Create a NFS Share for XENServer on Windows Server 2003 R2

Create a NFS Share for XENServer on Windows Server 2003 R2

15

 

 

Spiciness

Steps

This How-To will demonstrate how to successfully create a Virtual Disk Storage Repository usable by XENServer on a Windows Server 2003 R2 File Server.

For those who are interested in trying XENServer for virtualization and do not have a SAN or NAS, this is the best solution that I have found for storage repositories. If you do not utilize SRs in XENServer, then you cannot use XENMotion. XENMotion (for those who are unaware) allows you to migrate any virtual server to another box while remaining live. It has no down time with the exception of the proclaimed 115ms. I have done this while in an RDP session to the migrating server and did not even get disconnected. This enables the VHD to remain on "network attach storage" and load up to the next server within about 5 minutes. Reducing downtime and promoting redundancy.

1.

Create a folder on the file server

When creating your share, keep in mind that it will be hosting 1 or more virtual hard drives, so it must have ample space for your application.

Space_big
2.

Create your destination folder for the repository.

When creating the folder, keep the naming simple. In this example, I have named mine "xenserv1".

Folder_big
3.

Now you can setup the NFS share needed.

XENServer requires that you use a NFS share if its held on a Windows box. So, you need to right click the folder and select properties. Then go to the tab named "NFS Sharing".

Nfs_tab_big
4.

Set Access Credentials

In my example, I have named the NFS share "NFS" for simplicity. You can name it what you like. Make sure that you check the box "Allow anonymous access" and that the UID and GID are both "-2" as seen in the above picture. Next, click on permissions. Set it for:
1. "ALL MACHINES"
2. Type of access should be "Read-Write" so that XEN can write the virtual disks to the share.
3. Encoding should be "ANSI"
4. Ensure that "Allow root access" is unchecked.
5. Click "OK"

Nfs_permissions_1_big
5.

More access credentials.

Now we have to allow "ANONYMOUS LOGON" full control of the folder so that XEN can communicate with the server.
1. If it is not in the list already, then click "Add...".
2. Type "ANONYM" and click on "Check Names". Click "OK" and ANONYMOUS LOGON should now be visible.
3. Select "ANONYMOUS LOGON" from "Group or user names:" above and set it to allow "Full Control". Click "OK".
4. Click "OK" again and your folder should show the sharing "hand" icon as well as 2 green arrows.

Anonymous_logon_big
6.

Now we have to add the SR to the XENServer.

I am using XENServer 5 build 13192 for mine. At the top of XENCenter, select the button labeled "New Storage".

New_storage_big
7.

Select NFS and click on "Next"

Since we are making a NFS share specifically for the virtual disks, we are going to use the top "NFS" choice. The one on the bottom is for placing installation .ISO files. Keep the top selected for this exercise and click "Next".

Sr_screen_1_big
8.

Input the "common" name of the repository and point XEN to it as shown in the picture. Click "Next"

On this screen, we will name the NFS share for its use in XENServer, and we will input the path to the share. Note: For me, it would only accept the IP of the server where the NFS share was located, it would not accept NetBIOS names.

Sr_screen_2_big
9.

After scanning, you will click "Finish" and the SR will be added. Congratulations!

Once you have input the correct path to the NFS share into the wizard, you can click on "Finish" and you will see it show up under the "common" name in XENServer. Congratulations on a job well done!

Closing notes: If you are used to accessing shares with "\\server\share", and you are worried that it is a security hole, note that you cannot use this method with the NFS share unless it is ALSO shared as a normal share. Otherwise, when attempted this method to access an NFS share, it will return an error stating it does not exist. So, if you are worried about the security, then do not make it a regular network share on top of being a NFS share.

Sr_screen_3_big
10.

View XENServer to see the new SR.

Finale_big

Conclusion

This concludes my first How-To. Thanks for checking it out guys!

Simple

XenServer "Project Boston" Beta Now Available!


I am pleased to announce that XenServer "Project Boston" Beta is now available for download.

The XenServer "Project Boston" Beta is a first look into Citrix's unrelenting goal of continued simplification and product improvements to "cloud-enable" enterprises and "enterprise-enable" service providers. This release introduces private cloud self-service tools, platform, networking, performance and scalability improvements all designed to create a multi-tenant environment that reduces your infrastructure cost of ownership.

XenServer "Project Boston" Key Features
  • Product Simplification - StorageLink and Site Recovery fully integrated within XenServer and now managed from XenCenter, all virtual appliances now Linux-based, only one Installation ISO as the Linux Supplemental Pack has been removed and Supplemental Pack now available in virtual appliance format.
  • Architectural Changes - The Boston release is based on the Xen 4.1 hypervisor, Open vSwitch is now the default network stack, Hardware (SR-OIV) Support and improved networking performance.
  • Self-Service & Cloud Building Tools - New Self-Service Manager Feature (available approx. 2 weeks after Boston beta release) enables you to build "private cloud" self-service environments, Virtual Appliance support that now allows creation of boot sequenced multi-VM virtual appliances for use with HA and Site Recovery, and VMware VMDK and Microsoft VHD disk images import functionality.
  • Microsoft System Center Integration - Manage XenServer hosts and VMs with System Center Virtual Machine Manager (VMM) 2012. For more information refer to the Microsoft System Center 2012 beta page. Monitor XenServer hosts with the System Center Operations Manager 2012 and special Supplemental pack from Citrix targeted for general availability when System Center 2012 ships later this year.
  • XenDesktop Enhancement & Improvements - HDX enhancements for optimized virtual desktop use experience and GPU Pass-Thru that allows a single GPU card or GPU on multi-card GPU card to be assigned to VMs.
  • Guest OS Support Updates - Ubuntu 10.04 support, RHEL 5.6 and SLES 10 SP4 support updates and experimental support for Solaris and Ubuntu 10.10. RHEL 6 and Debian Squeeze Support are now fully supported since XenServer 5.6 Service Pack 2 release.
  • Platform Enhancements & Improvements - "Rolling Pool Upgrade" wizard, NFS support for HA, 1TB host RAM support, increased VM vCPU and vRAM levels, NIC bonding improvements.

Additional resources are available at the Citrix XenServer Beta Central, the XenServer "Project Boston" Beta Forum and the XenServer Project Boston Release Notes.

Sounds good - NFS support for HA & SR-OIV

Exchange 2003 - Windows Mobile Sync Error Code 85010014

Exchange 2003 - Windows Mobile Sync Error Code 85010014 - Exchange 2003 Only

NOTE: This page is referring to code 85010014 received when trying to sync over the air with an Exchange 2003 server. It does NOT refer to the error received when trying to sync with the desktop ActiveSync.

