Mixed servers,2000 and 2003, and delegation

[Scott Beall]

I have a windows 2003 domain.

I have a NAS(network attached storage) server running
windows 2000. All servers accessing the NAS are running
2003.

I want to delegate a 2003 webserver access to the
filesystem of the 2000 NAS server. The specific access I
need is for a CGI or ASAPI module on the 2003 webservers
to perform directory browsing and file opening for read
and write, to files on the NAS 2000 server.

All documentation I can find asks that make the domain
2003 native, instead of the mixed mode that I am currently
running.

So, Do I need to raise the domain functional level to do
this, and if I did raise the functional level, would the
NAS 2000 server have to have a operating system upgrade?
Or is there a way to allow the 2003 servers to allow
delegation to the 2000 server while still having
everything on the mixed mode domain.

Thanks.
Scott

 

[Scott Beall]

GT,

Yes, the DC is not the NAS. Can you clarify about the
functional level of the domain... Since the DC is a
windows 2003 server, and the NAS is a 2000 server, I am
having problems with the NAS allowing file access (read,
write, directory listing) from another server (2003 server
with IIS6). All information that I read discusses 2003
server having "constrained delegation" while the old 2000
servers had just delegation. To take advantage of this new
delegation method, would all the servers on the domain
have to be running 2003? Or is all delegation handled at
the DC and not within the security settings of each
server?

Scott

 

[GT]

I'm not familiar with your NAS, but if it just looks/works like a win2k file
server then delegation is not even an issue. AD is being used to provide
authentication (i.e. verify that you are really joe.user). Authorization is
determine on the file server via share and NTFS permissions.

Can you point me to anything re. 'constrained delegation'? I haven't seen
that anywhere.

-GT