Skip to main content

Scheduled Service Change: Upgrade AD Domain Controllers to Server 2022 - Starting 9/19/23

Event:
2023-09-19 12:00:00
Expected Duration:
2023-10-12 21:00:00
Status:
Closed
Brief Description:
Between September 19 and November 12, 2023, IDM will be upgrading some of the domain controllers for cornell.edu Active Directory domain.
User Impact:
No impact expected in general. We do anticipate isolated cases where the app/service is configured to use a single domain controller where the configuration has not been updated. This is mentioned in the communication.
Services Affected:
Identity and Access Management Data Services
Subsites Affected:
Identity Management
Full Description:
Between September 19 and November 12, 2023, IDM will be upgrading some of the domain controllers for cornell.edu Active Directory domain.

The upgrade process will involve decommissioning one domain controller at a time and replacing it with a new domain controller with same name and IP address. This work will be performed during business hours and is expected to be completed with the same day. No service outage is anticipated as the change will affect only one domain controller at a time.

However, if an application or service is configured to use a single domain controller, that application or service might be impacted when the specific domain controller is being worked on. Please be mindful of the maintenance dates below and plan to change the configuration to use another domain controller before the planned maintenance:

9/19: AD9
9/21: AD10
9/26: AD2
9/28: AD3
10/3: AD4
10/5: AD5
10/10: AD19
10/12: AD20

If you are using any of the DNS round-robin names such as query.ad.cornell.edu, awsquery.ad.cornell.edu or azquery.ad.cornell.edu, no action is required as CIT will update these records to exclude the domain controller before starting maintenance. We don't anticipate any impact, but just be aware that this will be done before the change.

If you experience any issues with Active Directory during the maintenance due to decommissioning a domain controller, please contact the IT Service Help Desk.
CIT TDX ID:
1114118



Timeline of Changes

Description Current Status Date Time
Between September 19 and November 12, 2023, IDM will be upgrading some of the domain controllers for cornell.edu Active Directory domain. The upgrade process will involve decommissioning one domain controller at a time and replacing it with a new domain controller with same name and IP address. This work will be performed during business hours and is expected to be completed with the same day. No service outage is anticipated as the change will affect only one domain controller at a time. However, if an application or service is configured to use a single domain controller, that application or service might be impacted when the specific domain controller is being worked on. Please be mindful of the maintenance dates below and plan to change the configuration to use another domain controller before the planned maintenance: 9/19: AD9 9/21: AD10 9/26: AD2 9/28: AD3 10/3: AD4 10/5: AD5 10/10: AD19 10/12: AD20 If you are using any of the DNS round-robin names such as query.ad.cornell.edu, awsquery.ad.cornell.edu or azquery.ad.cornell.edu, no action is required as CIT will update these records to exclude the domain controller before starting maintenance. We don't anticipate any impact, but just be aware that this will be done before the change. If you experience any issues with Active Directory during the maintenance due to decommissioning a domain controller, please contact the IT Service Help Desk. 2023-08-24 16:06:59