We are currently running on two domains; one AD on Server 2008 and the other NT 4.0.
Before we shutdown our NT domain we want to make sure there is not anything/anyone still accessing/authenticating on this domain.
All of our users, workstations, and servers are authenticating on AD, having said that, we are looking for some type of monitoring tool or process we can take to be 100% sure shutting down the NT server will not cause any problems.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
also if this was a trusted domain don't forget to deal with any permissions left stamped against files on other servers with the old domain specified - it's easier to remove them when you can see them than when they turn into an anonymous looking SID entry. If there is one then remove any trust on the W2K3 side with your old domain using AD domains & trusts.
look in server manager on the NT4 box, does it see itself as the PDC and the 2K8 box as a BDC?
look in AD Users and Computers on the 2K8 box, it sees itself as the only domain controller - you're fine
Other than the usual print and file sharing, if you've migrated everything else - you should be golden.
It would have been good if the asker had included a comment in the accepted answer. If the reason they accepted the answer was because they intended to examine the network traffic using one of the tools I suggested, then in my opinion, no split was appropriate. If they liked the idea of just shutting it off then a split or different answer would have been appropriate.
Business Accounts
Answer for Membership
by: netcmhPosted on 2009-11-05 at 11:11:15ID: 25752797
If it was a migration from an NT4 domain to a new AD domain, then the NT4 domain is now not needed anymore. Just shut the machine off.
If this was an inplace-upgrade from an NT4 domain to an AD domain, then this machine isn't a PDC anymore (as the PDC has been upgraded), but a BDC. You can shut it down and reinstall, and delete the computer object in the Domain Controllers OU.
Unlike W2k or later, NT4 doesn't require (in fact, it's not even possible) to demote a DC.