A common error when trying to setup a Windows Mobile 5.0 device to sync with Exchange 2003 is 85010014. This is generic error that can actually mean a number of things. There are a number of standard tests and best practises that you can carry out to resolve the error.

If you are working on this problem then you may want to look at getting the emulator, so that you can reset the device as much as you like. This also works inside your network, so you avoid any firewall issues. However it does mean that care has to be taken over the address format used when setting up the connection on the emulator.

  1. First and foremost, does Outlook Mobile Access (OMA) work?
    EAS and OMA share some of the same core functionality. In most cases if one works, so will the other. It is also easier to see error messages in Internet Explorer/Pocket Internet Explorer than in ActiveSync, which often gives a cryptic error message and not much else.
    OMA can be tested on both Internet Explorer on the device and on your desktop.
    Browse to http://host.example.com/oma (where host.example.com is the external name of your server) and see if the application loads correctly. If you get an error, particularly one about requiring SSL, then that can cause a problem.
     
  2. Is your SSL certificate trusted by the Windows Mobile device?
    If you are using a home grown certificate then then answer will be no. You can test this by browsing to the https version of OMA using the same URL as above - https://host.example.com/oma and see if you get an SSL certificate prompt. The prompt will tell you what element the process is failing on.
    If you are using a home grown certificate then your best option is to switch to a certificate that is trusted by Windows Mobile 5.0. Certificates from GoDaddy are trusted and cost from US$29.99. You can get one from https://CertificatesForExchange.com/ . By using a trusted certificate you will have nothing to install on the device. The certificate is also good for OWA, RPC over HTTPS and securing anything else on the web site.
    If you already own an SSL certificate, but it is not trusted by Windows Mobile, then you will need to import the root certificate. Instructions for doing that are elsewhere on this site.
     
  3. Are you entering the address correctly?
    When entering the address in to ActiveSync, it should be just the fully qualified domain name - so host.example.com. No / anything or http in the address. It is also not recommended to use an IP address. Instead setup a split DNS system so that the FQDN works both inside and outside, but resolves to different IP addresses depending on where the device is connected.
     
  4. Are you using SSL, possibly with Forms Based Authentication on a single Exchange server?
    The combination of SSL and Forms Based Authentication is the biggest cause of these errors.
    Microsoft have a resolution in their KB article 817379, however this article misses out some key steps which we have found to be required and are outlined below.

Setting up Exchange 2003 for Forms Based Authentication, SSL and Windows Mobile Exchange ActiveSync.

These instructions are based on 817379 with some slight adjustments.

  1. In Exchange System Manager, Servers, , Protocols, HTTP. Right click on the Exchange virtual server and choose Properties. Click on the tab "Settings" and disable forms based authentication.
  2. In IIS Manager, remove the SSL certificate from the default web site
  3. Still in IIS Manager, remove the "Require SSL setting from all virtual directories, particularly, /exchange, /exchweb, /Microsoft-Server-ActiveSync and /oma.
  4. Drop in to a command prompt and type iisreset and press enter.
  5. Go back in to IIS manager, and find right click on the Exchange virtual directory, choose All Tasks, and then Save Configuration to a File.
  6. In the File name box, type a name. To follow Microsoft's example, type "ExchangeVDir" and then click OK.
  7. Right click on the root of the Default Web and choose New, then "Virtual Directory (from file)".
  8. In the Import Configuration dialog box, click Browse and locate the file that you created earlier. Choose Open, then Read File.
  9. Under "Select a configuration to import", choose Exchange, and then choose OK. You will get a dialogue box appear that states the "virtual directory already exists." The option to create a new virtual directory should already be selected. In the box enter an new name. To follow Microsoft's example, enter "exchange-oma" and choose Ok. The new folder should be created.
  10. Right click on this new virtual directory and choose Properties. Then click on the "Directory Security" tab.
  11. Under "Authentication and access control", click the Edit button. Ensure that only "Integrated Windows authentication" and "Basic authentication" are enabled. Change it if required. You need to ensure that Anonymous authentication is not enabled. Leave the Default domain and default realm blank. Press OK to go back to the main properties of the virtual directory.
  12. Under "Secure communications", click the Edit button. Make sure that "Require secure channel (SSL)" is not enabled, and then click OK.
  13. Drop in to a command prompt and run iisreset again.
  14. Copy and paste the following registry entry in to a new notepad document and then save it as ExchangeVdir.reg. Then right click on it and choose Merge.


     

  15. After making the change, run iisreset again, then restart the IISADMIN service in Services.
  16. Put the SSL certificate back on the site, but do NOT set the require SSL option at this time.
  17. Test the sync process to prove that it works.
  18. If sync works, re-enable forms based authentication in Exchange System Manager.
  19. Once testing is confirmed to have worked, place IP address restrictions on the /exchange-oma virtual directory to restrict access to the server itself. You should also include 127.0.0.1. This ensures that the exchange-oma virtual directory isn't used to bypass the forms based authentication page. It isn't a requirement to make the change, the security of the server is not compromised and it is unlikely that users would find the directory and use it. You may also find the /exchange-oma virtual directory useful if you want to publish OWA web parts in SharePoint internally.

Questions

Q: Why do I need to keep running iisreset? What does it do?
A: IISRESET writes the current IIS configuration to the IIS metabase. In testing we found that running iisreset after making changes to the IIS configuration produced the best results. It does not change any settings that have already been made.

Q: Why do you include the additional steps at the beginning?
A: The import/export process brings across all of the settings on the virtual directory - including the ones that cause problems - the SSL, forms based authentication etc. By turning those options off and then running iisreset before starting the import/export process, you ensure that you don't bring any settings that are not required.

Q: I want to use SSL, but I cannot if I remove the setting to require SSL.
A: Don't confuse the Require SSL setting with your ability to use SSL. You can have use SSL without requiring it. The reason that you have to remove the require SSL setting is because EAS/OMA make internal calls on the /exchange virtual directory on port 80. Require SSL breaks that functionality.
However once this setting has been configured and is working, you can put require SSL back on to the /exchange virtual directory.
From a security point of view though, your best option is to simply block port 80 at the firewall and only allow port 443 through. While this may annoy some users who have to correct the URL, it keeps anonymous http traffic off the network. 

Q: I have already tried 817379 and it didn't work. What now?
A: If you have already tried to follow the instructions in 817379 then you need to reset everything back to the default.
Remove the registry key first from the location stated above (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MasSync\Parameters), then reset the virtual directories following the instruction in this article: http://support.microsoft.com/kb/883380.You should be using Method 1 - which is the easiest to do. Then follow the instructions above.

