Office 365 Conversion - Autodiscover still points to old exchange server

Recently ran into a problem where a client had been migrated from an in house exchange server to Office 365 email.

After the migration the outlook clients kept switching back to the in house exchange server even though there was an external DNS autodiscover record and an internal cname autodiscover pointing to the external dns record.

We fix this by removing the following two attributes from the users AD account.  homeMDB and homeMTA


After removing the account we were able to run repair in outlook and it reconnect to the correct server.

SBS Migration help

SBSMigration.com

BPOS PowerShell Commands

Grant full access, send as, and send of behalf of  permission to account.

Add-MSOnlineMailPermission -GrantFullAccess True -GrantSendAs True -GrantSendOnBehalfOf True -Identity User1@domain.com -TrustedUser User2@domain.com

 Grants User2@domain.com access to User1@domain.com account.

Office 365 PowerShell commands

As I come across useful Powershell commands to manage Office365 I'll add them here.

To manage Office 365 through PowerShell you first need to install an update to PowerShell that can be found HERE

List of  commands


1.    Authenticate with Office 365

 Connect-MsolService


2.   Get list of user accounts

Get-MSOLUser

3.   Change password to never expire.

Set-MsolUser -UserPrincipalName     -PasswordNeverExpires $true


-----------------------------------------

Connect Windows PowerShell to the Service

Applies to: Office 365 for professionals and small businesses, Office 365 for enterprises, Live@edu

Topic Last Modified: 2011-12-19

After you have installed and configured Windows PowerShell and Windows Remote Management (WinRM) on your computer, you have to connect the Windows PowerShell on your local computer to the cloud-based service to perform tasks in your cloud-based organization.

When you open Windows PowerShell on your computer, you're in the Windows PowerShell session of your local computer. A session is an instance of Windows PowerShell that contains all the commands that are available to you.

The Windows PowerShell session of your local computer, called the client-side session, only has the basic Windows PowerShell commands available to it. By connecting to the cloud-based service, you connect to the Microsoft datacenter's server environment, called the server-side session, which contains the commands used in the cloud-based service.

Before you begin

Before you connect, make sure you have the correct version of Windows PowerShell and WinRM installed and configured on your computer. For more information, see Install and Configure Windows PowerShell.

Verify the account you will use to connect is authorized to connect using Windows PowerShell. For more information, see Control Users' Access to Windows Remote Management.

Connect Windows PowerShell on your local computer to the cloud-based service

1. Click Start > All Programs > Accessories > Windows PowerShell > Windows PowerShell.
2. Run the following command:
   
   
   

   $LiveCred = Get-Credential
   

3. In the Windows PowerShell Credential Request window that opens, type the credentials of an account in your cloud-based organization. When you are finished, click OK.
4. Run the following command:
   
   
   

   $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/powershell/ -Credential $LiveCred -Authentication Basic -AllowRedirection
   

   Note   The AllowRedirection parameter enables cloud-based organizations in datacenters all over the world to connect Windows PowerShell to the cloud-based service by using the same URL.
5. Run the following command:
   
   
   

   Import-PSSession $Session
   

   A progress indicator appears that shows the importing of commands used in the cloud-based service into the client-side session of your local computer. When this process is complete, you can run these commands.

Disconnect Windows PowerShell from the cloud-based service

When you're finished using the server-side session, always disconnect Windows PowerShell by running the following command:

Remove-PSSession 

For example, to disconnect from the server-side session that is defined by the $Session variable, run the following command:

Remove-PSSession $Session

Important   If you close the Windows PowerShell window without disconnecting from the server-side session, your connection will remain open for 15 minutes. Your account can only have three connections to the server-side session at one time.

----------------------------------------------------------------

Give an Administrator the Ability to Open and View the Contents of a User's Mailbox

Applies to: Office 365 for professionals and small businesses, Office 365 for enterprises, Live@edu

Topic Last Modified: 2011-03-08

Your organization may require that Exchange Online administrators be able to open another user's mailbox and view the contents, including reading e-mail messages.

