NT4 upgrade to NT2000

[Bob]

We upgraded our NT4 Server to NT2000. This server is our
web server, and is outside a firewall. The NT4 server was
part of a NT4 Domain, and is tied to another server that
handles the data via a virtual Directory. Ok, here is the
problem. When we upgraded the data server, we had to
create a nt2000 domain controller. 1st DC, and we ran it
for a couple of weeks no problem. OK, now onto the Primary
IIS Server. We upgraded it and now it asks for a Domain,
Nothing we do, can we get it to look at the other Domain
Controller, We keep getting an error saying it cant find a
DC or a Domain. We tried to use DCpromo, and it doesn't
give us the the opportuniry to demote the server to a
managed server, and everytime we reboot the server it asks
us to install Active Directories. We installed AD, and we
still can't see the other server in this Domain... Help
please.. I have checedk all the KB's I can. This has
degraded my web server really bad, and now We can't get it
to use logins via the domain, since the domain does not
show up as part of AD...

 

[Dave Shaw [MVP]]

Sounds like your NT4-based web server was a member of your NT4-based domain.
When you upgraded the internal domain to Active Directory, you may have also
set the domain functional level to 2003. This probably hosed your NTLM
authentication that you had working through the firewall. If that's the
case, you need to configure your firewall to pass Kerberos authentication so
the Web server can authenticate to the domain. It probably can no longer
use NTLM.

-ds

 

[Bob]

Thanks, but both servers are tied to each other via a
direct crossover cable, and both are outside the firewall.
So there is no problem with the firewall at this point.
The problem is whenever someone external to our site tries
to use the web services, they can't.

Bob

 

[Enkidu]

Did you install DNS? AD absolutely requires DNS.

Cheers,

Cliff