Upgrade ADS to Windows 2008 R2

[Former Member]

Dear expert

We have active directory server (ADS) that run in windows 2003 and connect to our portal (netweaver 2004s). our company have plan to upgrade the ADS to windows 2008 R2, the question is, any issue regarding this plan? especially about connection between portal and ADS 2008 R2 ?

Thxs.

[Former Member]

Hi!!

As you can read in [SAP note 1383873|https://service.sap.com/sap/support/notes/1383873], Windows Server 2008 R2 is not still supported by SAP. As the note specifies, the PAM will reflect that operating system as soon as it is supported (for Oracle, check also [note 1303262|https://service.sap.com/sap/support/notes/1303262]).

I tried to provide you a more tight estimation, and after conversations with the developers, I can advance you that it is not possible to expect the 710 products released for Windows Server 2008 R2 before around four weeks; 700 products will be released after 710 (very rough stimation; if there are problems the release could be even postponed!).

I am aware that your question focuses strictly on the Active Directory, but anyway it was not still checked by SAP developers. Take into account that there are several changes in the authentication methods used and even some cryptographic protocols could not be available. This could make some of your applications to fail.

In particular, I am aware of a case that, after upgrading the Domain Controllers to Windows Server 2008 R2, the SSO (SPnego) stopped working due to the fact that the DES encryption protocol was no longer available, and so Kerberos was not supported. In fact, if you check [note 994791|https://service.sap.com/sap/support/notes/994791], you will discover that the current SPNego Wizard utilized by SAP was tested using the following Windows Kerberos Environments:

o Microsoft Windows Server 2000 Active Directory

o Microsoft Windows Server 2003 Active Directory

o Microsoft Windows Server 2008 Active Directory

But not Windows Server 2008 R2 Active Directory, that is a completely different AD (as Windows Server 2008 R2 is an operating system that is completely different from Windows Server 2008, even though the name seems to be confusingly indicating otherwise).

As a summary, depending on your configuration, your applications could even stop working if you upgrade your Active Directory before it is released.

Cheers!!