Win2k3 "Security Guide" templates applicable during 2k to 2k3migration?

['FoR ReaLz' E. Balansay]

Hello,

We have a mixed NT/2k domain, and are decomissioning our last NT DC to
bring up a Windows 2003 Domain Controller. End result would be a
2000/2003 domain. I've been reading the "Windows Server 2003 Security
Guide," and would like to implement those templates. Must all Domain
Controllers be Windows 2003 in order for the templates to be applied?

If a server is 2k and the 2k3 templates are issued to the OU, as i
understand, only 2k settings will apply and 2k3 settings would be ignored
by the 2k machine, correct? However would this disrupt/make uneasy Win2k?
Therefore I should create a new OU for 2k & 2k3 servers?

Basically: To implement the templates in the win2k3 security guide all
servers must be wink3 - if Win2k servers are in the same OU would there be
any 'ill effects'? Or would Win2k ignore the 2k3 policies?

Thank you very much,
Edgardo

 

[Chriss3]

Edgardo this what not an easy question to answer but its a good question.
Some new features are added in 2003 to Group Policy they will be ignored as
you suggested.

How ever the question is if Windows 2000 Server can be locked down as hard
as Windows Server 2003. I will guess it will work but I can't promise you
anything.