By default, Exchange Online administrators or members of the Organization Management administrator role group can access a user's Options page in the Exchange Control Panel, but they can’t open the user’s mailbox and view the contents. You have to explicitly assign an administrator the permissions necessary to open another user's mailbox.

Assign permissions to one Exchange Online administrator

Run the following command:

Add-MailboxPermission  -User admin -AccessRights FullAccess -InheritanceType All

Note   You can also allow an ordinary user, such as an administrative assistant or human resources specialist, to open another user's mailbox by specifying that person in the User parameter.

Assign permissions to the Organization Management role group

Run the following command:

Add-MailboxPermission  -User "Organization Management" -AccessRights FullAccess -InheritanceType All

Give full access to all user mailboxes in your organization

To give the Exchange Online administrator access to all user mailboxes in your organization, run the following command:

Get-Mailbox -ResultSize unlimited -Filter {(RecipientTypeDetails -eq 'UserMailbox') -and (Alias -ne 'Admin')} | Add-MailboxPermission -User admin -AccessRights fullaccess -InheritanceType all

To give members of the Organization Management role group access to all user mailboxes, set the User parameter to “Organization Management” in the previous command.

Open another user's mailbox

Here's how you open another user's mailbox after you've been assigned permissions: Open Another Mailbox.

Export / Merge recovered mailbox from RSG to a new account

Exchange 2007 Recovery Storage Group

Export / Merge recovered mailbox from RSG to a new account


Restore-Mailbox –RSGMailbox “Test User 1” -RSGDatabase “servername\RSG name\database name” –Identity “Test User 2” –TargetFolder “Test User 1 Recovered data”

Run Commands

A bunch of useful run commands.  Here is the link to the site I found this on.

