Sunday, February 24, 2008

Windows Server 2008, Upgrade or Migrate?

Bulletin: 022408

Software Effected:
ServerMigrator, RemoveUnknown, Accessreporter, RenameITSE

Issue:
We are planning on deploying Windows Server 2008 shortly, would you recommend upgrading existing servers to Server 2008 or migrating clean to Server 2008?
Are there any steps we should take before rolling out Windows Server 2008?

Solution:
Before you begin, verify hardware and software compatibility before deciding which path to follow.
Regardless of which path you select for deploying Windows Server 2008, we strongly recommend analyzing and cleaning up the old server before moving foward. In either case, "garbage in, garbage out", your end result will only be sucessful as what you bring into server 2008.

Windows Server 2008 in place upgrade
Winzero recommends the following steps above and beyond the Microsoft upgrade path.

Report and cleanup obsolete users and local groups. Remove disabled accounts and accounts that do not or have not accessed the server for a period of time. Remove local groups with out members or local groups that do not have access to folders or shares.

Report, verify and cleanup File, folder and Share ACLs. Tighten security by removing the everyone group in ACLs.

Report and remove unknown accounts and SIDs in localgroups and files, folders and share ACLs.

Windows Server 2008 Migration
Winzero recommends the following steps above and beyond the Microsoft migration path.

Report and cleanup obsolete users and local groups. Remove disabled accounts and accounts that do not or have not accessed the server for a period of time. Remove local groups with out members or local groups that do not have access to folders or shares.

Report, verify and cleanup File, folder and Share ACLs. Tighten security by removing the everyone group in ACLs.

Report and remove unknown accounts and SIDs in localgroups and files, folders and share ACLs.

if your migration involves server consolidations, report duplicate user names and duplicate localgroups names from the servers that will be combined. Verify if accounts and groups are to be merged or renamed before migrating.

Taking these additional steps before upgrading or migrating to Windows Server 2008 will improve security and provide the fastest time-to-benefit.