ADPREP

[Guest]

I want to install a 3rd domain controller in a 2000 AD environment as a BDC
to be used as a backup incase of disaster.

The new BDC is a windows 2003 server. When I go to upgrade it to a domain
controller it says that I need to run adprep. If I run adprep and then
promote this BDC to become a domain controller and then physically remove
this machine from our network to go into storage. Will this hurt or degrade
my existing 2000 network?

 

[Jmnts]

All what Adprep does is to update your forest and domain to support windows
2003 with new objects. But some objects/features wil be only be used when
you have Domain/ Forest in Windows 2003 Mode. So the only "problem" that you
could have after run dcpromo is the replication of the new objects accross
your existent domain controllers.
Don't Forget:
Type netdom query fsmo, to see which is the Schema master and the
Infraestructure master.
Adprep /forestprep - Must be run in Schema Master
Adprep /domainprep - Must be run in Infraestructure Master

Check this links to more information.
Hotfixes to install before you run adprep /Forestprep on a Windows 2000
domain controller to prepare the Forest and domains for the addition of
Windows Server 2003-based domain controllers
http://support.microsoft.com/?kbid=331161
Operations that are performed by the Adprep.exe utility when you add a
Windows Server 2003 domain controller to a Windows 2000 domain or forest
http://support.microsoft.com/default.aspx?scid=kb;en-us;309628

 

[Ken Aldrich]

Yes, when you add a 2003 Domain Controller to a AD 2000 Domain, you have to
update the schema and upgrade the version of AD.

Here are some invaluable links. One will walk you through the process and
the other will show you some pitfalls and give you tips to read which will
allow you to become more well prepared in the event of a problem.

http://support.microsoft.com/default.aspx?scid=kb;en-us;325379
http://support.microsoft.com/default.aspx?scid=kb;[LN];555040

 

[Dave Shaw [MVP]]

You would be best off to not refer to the domain controller as a "BDC".
Technically speaking, there are no BDCs post Windows NT 4.0. All Domain
Controllers are effectively peers in Active Directory.

The reason for the prompt to run ADPrep is that Windows Server 2003 has
capabilities that Windows 2000 servers did not. In order to introduce a 2k3
DC into a Windows 2000 domain and forest, the Active Directory's Schema must
be updated to reflect the fact that a DC with 2k3 features has been
introduced into it's environment.

Removing the server from the domain will have no negative affect as long as
it is done properly (i.e. using DCPROMO).

-ds