To Access…	Run Command
Accessibility Controls	access.cpl
Accessibility Wizard	accwiz
Add Hardware Wizard	hdwwiz.cpl
Add/Remove Programs	appwiz.cpl
Administrative Tools	control admintools
Adobe Acrobat (if installed)	acrobat
Adobe Designer (if installed)	formdesigner
Adobe Distiller (if installed)	acrodist
Adobe ImageReady (if installed)	imageready
Adobe Photoshop (if installed)	photoshop
Automatic Updates	wuaucpl.cpl
Bluetooth Transfer Wizard	fsquirt
Calculator	calc
Certificate Manager	certmgr.msc
Character Map	charmap
Check Disk Utility	chkdsk
Clipboard Viewer	clipbrd
Command Prompt	cmd
Component Services	dcomcnfg
Computer Management	compmgmt.msc
Control Panel	control
Date and Time Properties	timedate.cpl
DDE Shares	ddeshare
Device Manager	devmgmt.msc
Direct X Control Panel (if installed)*	directx.cpl
Direct X Troubleshooter	dxdiag
Disk Cleanup Utility	cleanmgr
Disk Defragment	dfrg.msc
Disk Management	diskmgmt.msc
Disk Partition Manager	diskpart
Display Properties	control desktop
Display Properties	desk.cpl
Display Properties (w/Appearance Tab Preselected)	control color
Dr. Watson System Troubleshooting Utility	drwtsn32
Driver Verifier Utility	verifier
Event Viewer	eventvwr.msc
Files and Settings Transfer Tool	migwiz
File Signature Verification Tool	sigverif
Findfast	findfast.cpl
Firefox (if installed)	firefox
Folders Properties	folders
Fonts	control fonts
Fonts Folder	fonts
Free Cell Card Game	freecell
Game Controllers	joy.cpl
Group Policy Editor (XP Prof)	gpedit.msc
Hearts Card Game	mshearts
Help and Support	helpctr
HyperTerminal	hypertrm
Iexpress Wizard	iexpress
Indexing Service	ciadv.msc
Internet Connection Wizard	icwconn1
Internet Explorer	iexplore
Internet Properties	inetcpl.cpl
Internet Setup Wizard	inetwiz
IP Configuration (Display Connection Configuration)	ipconfig /all
IP Configuration (Display DNS Cache Contents)	ipconfig /displaydns
IP Configuration (Delete DNS Cache Contents)	ipconfig /flushdns
IP Configuration (Release All Connections)	ipconfig /release
IP Configuration (Renew All Connections)	ipconfig /renew
IP Configuration (Refreshes DHCP & Re-Registers DNS)	ipconfig /registerdns
IP Configuration (Display DHCP Class ID)	ipconfig /showclassid
IP Configuration (Modifies DHCP Class ID)	ipconfig /setclassid
Java Control Panel (if installed)	jpicpl32.cpl
Java Control Panel (if installed)	javaws
Keyboard Properties	control keyboard
Local Security Settings	secpol.msc
Local Users and Groups	lusrmgr.msc
Logs You Out Of Windows	logoff
Malicious Software Removal Tool	mrt
Microsoft Access (if installed)	msaccess
Microsoft Chat	winchat
Microsoft Excel (if installed)	excel
Microsoft Frontpage (if installed)	frontpg
Microsoft Movie Maker	moviemk
Microsoft Paint	mspaint
Microsoft Powerpoint (if installed)	powerpnt
Microsoft Word (if installed)	winword
Microsoft Syncronization Tool	mobsync
Minesweeper Game	winmine
Mouse Properties	control mouse
Mouse Properties	main.cpl
Nero (if installed)	nero
Netmeeting	conf
Network Connections	control netconnections
Network Connections	ncpa.cpl
Network Setup Wizard	netsetup.cpl
Notepad	notepad
Nview Desktop Manager (if installed)	nvtuicpl.cpl
Object Packager	packager
ODBC Data Source Administrator	odbccp32.cpl
On Screen Keyboard	osk
Opens AC3 Filter (if installed)	ac3filter.cpl
Outlook Express	msimn
Paint	pbrush
Password Properties	password.cpl
Performance Monitor	perfmon.msc
Performance Monitor	perfmon
Phone and Modem Options	telephon.cpl
Phone Dialer	dialer
Pinball Game	pinball
Power Configuration	powercfg.cpl
Printers and Faxes	control printers
Printers Folder	printers
Private Character Editor	eudcedit
Quicktime (If Installed)	QuickTime.cpl
Quicktime Player (if installed)	quicktimeplayer
Real Player (if installed)	realplay
Regional Settings	intl.cpl
Registry Editor	regedit
Registry Editor	regedit32
Remote Access Phonebook	rasphone
Remote Desktop	mstsc
Removable Storage	ntmsmgr.msc
Removable Storage Operator Requests	ntmsoprq.msc
Resultant Set of Policy (XP Prof)	rsop.msc
Scanners and Cameras	sticpl.cpl
Scheduled Tasks	control schedtasks
Security Center	wscui.cpl
Services	services.msc
Shared Folders	fsmgmt.msc
Shuts Down Windows	shutdown
Sounds and Audio	mmsys.cpl
Spider Solitare Card Game	spider
SQL Client Configuration	cliconfg
System Configuration Editor	sysedit
System Configuration Utility	msconfig
System File Checker Utility (Scan Immediately)	sfc /scannow
System File Checker Utility (Scan Once At The Next Boot)	sfc /scanonce
System File Checker Utility (Scan On Every Boot)	sfc /scanboot
System File Checker Utility (Return Scan Setting To Default)	sfc /revert
System File Checker Utility (Purge File Cache)	sfc /purgecache
System File Checker Utility (Sets Cache Size to size x)	sfc /cachesize=x
System Information	msinfo32
System Properties	sysdm.cpl
Task Manager	taskmgr
TCP Tester	tcptest
Telnet Client	telnet
Tweak UI (if installed)	tweakui
User Account Management	nusrmgr.cpl
Utility Manager	utilman
Windows Address Book	wab
Windows Address Book Import Utility	wabmig
Windows Backup Utility (if installed)	ntbackup
Windows Explorer	explorer
Windows Firewall	firewall.cpl
Windows Magnifier	magnify
Windows Management Infrastructure	wmimgmt.msc
Windows Media Player	wmplayer
Windows Messenger	msmsgs
Windows Picture Import Wizard (need camera connected)	wiaacmgr
Windows System Security Tool	syskey
Windows Update Launches	wupdmgr
Windows Version (to show which version of windows)	winver
Windows XP Tour Wizard	tourstart
Wordpad	write

How to Remove / Stop Folder Redirection in Windows Server

I found this link to be very useful in removing folder redirection.

