2003 GC in 2000 AD

[Harrison Midkiff]

Hello:

My Domain Is 2000 AD. In order to do RPC over HTTPS I need to have a 2003
GC on the network. Can I just run DCPROMO on a 2003 server and promote it?
This would make it a 2003 GC wouldn't it?

Harrison

 

[JPolicelli [MVP-DS]]

You first need to prepare your existing environment for Windows Server 2003.
See the following:

This involves using the ADPrep.exe command-line tool to prepare the forest
and prepare the domains. See the following for more information:
http://technet.microsoft.com/en-us/library/cc740226.aspx

 

[Harrison Midkiff]

Are there any real issues with this. Is this considered safe to do?

 

[JPolicelli [MVP-DS]]

Unfortunately, yes.

This will not be isolated to print drivers. It will allow them to load and
unload all device drivers. Microsoft's caution: "Assigning this user right
can be a security risk. Do not assign this user right to any user, group, or
process that you do not want to take over the system."

Read the following: http://technet.microsoft.com/en-us/library/cc782779.aspx

--

JPolicelli, MVP - Directory Services
This posting is provided "AS IS" with no warranties and confers no rights!
http://johnpolicelli.wordpress.com/

 

[JPolicelli [MVP-DS]]

Sorry...I replied to the wrong post.

Hundreds/thousands of people have done this preparation to date; people have
moved from W2K to WS03 and/or WS03. However, this does not mean you should
just go ahead and do as I say or as they did . Make sure you read the MS
documentation (in the link I provided before) and then create
implementation, test, and fallback plans. Only then should you proceed.

--

JPolicelli, MVP - Directory Services
This posting is provided "AS IS" with no warranties and confers no rights!
http://johnpolicelli.wordpress.com/

 

[Harrison Midkiff]

Thanks for replying....

I didn't quite understand your response. Can you elaberate?

 

[Meinolf Weber]

Hello Harrison,

On the 2000 DC which has the schema master role run adprep /forestprep and
adprep /domainprep to prepare the schema for 2003 with an account that is
member of the schema admins. You have to run the command from the 2003 installation
disk. After that is done you can promote the 2003 server to domain controller.
Just promoting the server will not make it GC, in AD sites and services double-click
sitename, double-click Servers, click your domain controller, right-click
NTDS Settings, and then click Properties, on the General tab, click to select
the Global catalog check box.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

[Harrison Midkiff]

Meinolf:

Thanks for your reply. I found KB 325379 "How to upgrade Windows 2000
domain controllers to Windows Server 2003" which goes in depth and is very
good. I am testing everything in my lab right now. For any others reading
this post you should read this article!

I am sure I am right on this, but once I do the "adprep /forestprep" and
"adprep /domainprep" I should be fine to have a mix of 2000 and 2003 AD
servers. I am sure I am right was curious what you would say?

Harrison

 

[Meinolf Weber]

Hello Harrison,

You can run 2000 and 2003 DC's together, no problem. The only thing what
you have to keep in mind is that you can not raise Domain/Forest functional
levels to use new features.

See here:
http://technet.microsoft.com/en-us/library/cc738670.aspx


Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm