Hi,

Our first DC in the network is a Windows 2000 server. After a couple of
years we also installed 2 Windows 2003 DC's and we transferred all FSMO
Roles to these 2 DC's. We notice that all authentication requests (logons)
are still handled by the "old" Windows 2000 DC. So if the "old" DC goes
down, no one can log on anymore, because the new DC's don't take over.

To take care of this situation we want to demote the "old" DC, so it will no
longer be a DC. Does anyone know what we should consider and if we can
expect any problems after we demoted the "old" DC?

Regards,

Sander.

Hello Sander,

In a single domain/forest make all of your DC's Global catalog. In your case
check if the 2003 DC's are GC. If yes, uncheck GC on the 2000 DC and also
the logons will handled from the 2003 DC's. Did you also make both 2003 server
to DNS integrated servers?

Best regards

Myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

> Hi,
>
> Our first DC in the network is a Windows 2000 server. After a couple
> of years we also installed 2 Windows 2003 DC's and we transferred all
> FSMO Roles to these 2 DC's. We notice that all authentication requests
> (logons) are still handled by the "old" Windows 2000 DC. So if the
> "old" DC goes down, no one can log on anymore, because the new DC's
> don't take over.
>
> To take care of this situation we want to demote the "old" DC, so it
> will no longer be a DC. Does anyone know what we should consider and
> if we can expect any problems after we demoted the "old" DC?
>
> Regards,
>
> Sander.
>

Alle DC's are GC at the moment. And yes, the W2K3 server are DNS servers.
I'm considering to go along with your advice and uncheck GC on the W2K DC
and see what happens...

Regards,

Sander.

"Myweb" <(E-Mail Removed)> schreef in bericht
news:(E-Mail Removed)...
> Hello Sander,
>
> In a single domain/forest make all of your DC's Global catalog. In your
> case check if the 2003 DC's are GC. If yes, uncheck GC on the 2000 DC and
> also the logons will handled from the 2003 DC's. Did you also make both
> 2003 server to DNS integrated servers?
>
> Best regards
>
> Myweb
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
>
>> Hi,
>>
>> Our first DC in the network is a Windows 2000 server. After a couple
>> of years we also installed 2 Windows 2003 DC's and we transferred all
>> FSMO Roles to these 2 DC's. We notice that all authentication requests
>> (logons) are still handled by the "old" Windows 2000 DC. So if the
>> "old" DC goes down, no one can log on anymore, because the new DC's
>> don't take over.
>>
>> To take care of this situation we want to demote the "old" DC, so it
>> will no longer be a DC. Does anyone know what we should consider and
>> if we can expect any problems after we demoted the "old" DC?
>>
>> Regards,
>>
>> Sander.
>>
>
>