How to stop Folder Redirection in Windows Server 2003 and in Windows 2000 Server

View products that this article applies to.

System TipThis article applies to a different version of Windows than the one you are using. Content in this article may not be relevant to you. Visit the Windows 7 Solution Center

On This Page

• INTRODUCTION
• MORE INFORMATION
  • Technical support for Windows x64 editions

Expand all | Collapse all

INTRODUCTION

This article describes how to stop Folder Redirection in Microsoft Windows Serve...

This article describes how to stop Folder Redirection in Microsoft Windows Server 2003 and in Microsoft Windows 2000 Server.

Back to the top

MORE INFORMATION

After you have successfully deployed a Folder Redirection Group Policy object (G...

After you have successfully deployed a Folder Redirection Group Policy object (GPO) in your site, you may want to stop Folder Redirection for one or more users. However, before you try to stop Folder Redirection, you must first enable the Redirect the folder back to the local userprofile location when policy is removed Group Policy setting.

Important After you modify a GPO and enable the Redirect the folder back to the local userprofile location when policy is removed Group Policy setting, all users who you want to stop Folder Redirection must log off and then log on again. This is to make sure that the updated GPO settings are applied before you stop Folder Redirection.

To stop Folder Redirection, follow these steps:

1. Enable the Redirect the folder back to the local userprofile location when policy is removed Group Policy setting. To do this, follow these steps:
   1. Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
   2. In the Active Directory Users and Computers console tree, locate the site, domain, or organizational unit that contains the users who you want to apply the updated GPO to.
   3. Right-click the object, such as the organizational unit, and then click Properties.
   4. Click the Group Policy tab.
   5. Click the GPO that contains your Folder Redirection policy setting in the Group Policy Object Links list, and then click Edit.
   6. In the Group Policy console tree, expand User Configuration, expand Windows Settings, and then expand Folder Redirection.
   7. Right-click Application Data, and then click Properties.
   8. Click the Settings tab.
   9. In the Policy Removal box, click to select the Redirect the folder back to the local userprofile location when policy is removed policy setting, and then click OK.
   10. Repeat steps g through i for the Desktop, My Documents, and Start Menu objects.
   11. Close the Group Policy dialog box, and then close the Properties dialog box for the object that you selected in step c.
   Important All users who are affected by your GPO modification must log off and back on to any computers where they have logged on before the changes are applied. You must apply these changes to the user's computer before you go to the next step.
2. When all users have logged off and then logged back on, and the updated GPO for Folder Redirection has been applied, use one of the following methods to stop Folder Redirection:
   • Method 1: Remove the user from the organizational unit where the folder redirection GPO is applied to a different organizational unit that does not redirect folders. To do this, follow these steps:
     Important Move the user accounts, do not delete the GPO.
     1. In the console tree of Active Directory Users and Computers, right-click DomainName, and then click Find.
     2. Click Users, Contacts, and Groups in the Find box.
     3. Type the name of the user account, and then click Find Now.
     4. In the Search results box, right-click the user account, and then click Move.
     5. In the Container to move object to box, locate a security group that does not have Folder Redirection policy enabled, and then click OK.
   • Method 2: Modify the security properties of the GPO to deny the user or group Read permissions and Apply Group Policy permissions to that GPO. This enables other GPO's to be applied to the user, while making sure that the folder redirection policy setting is not applied. To do this, follow these steps:
     1. Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
     2. In the Active Directory Users and Computers console tree, right-click the organizational unit object or domain object that has the Group Policy Object whose security properties that you want to change, and then click Properties.
     3. In the Properties dialog box for the object, click the Group Policy tab, select the GPO that you want to change from the list, and then click Properties.
     4. In the GPO Properties dialog box, click the Security tab, and then change the permissions so that only the required users have the Read and Apply Group Policy permissions. For users where the GPO does not apply, make sure that you click to select the Deny check box for the Read and Apply Group Policy permissions. Click OK two times.
        