Notes

Using Dell EqualLogic HIT-VE Plug-in

Using Dell EqualLogic HIT-VE Plug-in

It was my recent good fortune to get the loan of two Dell EqualLogic system from Dell. There mainly for use in my work in VMware SRM. I’m ramping up to write my 3rd book on SRM. But along side that it gives me a chance to look at the integration with VMware that Dell have been working for sometime. This follows a recent theme of mine on RTFM covering the various plug-ins from the storage vendors including EMC’s VSI and NetApp VSC.

I’ve made a decision that where a storage vendor has these kind of datastore provisioning tools – is to cover them along side the standard method of creating a new volume/LUN in their fully-blown management systems. I think in short-term we might see these plug-ins evolve to allow even higher management functions such as actually configuring replication for storage with vCenter. Imagine that – you right-click a datastore in vCenter, you see a Dell/EMC/NetApp menu, and underneath that you see link that says “Configure DataStore for use with VMware SRM” :-)

For the moment the Dell HIT-VE does allow you to setup replication of a volume once the appropriate “partner” relationships have been configured between two or more Dell EqualLogic Groups. So I will be including that in chapter on Dell in my SRM book.

I was really quite taken with how easy it was to setup the Dell EqualLogic – it took very little time, and found the management tools easy to follow. That’s always helpful when you’re taking on a new technology. Once set-up I had chance to play with the Dell EqualLogic Host Integration Tools for VMware (HIT/VE) which includes the

  • EqualLogic Datastore Manager – Allows administrators to provision new Datastores, expand existing Datastores, and monitor storage usage in the VMware Datacenter
  • EqualLogic Virtual Desktop Deployment Tool – VMware View aware desktop provisioning wizard which allows the deployment of manual virtual desktop pools using array based space efficient thin clones and also allows the refresh of these pools.
  • Auto-Snapshot Manager/VMware Edition 3.0 – Creates and restores Smart Copies of Hypervisor consistent Virtual Machines (VMs). Utilizes snapshots, clones, and replicas within PS Series group allowing for fast restoration or disaster recovery

Dell have a different approach to EMC/NetApp with their plug-ins. Firstly, there’s a virtual appliance that you import to your vCenter. The VA has two NICs – one to communicate to your VMware virtualization layer so it can speak to vCenter – and another NIC to speak to the EqualLogic Array(s). Once the appliance has been imported and powered on you can login using the default username/password of root/eql. This in turns executes a script that builds a menu system to carry out the post-configuration:

It’s a pretty simple affair of pressing the number on the keyboard – and providing the appropriate details. Step 2 and 3 is where you configure your IP settings on the VA, and Step 4 is where you configure the vCenter.

Step 5 is where you begin to make the VA aware of your Dell EqualLogic Array’s by supplying the “Virtual Group” IP address. In case you don’t know the main management unit in Dell EqualLogic is the Group that contains many “members” the term Dell use for the actual array itself. This IP is the main one used when you connect remotely to configure your storage. In my case this is 172.168.3.69, you’ll also need a user account the default being “grpadmin”, and its password – much depends how your have delegated.

As with the other storage plug-ins I’ve been recently covering, the Dell HIT-VE does support cloning of virtual desktops for use with VMware View manager – and as such to create desktop pools – you will need to provide the name of one of your Connection Servers, and a user account and password.

Notice here I’m using account I setup in View called “View-Admin”. I discovered that the View does not allow the use of the named “administrator” account with plugs-in of this type, although Dell HIT-VE will accept the “administrator” account for vCenter. At this stage there’s no mandatory requirement to run step 9. This allows you manage the “database” behind the Dell HIT-VE, and you can use this to backup, restore, and upgrade the HIT. Of course after the reboot it would be good practise to change the password for the root account.

You want to keep your eye on Step 10 if you making any major configuration changes, as you might need to reboot the VA to allow changes to take affect. For example, update the HIT Appliance to speak to a different vCenter – and I was bit confused why the icons weren’t appearing – sure enough there was a pending reboot needed of the HIT which I hadn’t noticed – and of course, I had to re-run step7 to make sure the plug-ins were registered with the new vCenter. So, you know I’m working with multiple version of vSphere – and I’m spending some of my time flipping my lab from one version to another – and that’s what caused that reconfiguration to take place.

Once you login into vSphere Client you will find the UI will be extended with shortcuts to the Dell EqualLogic system under the “Solutions and Applications” section of the “Home” location in vCenter:

Yeah, I know I’m going a bit plug-in crazy at the moment! :-)

If you do click at any of the EqualLogic icons, you will be asked to input your vCenter username and password – before the pages open. This authentication dialog box opens for the very first connection, but after that it doesn’t appear again.

From any of these icons (Datastore Manager, Auto-Snapshot Manager and Virtual Desktop Utility) – you can get to a Configure HIT/VE link which allows to you change some of the settings configured on the virtual appliance – and from the Virtual Desktop Utility you can also change the settings for the View Connection Server also:

Provisioning New Datastores

As you would expect the main “Host & Clusters” and “Virtual Machine & Templates” view is updated with menu options specifically associated with Dell EqualLogic:

Selecting this option cranks up a web-page is very similar to the New Volume wizard in EqualLogic Group Manager. It allows you to set the number of volumes, their size, and if they will be thinly provisioned – notice the ability to set the block size at the bottom of the page – notice how I’ve selected the cluster as the scope here – so every ESX host in the cluster will be granted access to the storage – you do of course need the iSCSI stack on the ESX hosts configured for that to work smoothly!

Next, you can set the controls on the volume – to control which ESX hosts has access to the volume. This case the Dell HIT-VE will examine the iSCSI Stack/vSwitch configuration on each of the hosts, and automatically ensure that the volume is created with “Allow simultaneous connections from initiators with different IQN names” – and populate the “Access” tab on the volume with the correct rights for the ESX hosts to connect to the volume.

After this point your able to label the datastore, and place it in a datastore folder if you have them – in my case I keep my local datastores and infrastructure stores in separate folders – this way I can use permissions to control who can see what and where in vCenter.

Once you click next and finish – this starts off  “Job” windows which breaks down the processes going on in the background. I quite like this feature – it kind of reminds me of the “Jobs” feature of Microsoft Hyper-V/SCVMM. I like to know what going on in detail, in case anything goes haywire it gives me something to go on.

Note: You want to bring up this job window at any time – it can be brought up by clicking the “circle” icon in the top right-hand corner in any of the “Manager” icons.

