Solved

Domain functional levels...

Posted on 2004-08-05
7
421 Views
Last Modified: 2010-07-27
Right now I am running a Windows 2003 network in "Windows Server 2003 interim mode".  I have have 2 w2003 DC, 2 NT4 DC and no w2k DC.  I have about 100 clients.  I want to switch to "WIndows Server 2003" domain functional level.  I know that NT 4 DC are not supported in this senerio.  I need to keep the NT 4 DC up until  I can move the apps that reside on them over to different servers.  I don't care if the NT 4 DC aren't able to authenticate users or perform and DC functions in the new domain functonal level.  I was just wondering if there are adverse effects in keeping 2 NT 4 DC in this new domain functional level.  The 2 W2003 DC servers should easily handle all the DC roles in my network.  Must I purge all the NT 4 DC before continuing?
0
Comment
Question by:alocke2940
7 Comments
 
LVL 16

Expert Comment

by:JamesDS
ID: 11729416
alocke2940

If you raise the Domain functional level then the NT4 DCs will nolonger be able to replicate the AD database and will not receive updates - IE they will effectively cease to be DCs.

Yes, you should purge NT4 DCs before upgrading

Cheers

JamesDS
0
 
LVL 51

Expert Comment

by:Netman66
ID: 11729522
Also, if you require authentication to access shares and applications, they will fail too.

0
 
LVL 84

Accepted Solution

by:
oBdA earned 125 total points
ID: 11730029
Basically, it would be better to move the applications to another machine before raising the level. If you're in a hurry, or can't move it for whatever reason, you could try to simply depromote your NT4 BDCs to member servers.
Read the instructions carefully (especially the part about what happens with the NTFS permissions), though, and make sure you have a working backup of the machines.
UPromote
http://utools.com/UPromote.asp
0
 

Author Comment

by:alocke2940
ID: 11730081
You can depromote and NT 4 server from a DC to member server?  How do you do that?
0
 
LVL 84

Expert Comment

by:oBdA
ID: 11730252
Well, with the Upromote tool from the link?
We've just run this successfully on a couple of NT4 BDCs in a W2k3 domain that were still serving as print servers and had no problems. Whether it works for you depends on your setup. (And the air humidity, your stepsister's horoscope, and whatever else influences computers ...)
Major caveat: When/if you depromote a DC that way, it will be removed from the domain first and become a stand-alone server. During this, the NTFS permissions at least on the system drive will have to be reset as well, due to the SID changing; so if you've developed some elaborate permission construction on your system drive, you might have to reconstruct it. You can leave the permissions on the other drive(s) if you plan to rejoin the domain.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question