        Note Make sure that Administrators have Read and Write permissions for the GPO.
   After you use one of these methods, Folder Redirection will be stopped the next time that the user processes this GPO. By default, the object is cached on the user's computer and will not be updated unless another change is detected. To force an update, you must follow these additional steps:
   1. Create or modify a GPO that applies to the computers on which users who are affected by folder redirection policies log on.
   2. Edit the GPO.
   3. Under Computer Configuration, expand Administrative Templates.
   4. Under Administrative Templates, expand System.
   5. Under System, select Group Policy.
   6. Double-click the Folder Redirection policy processing setting
   7. Select the Enabled option, and then click to select the second check box. (Process even if the Group Policy objects have not changed.)
   8. Exit the Group Policy Object Editor. Make sure that this new GPO applies to computer accounts for which users are using folder redirection.
   After you apply this policy change, the computers can detect the updated folder redirection policy and will honor the changes that have been made to stop using folder redirection.
   
   Note After a Folder Redirection GPO is applied to a user profile, those Group Policy settings are retained locally on the user's computer. Group Policy settings are changed only when a new or modified GPO is applied to the user or computer.
   
   For additional information about Folder Redirection, click the following article numbers to view the articles in the Microsoft Knowledge Base:
   232692 (http://support.microsoft.com/kb/232692/ ) Folder Redirection feature in Windows

Back to the top

Technical support for Windows x64 editions

Your hardware manufacturer provides technical support and assistance for Microsoft Windows x64 editions. Your hardware manufacturer provides support because a Windows x64 edition was included with your hardware. Your hardware manufacturer might have customized the Windows x64 edition installation with unique components. Unique components might include specific device drivers or might include optional settings to maximize the performance of the hardware. Microsoft will provide reasonable-effort assistance if you need technical help with your Windows x64 edition. However, you might have to contact your manufacturer directly. Your manufacturer is best qualified to support the software that your manufacturer installed on the hardware.

For product information about Microsoft Windows XP Professional x64 Edition, visit the following Microsoft Web site:

http://www.microsoft.com/windowsxp/64bit/default.mspx (http://www.microsoft.com/windowsxp/64bit/default.mspx)

For product information about Microsoft Windows Server 2003 x64 editions, visit the following Microsoft Web site:

http://www.microsoft.com/windowsserver2003/64bit/x64/editions.mspx (http://www.microsoft.com/windowsserver2003/64bit/x64/editions.mspx)  

http://support.microsoft.com/kb/888203

Benchmark hard drive

A few tools for benchmarking hard drive performance.

CrystalDiskMark

PassMark

HD Tune

Office 365 Links

Links for setting up Office 365


Manually update and configure desktops for Office 365

http://onlinehelp.microsoft.com/en-us/office365-enterprises/ff637585.aspx

BPOS to Office365 Admin checklist

http://www.microsoft.com/online/help/en-us/helphowto/8939e90a-59dc-4f0f-aec0-19a899c0af75.htm

Blackberry Email Reconciliation

Found a good link to an article explaining how email reconciliation works for blackberry

Link to the site
http://www.kreslavsky.com/2008/08/how-blackberry-email-reconciliation-deleting-emails-works.html

What is email reconciliation?

Email reconciliation is used to configure email deletion handling option of email accounts that are set in BB device.
For each mail account you can state whether you want the e-mail deleted on the handheld or the mailbox and handheld;
You can set the device the following ways:
Enable or disable wireless reconciliation and configure how conflicts are handled.