If your looking for more detail on the volumes created with the Dell HIT-VE, you can use the “Equallogic DataStore Manager” icon under “Solutions & Applications”. From here you can carry out other management tasks like doing a Smart Copy, Create a clone and Resize a datastore. I particularly like the “Resize a datastore” option is a good one, as not only makes the iSCSI LUN larger, but automatically does a “Grow VMFS volume” task to boot!

If you need it there’s a link to the Dell EqualLogic Group Manager. Notice how other volumes that original created in the Group Manager application appear as well, so long as they have been correctly allocated to the ESX hosts in the cluster. Volumes that the ESX hosts do not have access will not appear.

Provisioning new virtual desktops for VMware View

There’s a couple of place where you can carry out a Smart Clone. You can create multiple copies of a VM from the right-click on context menu. This works for any VM whether its a virtual desktop or ordinary VM. This could be useful if for demo purposes you need to fire-up number of VMs very quickly.

If on the other hand your purpose is to create new virtual desktops for VMware View, I think you would be better place using the “EqualLogic Virtual Desktop Deployment Utility” in the “Solutions & Applications” area. I was quite struck by how much control Dell are offering in this plug-in. Most storage vendors plug-in handle the main job of creating a desktop pool, selecting the pool type (Dedicated or Floating) and of course the all import array-accelerated cloning process. Interestingly, the Dell HIT-VE allows you to modify the default settings on the pools it creates such as whether you allow users to reset their desktops, or whether you prefer the PCoIP Protocol over RDP. These controls reside in the “Modify Default Settings” dialog:

You crank-up the virtual desktop cloning process by click the “Create desktop pool” link, which will intern bring up wizard to drive you through the steps.

Step 1: Desktop Pool Settings

Step 2: Select your Virtual Desktop Template

Note: Allow the UI says the VM image size is 32GB – it is in fact a thin-virtual disk.

Step 3: Deployment Unit Layout

The wizard will also allow you provision new storage – that Dell refer to as a “Deployment Unit” – each deployment unit represents an ISCSI LUN formatted with VMFS containing up to a maximum of 64 VMs. You have the choice of using either a full clone method or linked clone approach. I think its no brainer to use Dell’s “linked clones” it will be quicker to deploy large numbers of VMs and save disk space at the same time. This part of the wizard will also help do some capacity planning as well. You see virtual desktop is more than its virtual disk; it does consume disk space else including the all-important VMKernel swap file. So a 4GB Windows 7 VM without reservations would consume 4GB worth of virtual disk space. The deployment wizard allows you to set a percentage based “reserve” to take into account the additional disk space required to complete the job in hand.

Of course it’s possible to have multiple deployment units. So you could create 4 each with the full allocation of 64 – that would create a total of 256 virtual desktops.

Note: By default the wizard uses “Full Clone”, and that can trigger an alarm because of the size of the data store. Don’t panic! Just switch to “linked clones”. Remember this will allow you to provision more VMs than you have storage – effectively allowing for similar over-commitment that VMware does for memory on ESX. Here I’m allowing the deployment unit the possibility to have upto 64 VMs in it, in the next part of the wizard I will be asking it just to give me 10 desktops in the first instance.

Step 4: Capacity Planning

VMware doesn’t give the storage vendors the hooks or the APIs to know when a new connection is established in order for them to spin up additional VMs. As we saw with the NetApp VSC and the EMC VSI – all the vendors are currently forced to create “manual pools”. With the Dell HIT-VE the administrator can deploy in “bricks” of say 50 virtual desktops, deploy ahead of time maximum of 500 with 10 volumes but only register  200 to begin with.  The benefit to the other part is the other 800 are not taking up any extra space – and when they need to grow it registers the VMs in a few minutes instead of copying and creating more. I think this is an interest approach to the limitations in the API’s currently, I think ideally the storage vendors would benefit from having more intelligence back from VMware View – so the storage vendors can respond to the changing load and demands of the users.


Step 5: iSCSI Access

This windows is exactly the same one we saw earlier in the deployment wizard. This wizard handles the ACL to the iSCSI LUN, populating the “Access” tab of Group Manager with the IQN’s of the ESX hosts in the cluster. So its important to make sure your VMware Software ISCSI is setup and correctly configured!

Step 6/7: Virtual Machine Folders & Resource Pool Placement

The next part of the wizard controls where the virtual desktops will be created in the VMs & Templates Folders view in the vCenter Inventory, as well as its Resource Pool location in the Host & Clusters view. You can also set how you want the desktop to named and numbered. As with VMware View the Dell plug-in will create a VM Folder, but it won’t create a VM Resource Pool.

Step 8: Desktop Settings

Finally, you able to select the VMware “Guest Customization” that you use for adding virtual desktops to your domain, additionally you have the option to modify the settings of the desktop that we saw earlier.

At the end of this process your left with a pool in View Manager, all you now have todo is handle the entitlements (the permissions) that allow a user or more normally a group to gain access.

Using Smart Copy on Dell EqualLogic iSCSI Volume

The third and final big feature of the Dell HIT-VE is the Smart Copy feature. In case you don’t know Smart Copy is a snapshot feature that allows to take “point-in-time” copies of either a VM or a datastore – and then revert back the VM or datastore – if something really horrible and unpleasant happens to you. If you have been following my series on these storage vendor plug-ins it’s along the same lines as the NetApp VSC “Backup and Recovery” feature.

As with the other functionality I’ve been exploring – the plug-in allows for a right-click context sensitive link to the feature, or you can access it from the EqualLogic Auto-Snapshot Manager. There’s also a scheduling process where you can ask for a snapshot to be taken at regular intervals as well.

Once you select the “Smart Copy” option a one-page wizard will open up allowing to the administrator to trigger the snapshot process:

The “Include PS Series volumes”  option is used to to also snapshot any EqualLogic iSCSI volumes that are mounted directly to the guest OS of the virtual machine in format of a VMware RDM. The “Perform VM memory dump” will create a VMware snapshot of the VM to also save the memory state – this enables the ability at restore time to bring the VM back to the state it was running in when the snapshot was taken. The MS VSS or VMware sync drive flush is always performed as the VMs are always put in VMware snapshot mode prior to Dell performing a snap of the volume on the array. This is not an option you want to use too frequently, as if there are many VMs with a decent amount of RAM it can take quite a while to write all that to disk. The “Set created PS Series snapshots  online”   does exactly as it say on the tin, once the snapshot is created it is put on line and attached to the VMware environment, this does provide a means of quickly cloning a datastore of VM, you’d still need to manually register the VMs, but that would be quicker than the normal cloning process, and this might be iseful in some test or dev use cases.

