<div>
Make sure your global catalog has also been moved:<br />
<br />
How To Create or Move a Global Catalog in Windows 2000 (it is same on <br />
Windows 2003)<br />
<a href="http://support.microsoft.com/?kbid=313994" rel="ugc">http://support.microsoft.com/?kbid=313994</a><br />
<br />
Sometimes when demoting a DC they lose &quot;security&quot; for the domain, by that I mean that the AD security is not recognized correctly. &nbsp;There are several fixes to correct this, but I have found the simplest method was to pull the server from the domain, then re-add the server back into domain. &nbsp;Again...this is **ONLY** if the security is not working right-&gt;on the security tab you see SID's instead of group or usernames for active directory users and groups.
</div>


Make sure your global catalog has also been moved:

How To Create or Move a Global Catalog in Windows 2000 (it is same on
Windows 2003)
http://support.microsoft.com/?kbid=313994 [http://support.microsoft.com/?kbid=313994]

Sometimes when demoting a DC they lose "security" for the domain, by that I mean that the AD security is not recognized correctly.  There are several fixes to correct this, but I have found the simplest method was to pull the server from the domain, then re-add the server back into domain.  Again...this is **ONLY** if the security is not working right->on the security tab you see SID's instead of group or usernames for active directory users and groups.

<div>
<div class="content wysiwyg-content">
I have had a mixed enviroment, 2000 and 2003. In the past 2 weeks i have straighed out all my FSMO roles on two 2003 AD servers. All the roles are looking good and seem to be as they should.<br />
<br />
The last win 2000 DC is on the list to be demoted, however, it has all of our file shares on it. I am wondering what will happen to the folder level security? And if there is a way to preserve those attributes and demote the server?<br />
<br />
Thank you
</div>
</div>


I have had a mixed enviroment, 2000 and 2003. In the past 2 weeks i have straighed out all my FSMO roles on two 2003 AD servers. All the roles are looking good and seem to be as they should.

The last win 2000 DC is on the list to be demoted, however, it has all of our file shares on it. I am wondering what will happen to the folder level security? And if there is a way to preserve those attributes and demote the server?

Thank you

Demote DC and what happens to folder level security?

Networking is the process of connecting computing devices, peripherals and terminals together through a system that uses wiring, cabling or radio waves that enable their users to communicate, share information and interact over distances. Often associated are issues regarding operating systems, hardware and equipment, cloud and virtual networking, protocols, architecture, storage and management.