In order to set reconciling options on Black Berry Device go to:

Messages –> then select “Options”–> “Email Reconciliation”

Reconciliation options are:

Delete on: “Mailbox & handheld” – Means: When you delete message on Device or outlook message will be deleted.
Delete on: “Handled” – Means: When you delete message on Device, message won’t be deleted from mailbox.
Recommended settings setup:

1. From your home screen, go into your Messages folder.
2. Once in your messages, folder, bring up your menu
3. Scroll down to and choose “Options”.
4. Scroll down to and select “Email Reconciliation”.
5. In the “Email Reconciliation” menu, make sure “Delete On” is set to “Mailbox & Handheld”.
6. Confirm that Wireless Reconcile is set to “On”
7. Confirm that “On Conflicts” your “Mailbox Wins”
8. Save your changes.
9. Exit back out to your messages folder, and once again bring up the menu.
10. Scroll down to “Reconcile Now” to force reconciliation between your handheld and In-Box.
11. Your messages should now synchronize between your BlackBerry and In-Box.
Some general guidelines for Reconciliation

Most people thing that message deleted on outlook should disappear from BB device immediately and start panic. So don’t , be more patient . it takes approximately 20 minutes till messages are deleted from Handheld

1. If you delete an email from Outlook you need to leave it in the recycle bin otherwise the BES will lose track of the email and it won’t be deleted from the device. Don’t use (Shift+Delete) If you want to use shift+delete you need to activate Hard deletes reconciliation on BES 5 Server.
2.If you Outlook account is set up to transfer new emails to PST . They will never get to your BB device.
3. Remember! The deletes from Exchange to BlackBerry is not immediate. BES reconcile uses the 20/100 rule. That’s every 20 minutes or 100 changes whichever comes first. Alternatively, you can use the Reconsile Now function. Outlook in cached mode only does send and receive every 5 minutes (this also updates read, deleted & moved items), then the device will only do reconciliations every 15 minutes. To speed this process up just hit “Send & Receive” and then “Reconcile Now” on the device.

Testing:
Outlook to  BB takes up to 20 min. I find it useful to do this test:
Delete – BB
Delete – Outlook

Wait for them to deliver to both mailbox and BB.
Now delete – BB on Blackberry and watch outlook, it should take a min or two. And move to deleted in Outlook
If that works… It’s working as it should and you’re dealing with a user workflow issue. I find it helpful to turn off Empty delete folder on exit.

Backup Exec System Recovery - Clear Backup Destination

How to manually clear ALL backup destinations in BESR

http://www.symantec.com/business/support/index?page=content&id=TECH87408

Roaming profiles best practice

Roaming profiles best practice

http://www.grouppolicy.biz/2010/08/best-practice-roaming-profiles-and-folder-redirection-a-k-a-user-virtualization/

SBS 2008 Migration to 2008 R2

Was doing some research on how to migrate an SBS 2008 domain to 2008 R2 and found this article.  Looks like a good walk through and will be testing it soon.


Found this walk through here

This is an action plan from Microsoft tech support.  I’m going to be testing this in my Lab over the next week or so.  I’ll post any significant notes or corrections that I find.  

1.       Run ADprep on SBS 2008 with the Windows 2008 R2 disk.

·         Insert the media for Windows Server 2008 R2 into the Small Business Server 2008 server.

·         Browse to the following folder:

·         :\Sources\Adprep> Adprep /forestprep

·         Press C, and then press ENTER. Wait for the process to complete.

·         :\Sources\Adprep>Adprep /domainPrep 

·         when this step completes, you should receive a message: “Adprep successfully update the domain-wide Information”

2.       On SBS 2008 ensure that the schema version is updated to 47. Default schema version is 44

·         Goto HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters\Schema Version=47

3.       On the Server 2008 R2 assign the network card a Static IP on the same network as Small Business Server 2008.

4.       Set the SBS 2008 server as the primary DNS server and the hardware router as the default gateway.

5.       Set the Windows Server 2008 R2 computer to the correct time zone,

6.       Set the computer name and join it to the SBS 2008 domain as a member server.

7.       Join WS08R2 DC as a secondary domain controller in the SBS 2008 Domain.

·         Click Start and then click Server Manager.