The Error handling section -  are related to also having non-EqualLogic storage in your environment, and how you’d like the tool to behave should you attempt to create a smart copy which consists of a mix of EQL and non-EQL storage, do we you stop, or do you just ignore the non-EQL storage. For me this is quite an important options because my VMs are scattered all over different vendors arrays. One thing I’ve noticed with these plug-ins is the various vendors mainly assume your are JUST using there storage. As consequence if they come across another vendors storage you sometimes get strange errors. It’s nice to see Dell making some moves to reduce this – after all a VM stored by any array vendor – could be on local storage…

This then will show the “Job” process where by the Dell HIT-VE engages a VMware Snapshot, and then creates a smart copy. In my case I just had one VM on the volume and this took very little time indeed:

This quick Smart Copy is then listed in the Auto-Snapshot Manager together with the date and time that was taken.

That’s great of course – but what’s really needed is a schedule from which this happens at frequency that allows me to roll back the volume to a previous known good state, or alternatively present the snapshot to the ESX hosts – so it can be mounted. That way I could simply copy back a VM that might have become deleted by some kind of Homer Simpson “DOH!” moment, or better still mount the virtual disks of the snapshot to the original VM – and use standard Windows or Linux tools to copy back lost data.

Again this can be set-up directly from the vSphere Client on the right-click of any datastore managed by the EqualLogic array.

The first part of the wizard gets you to set a schedule name, and basic frequency (once, daily, weekly or re-use an existing schedule), and the second part of the wizard then adapts to allow more granular control. The final part of the wizard allows you to set a retention policy for how long these Smart Copies are allowed to exist for. Clearly, if I’m snapping every 5mins – but only retain 10 snaps – I’m only going to be revert back to the last 50mins worth of changes – but remember this is just demo – you will need to adjust schedule according to your needs.

In my case I set very frequent schedule because I didn’t want to wait around too long for the snapshots to be taken. Remember these snapshots are just the “delta” changes before the snapshot was taken. Depending on the number of updates the volume the size of these deltas will vary, and care must be taken that you have enough storage to hold them.

These schedule can be modified and managed – from the Auto-Snapshot manager window – so if you need to modify their frequency, temporarily disable them or delete them – you can do.

1. Modify snapshot properties to make to “Allow simultaneous connections with from initiators with different IQN Names” – This allows more than one ESX hosts to access the volume, and the VMFS partition within it
2. Set Access Type to make the iSCSI volume read/write – by default the snapshot is read-only.
3. Set snapshot online – so it is accessible to the hosts
4. Rescan an ESX host – If you don’t how to do this buy my vSphere4 book! :-p
5. Run the resigniture wizard on the volume
6. Rescan all the ESX hosts
7. Copy the VM from the snapshot to the original sources.

That’s quite a lot of work isn’t it – fortunately the Dell HIT-VE automates all of that process for you – in away delivering a self-service restore process directly from the array, initiated directly from the vSphere Client.

So for example I had a lost or damaged VM and I wanted to restore in it complete. To do that I would go to the Auto-Snapshot manager icon in “Solutions & Applications”, and by selecting the Snapshot, I could see the VMs contained with in it, and then I could right click and select “Restore from Smart Copy”

This would crank up a wizard that would allow me to restore a VM like so:

In my case the focus of my Smart Copy was the datastore – but it can be a folder of VMs. The cute thing about this – is as new VMs are added to the folder, they are automatically enrolled into the Smart Copy schedule without any additional work.

Conclusions

This is my last article in the series of looking at the storage vendors plug-in for vSphere. Things have certainly come along greatly in the last 18 months or so. I think they are a really great way of managing your storage as it relates to your virtualization layer. Of course, I’m very fortunate in that here at RTFM I’m the server, network, storage, security, virtualization, and firewall guy. I do it all. As such if want to do something – I raise a change request with myself and then as the manager I approve the change immediately. Joking apart my point is this – whilst these tools are excellent – in a corporate space where those roles represents different fiefdoms within Corporate IT – will the Storage Admins every allow you to play with these plug-ins. Food for thought indeed.

Great post

The error “One or More users currently use this mailbox store. These users must be move to a different mailbox store or be mail disabled before deleting this store.” « Michael Ellerbeck

Ran into this even though there wasn’t any mailboxes (as far as I could see)

Used this method

Method 4: Use Active Directory Users and Computers to search for mailboxes that are on a mailbox store

//

  1. Start Active Directory Users and Computers.
  2. Right-click the domain that you want, and then click Find.
  3. Click the Advanced tab, click Field, point to User, and then click Exchange Home Server.
  4. In the Condition list, click Ends with, type the name of the Exchange computer, and then click Find Now.
  5. If you are prompted to add the current criteria to your search, click Yes.
  6. When you have identified which users have mailboxes on this store, you can use Active Directory Users and Computers either to move the mailboxes to a different store or to delete the user’s mailbox.

The mailbox search results appear in the bottom pane.

From here to see that there was still one mailbox left.

http://support.microsoft.com/?id=279202

Notes

Exchange 2003 Swing Migration Instructions

Exchange 2003 - Exchange 2003 Swing Migration Instructions

Moving your Exchange system to new hardware can seem daunting. Email is often considered one of the most critical applications within a company, so getting it wrong could cause problems. However with proper planning it is possible to migrate users to a new system with little or no downtime - they may not even know that they have been moved.

This is a brief guide on how to carry out a migration to new hardware and is known as a swing migration. It can also be adapted to update an existing machine from Exchange 2000 to Exchange 2003 if there is a spare machine available.

Read the entire guide before starting. There are lots of notes and tips on a successful migration throughout which can help ensure that your migration goes to plan.

Exchange 2007
For migration to Exchange 2007 from Exchange 2003, see our separate guide here

Guide Suitability

  • If after reading this guide it raises more questions than it answers, then it isn't for you.
    As with many of the articles on this web site, the process expects you to have some knowledge of how Exchange operates, how replication is carried out for public folders etc. It is not a HOW TO which shows you what you need to do on each small step.
  • This guide is not suitable if you wish to retain the existing machine name and/or IP address.
    However most people want to keep the same name as they believe that if they do not, they will have to visit all the desktops. This is not the case. As long as both the old and the new server are available (i.e. the server is on with Exchange installed) at the point the clients connect for the first time, they will automatically redirect to the new server - no user or admin interaction required.

Pre Migration Checks

Before you start the process you need to check three settings on the SMTP Virtual server.

