics Logging
What do you see in the event viewer when the mailbox move process has been performed? Well, in my testing the same events are logged no matter whether the diagnostics logging is set to a low or high level. In the three event log entries below, you will see that all three have a source of Exchange Migration and a category of Move Mailbox. The first event to be logged is event 1006 as seen in Figure 10, where you can see that the process is getting underway. The source and destination databases are revealed as well as the Exchange DN attribute of the mailbox being moved which is out of view within the description area of the event.

Figure 10: Event 1006
Once the mailbox has been moved, event 1007 is logged as you can see from Figure 11. This is nice and self-explanatory.

Figure 11: Event 1007
Finally, event 9354 is logged which informs you that the original mailbox has been deleted from the source database. This is shown in Figure 12.

Figure 12: Event 9354
Also, one other event log entry worth pointing out is something that was first introduced in Exchange 2003. It is generally considered a best practice to ensure that users are logged out of their mailbox when you move it. If the user tries to access their mailbox whilst it’s in the process of being moved, event 9660 is logged with a source ofMSExchangeIS and a category of Logons. A sample of this event is shown in Figure 13.


Step2solutions.blogspot.com