·         In Roles Summary, click Add Roles.

·         If necessary, review the information on the Before You Begin page and then click Next.

·         On the Select Server Roles page, click the Active Directory Domain Services check box, and then click Next.

·         If necessary, review the information on the Active Directory Domain Services page and then click Next.

·         On the Confirm Installation Selections page, click Install.

·         On the Installation Results page, click Close this wizard and launch the Active Directory Domain Services Installation Wizard (dcpromo.exe).

·         On the Welcome to the Active Directory Domain Services Installation Wizard page, click Next.

·         On the Operating System Compatibility page, review the warning about the default security settings for Windows Server 2008 domain controllers and then click Next.

·         On the Choose a Deployment Configuration page, click Existing forest, click Add a domain controller to an existing domain, and then click Next.

·         On the Network Credentials page, type the name of any existing domain in the forest where you plan to install the additional domain controller. Under Specify the account credentials to use to perform the installation, click My current logged on credentials or click Alternate credentials, and then click Set. In the Windows Security dialog box, provide the user name and password for an account that can install the additional domain controller. To install an additional domain controller, you must be a member of the Enterprise Admins group or the Domain Admins group. When you are finished providing credentials, click Next.

·         On the Select a Domain page, select the domain of the new domain controller, and then click Next.

·         On the Select a Site page, select a site from the list or select the option to install the domain controller in the site that corresponds to its IP address, and then click Next.

·         On the Additional Domain Controller Options page, make sure the DNS and Global Catalog is checked, and then click Next:

·         DNS server: This option is selected by default so that your domain controller can function as a DNS server. If you do not want the domain controller to be a DNS server, clear this option.

·         Global Catalog: This option is selected by default. It adds the global catalog, read-only directory partitions to the domain controller, and it enables global catalog search functionality.

·         Read-only domain controller. This option is not selected by default. It makes the additional domain controller read only. (Do not select this option as we need Writeable Copy of Active Directory)

·         If you selected Use advanced mode installation on the Welcome page, the Source Domain Controller page appears. Click Let the wizard choose an appropriate domain controller or click Use this specific domain controller to specify a domain controller that you want to provide as a source for replication to create the new domain controller, and then click Next. If you do not choose to install from media, all data will be replicated from this source domain controller.

·         On the Location for Database, Log Files, and SYSVOL page, type or browse to the volume and folder locations for the database file, the directory service log files, and the system volume (SYSVOL) files, and then click Next.

·         On the Directory Services Restore Mode Administrator Password page, type and confirm the restore mode password, and then click Next. This password must be used to start AD DS in Directory Service Restore Mode for tasks that must be performed offline.

·         On the Summary page, review your selections. Click Back to change any selections, if necessary.

·         To save the settings that you have selected to an answer file that you can use to automate subsequent AD DS operations, click Export settings. Type the name for your answer file, and then click Save.

·         When you are sure that your selections are accurate, click Next to install AD DS.

·         On the Completing the Active Directory Domain Services Installation Wizard page, click Finish.

·         You can either select the Reboot on completion check box to have the server restart automatically or you can restart the server to complete the AD DS installation when you are prompted to do so.

8.       Install Exchange 2007 or Exchange 2010 on same server or different server and  move the mailboxes.

9.       Move the Public folders: http://technet.microsoft.com/en-us/library/bb331970.aspx

10.   Migrate any data they wish to keep to the new server.

11.   If folder redirection/roaming profiles are configured move that data over to the new server by updating the user account/group policy settings.

12.   Move FSMO roles and GC to WS08R2: http://support.microsoft.com/default.aspx?scid=kb;EN-US;255504

13.   Might want to wait a few days to make sure everything remains operational ( you have 21 days from this point)

14.   Uninstall Exchange 2007 from SBS 2008

15.   DCPromo down SBS 2008

16.   Remove SBS 2008 from the network.