  • Smart Host Configuration on the "Default SMTP Virtual Server".
    If you have configured an entry in the Smart Host box on the SMTP virtual server then you need to remove it and replace it with an SMTP Connector. Exchange uses SMTP to communicate between the servers. Using a Smart Host on the "Default SMTP Virtual Server" will stop the messages going between the servers.
    For information in setting up an SMTP Connector, please see our dedicated page.
  • External DNS on the "Default SMTP Virtual Server"
    You should also ensure that you do not have any external DNS servers configured on the SMTP virtual server. This can stop DNS from finding your new server. If you find that DNS lookups don't work correctly without those set, then configure forwarders on the DNS Server applet on your domain controllers.
  • Connection Restrictions
    If you are using any kind of email filtering that is external to Exchange, this could be an appliance or service, then you may have configured restrictions on the SMTP virtual server, under Access, Connection. Ensure that your new server is on the list, as the two servers need to communicate and exchange data over SMTP. It is not a one way traffic process.

General Tips

For a successful migration, there are some general points to consider

  • Take your time.
    Trying to rush the migration only causes problems. The replacement Exchange server could be in production for a few years. Rushing things at this point to save a few days could cause you problems long term. A properly built Exchange server that has been built with care will give you years of trouble free service.
  • Check everything is working correctly constantly.
    An Exchange server should work straight out of the box. If it doesn't appear to be working, stop the process, remove Exchange and start again. Particularly if the install doesn't work immediately, gives you errors etc. Until you start moving mailboxes you can back out of the process at any point and start again. Even after moving mailboxes you can simply move them back. At no point is the data at risk. Exchange is a complex product, if you can see something isn't working correctly, it could indicate a more serious issue that you cannot see inside the application.
  • Plan Ahead.
    With good planning this process can be carried out with little or no downtime, with most work done during production hours. It is not complex by any means, but cannot be carried out in a few hours. Be sure of what steps you are taking and when, in advance.

Brief Overview

Each of these are covered in detail further in this article.
This process would ideally be spread over two weeks, with the mailboxes being moved over the middle weekend.

  1. Prepare new machine - installing Windows, Exchange and all relevant updates and patches, configuring the server.
  2. Configure replication of Public and System Folders
  3. Move the Mailboxes
  4. Move inbound SMTP
  5. Move Recipient Update Services (RUS)
  6. Change "Routing Group Master"
  7. Configure Public and System Folder replication to remove old server
  8. Remove old server

Using this process to update the existing server

You can also use this process if you want to update your existing server - for example to go from Windows 2000/Exchange 2000/2003 to Windows 2003/Exchange 2003.

For example, you have a server called "server1" which you want to update, and a standby server called "server2" .

Follow the same process as outlined below to move everything to "server2", including removing the original server (server1) from the network. Remember to drop the machine in to a workgroup before wiping so that it has been removed from the domain.

Then build the machine with the new operating system, but use the same original name (server1). After installing Exchange, repeat the process to move all the data back.

By using the original name if you don't have to wait around for all the clients to connect to the server to be redirected. Any clients that have not been redirected to the new server before the mailboxes were re-homed to the temporary server will still connect. For everyone else, they will get redirected in the usual way.

HTTP/HTTPS Services (Outlook Web Access, RPC over HTTPS and Exchange ActiveSync)

A significant issue with this process is the HTTP/HTTPS based services of Outlook Web Access (OWA), RPC over HTTPS and Exchange ActiveSync (EAS). Unless you are running a frontend / backend scenario the HTTPS services needs direct access from the client to the Exchange server that hosts the mailbox being accessed. It cannot be routed from one server to another (i.e. the user connects to the old server for OWA and the traffic is sent to the new server via the old server). This could mean that some users aren't able to use the HTTP/HTTPS based services until the port mapping on your firewall has been changed.

Take in to account access to HTTP/HTTPS when planning your migration.

One option would be to put in a temporary Exchange server and configure it as a frontend server. This would then be used for HTTP/HTTPS access during the migration. If you take this option then ensure that you treat the server as you would any other Exchange server - so fully patched and service packed for both Windows and Exchange. Remember that a frontend server needs to be the same or higher than the backend servers. Therefore if you deploying Exchange 2003 SP2, then the frontend needs to be that version.

Upgrading an Exchange 2000 Frontend / Backend Scenario to Exchange 2003

If you are currently using Exchange 2000 in a frontend/backend scenario, then you need to upgrade the frontend first.
This either means the frontend server needs to be in place upgraded (not recommended) or the server should be de-selected as a frontend server, then the replacement Exchange 2003 frontend server is installed. Exchange 2003 can be a frontend for an Exchange 2000 server, but you do not get the Exchange 2003 OWA in that scenario.


The Migration Process

Prepare the New Machine

Preparing the new machine will depend on what you are migrating to.

If you are migrating to a new machine that is running the same version of Exchange then you can just install Exchange on the new machine.

If you are migrating to a new machine and also upgrading Exchange version then there is additional prep work required. The best way to go about this to allow the Exchange 2003 CD to auto play and then follow the checklist.
The key things are to run forest prep and domain prep. Allow at least 30 minutes between each prep for the changes to propagate. If you are simply migrating between versions then you do not need to run prep again.

Either way remember that Exchange works best on a member server - not a domain controller.
However if you do install Exchange on to a domain controller then running DCPROMO to remove the DC functionality after Exchange has been installed is not supported. Similarly if the machine was a member server at the point of install then making it a domain controller with Exchange installed is also not supported. In short - once Exchange is installed, never run DCPROMO either to add or remove the domain controller functionality.

If you do install Exchange on to a domain controller make sure that it is a global catalog as Exchange will not look to any other server for domain information.

Therefore install the base operating system (Windows 2000 Server for either Exchange 2000 or Exchange 2003 / Windows 2003 for Exchange 2003 only). Add the machine to the domain.
You will need to install the additional Windows components that Exchange requires.
Internet Information Services with NNTP, SMTP and World Wide Web. If Windows 2003 then ASP.NET also needs to be installed.

Before installing Exchange, make sure that the server is fully up to date with the latest service packs and automatic updates. It is easier to do this now than after the server has gone live.

Install Exchange - the installer will detect the existing Exchange organisation and automatically add the new server to it - no questions will be asked as you cannot have two Exchange organisations in the same domain. If you are installing on Windows 2003 SP2, then you will get a prompt about the version of Windows having compatibility issues, usually more than once. Everyone gets that error - it is not unique to you. Review the URL mentioned in the URL, but most users of Exchange can ignore it and carry on.

Don't forget to update the server with the latest Exchange Service Pack, hot fixes and updates from Microsoft. Use Microsoft Update to download the updates after installing the service pack.

Moving Other Services/Configuration

Remember that all configuration on the new server will be close to default, except for settings that are set under "Global Settings"

  • If you are using an SMTP connector, add the new server to the configuration as a bridgehead.
  • If you are using alternative locations for the database, transaction logs and message tracking logs, move those before you migrate any data. The empty databases and small number of logs will move much quicker than trying to do so later on when you realise you haven't done it half way through the migration.
  • If OWA has an SSL certificate then export this from the old server and move it to the new server.
  • If you have anti spam or antivirus tools on the original server then these need to be installed on to the new server. Look for migration instructions on copying the configuration to a new server. Most tools have these now and should be used to ensure that the new server operates in the same way as the original.
  • Any other 3rd party applications installed on the original server should also be installed on to the new server.
  • Backups should be configured after the data has been moved - but as soon as you have live data on the server you need to consider some kind of backup.

Minor Configuration Changes You May Miss

This process only moves the data, it does not move any configuration that is server specific. Therefore you should check the settings on the old server and ensure that they are matched on the new server. However you may also want to review the settings and ensure that they are still appropriate for your environment. Do not blindly copy the settings across to the new server.
These settings you should look at include (but are not limited to):

  • SMTP virtual server: Connection restrictions, logging settings.
    Enable IMF, Recipient and Connection filtering and the IP address being used.
  • Limits on the mailbox sizes, message sizes etc.
  • Deleted Item Retention settings
  • Message tracking enabled
  • RPC over HTTPS registry settings (Exchange 2003 only)
  • Enabling Forms Based Authentication (Exchange 2003 only)
  • Mailbox Manager settings (remember mailbox manager is configure through Recipient Policy, but is enabled on the server settings).
  • Journaling settings
  • Permissions set at the server of store level
  • Also check any login scripts or other processes to ensure that nothing is pointing at the old server for Outlook profile creation.

Run the Exchange Best Practises Tool!

After installing Exchange and making the settings changes that you need, you should download and run the Exchange best practises tool. A link to the latest version is on our Exchange resources site at http://exbpa.com/ . This will point out settings that you may need to adjust to ensure that the server is configured for optimum performance.


Populating the New Server with Data

Configure Public and System Folder Replication

Before moving users you should configure the public folder data to replicate. This not only includes public folders but also system folders. If possible use the Exchange 2003 ESM (Exchange System Manager) as this is a little more advanced. When you open ESM on the Exchange 2003 system make sure you are looking at the original server by Right clicking on Public Folders and choosing "Connect to" and selecting the original server.

Configure the public folders on the replication tab in ESM so that both servers are listed. Use the Propagate settings where appropriate to send the replication setting to the sub folders.

If you have a large number of folders then you may want to look at the "pfmigrate.wsf" tool. More information on this script can be found here: http://support.microsoft.com/kb/822895
However be careful with this script or setting large numbers of folders to replicate. That could generate high levels of traffic on your network and slow down the performance of your existing Exchange server.

You also need to replicate some of the system folders. To access the system folder list, right click in Folders in ESM and choose View System Folders.
The folders that you need to replicate are:

  • Offline Address Book (OAB) - don't forget the sub folders
  • Schedule + Free Busy
  • Organization Forms (EFORMS Registry)

You don't have to worry about any other system folders as they are unique to each server.

  • Before moving any mailboxes you need to ensure that replication is complete. The replication status is notorious for not always showing that it is "In Sync" or for "In Sync" to show when the folders are not. Therefore do not rely on that status to confirm the content has replicated. Use ESM to verify that the number of items is the same on both servers using the "Status" tab. If you are using Exchange 2003 ESM, then selecting another folder will leave ESM on the "Status" tab making it quick and easy to scan lots of folders for the numbers.
    However note that it is not unusual for the item count to be 100% identical, as corrupt items and other orphaned data can be dropped. Use your judgement. A folder with only 10 items in it should have the same number of items in it. A folder with 10,000 items in the source and 9,987 in the destination may reasonably considered to be in sync.
  • If you are carrying out a Exchange 2003 to Exchange 2003 migration then you can use the "Send Hierarchy" and "Send content now" commands to speed things up. This can thrash the network, so do it at a quiet time.
  • Be careful with antivirus applications that scan SMTP traffic. Unlike mailbox moves, the public folder content is sent over SMTP, and it isn't uncommon for antivirus applications to quarantine the entire message due to its size (usually around 4mb) and content. Monitor any quarantine alerts to ensure that nothing from or to email addresses IS- is being quarantined in error. 
  • Message tracking is good for monitoring the replications status as the traffic stands out. You will need message tracking enabled on both servers to ensure that it is being delivered correctly to the store.

Note: Public Folders with Exchange 2000 as the source

Public folder replication where Exchange 2000 is the source is very slow and there is very little that can be done to make it go any quicker. If you are migrating from Exchange 2000 then allow as long as you can for public folder replication - at least a week, preferably more. However, once you have everything on to Exchange 2003, things move much faster. Therefore if you were planning to swing using an interim server, make the interim server Exchange 2003. It should then be possible to complete the move from the interim server back to the (now upgraded) production server in a weekend.

Moving Mailboxes

Once you have the public and system folder data on both servers, you can start to think about moving the mailboxes.
With careful planning this can be done with no disruption to the users. Perhaps doing it out of hours using remote control tools like remote desktop or terminal services.

There are two ways to call the move mailbox wizard.

  1. Active Directory Users and Computers. Right click on the User and choose Exchange Tasks. Select "Move Mailbox" from the choice.
  2. Using ESM on Exchange 2003, go down to Servers, , , Mailbox Store, Mailboxes. Right click on each mailbox and choose Exchange Tasks and then select "Move Mailbox".
    Use the latest ESM that you can - so if you are migrating from Exchange 2000 to Exchange 2003 use ESM on the Exchange 2003 server.

The second option is probably more efficient as it allows you to select mailboxes that are still on the server and it is quite easy to keep track of which mailboxes have been moved.

You can do multiple mailboxes at a time - the number will depend on the performance of the system and your network connection.

If you are using Exchange 2003 SP1 or higher then you can select all the mailboxes at once, run the Move Mailbox wizard and Exchange will then move a maximum of four at a time. This means that you can setup the process and leave it to get on with it. If there are any errors it will skip on to the next one. You can then look back later on and see which have an error.

You can also do each mailbox individually. While this can be more time consuming, it does allow you to easily achieve five or six mailboxes being moved at the same time.

  • Set off the largest mailboxes at the same time, then leave the server to get on with it. When complete it shows a summary to confirm the move was successful. You can then do something else while it moves the largest mailboxes.
  • You should always "eat your own dog food" and ensure that the first mailbox moved is your own. If you don't have the confidence to store your own email on the server, then why inflict it on the users. 
  • Don't forget that moving mailboxes generates a lot of transaction logs. Watch where you are storing your transaction logs and ensure that it doesn't run out of space.

Blackberry

If you have a Blackberry server, then stop the Blackberry services before moving the BESADMIN account. Then move the BESADMIN mailbox in the usual way. However the Blackberry server may not update correctly to point to the new location. Use the profile tool to update the location of the mailbox with the new server name. 
Don't forget to set the permissions for the BESADMIN account before you move any mailboxes.

Additional Mailboxes Considerations

If you have additional mailboxes open in Outlook clients, then special consideration needs to be made to those.
Outlook will not update the location of additional mailboxes automatically. Therefore if you move the location of the primary mailbox to a different server, or you move the additional mailbox to a different server and do not move the primary mailbox, you will find that the additional mailbox may not open. In most cases if both the primary mailbox and the additional mailbox are moved at the same time, then Outlook will continue to open the additional mailbox correctly.
You need to remove the additional mailbox from the Outlook configuration, then add it back in again. Outlook will then find the mailbox in its current location.


Moving Services

There are a number of services that need to be moved to the server.

Moving Inbound SMTP

Exchange is quite capable of routing inbound SMTP messages to the correct server if they are delivered to the wrong one initially. This means that you don't need to worry about having the messages delivered directly to your new server until you are ready.

Making the switch is as simple as reconfiguring the firewall to send inbound SMTP (port 25) traffic to the new server. No DNS or MX records need to be changed. This modification can be made at any point during the migration.

  • TIP: Change the SMTP firewall configuration when over half the mailboxes have been moved. If Exchange is spending more of its time sending email to the other server than it keeps for its own mailboxes then it isn't working as efficiently as it can.

If you are running a very tight firewall and restrict outbound traffic (always a good idea) then ensure that port 25 from your new server is allowed out.

The one other thing you should do is adjust what the server announces itself as to the outside world.
For example, if your server is known internally as mailserver.domain.local but the internet knows it as mail.domain.com then you need to ensure that it announces itself as mail.domain.com:

  1. Open the Properties of the "Default SMTP Virtual Server" (ESM, Servers, , Protocols, SMTP).
  2. Click on the tab marked "Delivery" and then the button "Advanced".
  3. Enter the internet name (mail.domain.com) in the box marked "FQDN".
  4. Apply/OK out.

Outlook Web Access (OWA), RPC over HTTPS, Exchange ActiveSync

Unlike SMTP the port mapping for the HTTP ports should be moved after the mailboxes have all been moved. However do take in to account the co-existence period as outlined above.

Backups

Once the data has been moved across you should reconfigure your backups as required.

Backups are also important for flushing the transaction logs. Moving mailboxes will generate a large number of logs which are only flushed by a backup. Watch your disk space and do a backup as soon as you can.

  • NOTE: If you have to run both servers with mailboxes for a number of days, you need to ensure that both servers are backed up. If you don't have the licences for your backup software, or the hardware needs to be relocated, use NTBACKUP on the new server and configure it to backup to a file.
    For speed, configure it to backup to a local file, then use a batch script file to copy to the other server. Finally configure the other server to pickup that file as part of its file level backup.
    Remember to leave enough time to ensure that the backup finishes on the new server before attempting to copy the file across or backing it up to tape.

Moving Unique Services

There are a number of services and configuration settings that can only be held by one server. These will need to be moved to the new server before the old one is shutdown.

Moving Recipient Update Services (RUS)

Recipient update services is the component of Exchange that adds email addresses to the user accounts and adjust others settings for the recipients.
RUS can only run on one server, which will be the old server at present. This needs to be moved to the new server and is a simple change.

  1. ESM, Recipients, Recipient Update Services.
  2. On the right you should see a number of entries. Right click on each one in turn and choose Properties.
  3. In the middle is an entry "Exchange Server". Click the "Browse" button next to it.
  4. Enter the name of the new Exchange server and press "Check names". Once it has found the new server press OK.
  5. Click Apply/OK to make the new setting stick.
  6. Repeat for other entries.

Changing the Routing Group Master

Another setting that can only be on one server and is easy to move is the "Routing Group Master".

  1. ESM, Admin Groups, Routing Groups, Members.
  2. Right click on the new server and choose "Set as Master".

If you unclear about the routing group server roles, then you may want to review this KB article: http://support.microsoft.com/kb/239556

Remove Old Server from Public and System Folder Replication

Once the public and system folders are fully replicated, and all mailboxes have been moved, you can remove the old server from the replication list. Simply repeat the processes used above to add the new server to the public and system folder replication in order to remove the old server from the replication list. Each folder needs to have at least one server listed in its replication - the new server.

Remove Old Server

To remove the old server correctly, use Add/Remove programs. Select the Exchange server from the list and choose Remove. If you get errors during the removal then you will have the opportunity to fix them. 

Never just shutdown the old server and wipe the machine. Active Directory and the Exchange environment will still think the server exists and this could cause problems later on.


Questions

Q: I want to keep the same server name so that I don't have to visit all of the clients to change the Exchange server setting.
A: No need. As long as both servers are running when the users connect for the first time then their Outlook will update automatically. No user intervention required. The key thing is that both servers must be available with Exchange installed and running when the users connect for the first time.

Q: I want to keep the same server name because some users will not connect to Exchange for weeks after I have removed the original server.
A: If you will have clients that are still hard configured to use the old machine name, then you need to get the new machine to adopt the identity of the old one, using a NETBIOS Alias and DNS changes. NETBIOS Alias Information.

Q: I cannot get the item count on some public folders to be the same, I have waited for replication to complete. The count is 1538 on one server and 1575 on the other.
A: That is actually close enough to consider in sync. You need to take in account corrupted items and deleted item retention (which are not replicated).
In many cases, if you use an account on the old server to view the public folders and and then a account on the new server, you will find the same folder count on both servers.

Q: When I try to remove the old Exchange server I get an error about mailboxes being on the machine:
"One or more users currently use a mailbox store on this server. These users must be moved to a mailbox store on a different server or be mail disable before uninstalling this server"
I am sure that I have moved all of the mailboxes, but how can I check?
A: You probably have hidden or unused mailboxes. Separate instructions for finding those are here


Additional Resources

MSKB on removing the first Exchange 2000 server: http://support.microsoft.com/kb/307917
MSKB on removing the first Exchange 2003 server: http://support.microsoft.com/kb/822931

MSKB on swing migration for Exchange 2000: http://support.microsoft.com/kb/264879
MSKB on swing migration for Exchange 2003: http://support.microsoft.com/kb/821896

Well that worked well!