Adding Server 2003 DC to 2000 Domain

Posted on 2006-06-08
Medium Priority
Last Modified: 2012-05-05
We currently have a Windows 2000 Domain, and I wanted to see what risks if any there were into adding a Server 2003 domain controller. Also, do I need to do anything before adding it?

The reason for adding a 2k3 controller is to serve as a radius server for wireless clients.

Thanks, Mike.
Question by:OpTiCz
LVL 71

Accepted Solution

Chris Dent earned 172 total points
ID: 16862534

Hi Mike,

You have to update the Schema before you can promote a 2003 Server to a DC in a Windows 2000 Domain. You should always always take a full system state backup before letting things play with the Schema. That said, this has been done a great deal and I've never seen it cause a problem - so the backup is one of those better safe than sorry things.

There are two things that need to be done:

First on your Schema Master insert the Windows 2003 CD then (from the command line) head over to the i386 Folder then run ADPrep /ForestPrep.

It's best to wait a little after that's done to make sure it has time to replicate changes everywhere, so give it an hour then head over to your Infrastructure Master and again pop the 2003 CD in and run ADPrep /DomainPrep.

If you have a lot of child domains then DomainPrep would need to be done for each Child Domain (but it sounds like you only have one so you shouldn't need to worry about that).

Finally if you're not sure where your roles are you can try this:

netdom query fsmo

If that doesn't work do:

Start, Run, ntdsutil, then at the prompt type:
Connect To Server <Name Of A DC>
Select Operation Target
List Roles For Connected Server

And it'll tell you where all 5 of the roles are that way.


LVL 11

Assisted Solution

elbereth21 earned 164 total points
ID: 16862549
Hi OpTiCz,
there are no real risks, if you follow the right guidelines, you'll instead see some improvements in AD management. (For example, the fact you'll be able to create Group Policies in test mode and to use command lines management tools for AD).
Remember that you have to run adprep /forestprep and /domainprep using the adprep.exe of the Windows 2003 CD (not the previous one): http://www.petri.co.il/windows_2003_adprep.htm
Have a bit more defensive approach, if you have Exchange 2000 in your forest:

LVL 48

Assisted Solution

Jay_Jay70 earned 164 total points
ID: 16865915
Hi OpTiCz,

with windows 2003 R2 (release 2) you will need to run the adprep tools from the second cd supplied in the 2 cd set!


you can also download here

this boosts the schema up to cope with R2 functionality

Featured Post

Vote for the Most Valuable Expert

It’s time to recognize experts that go above and beyond with helpful solutions and engagement on site. Choose from the top experts in the Hall of Fame or on the right rail of your favorite topic page. Look for the blue “Nominate” button on their profile to vote.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
We’ve all felt that sense of false security before—locking down external access to a database or component and feeling like we’ve done all we need to do to secure company data. But that feeling is fleeting. Attacks these days can happen in many w…
This lesson discusses how to use a Mainform + Subforms in Microsoft Access to find and enter data for payments on orders. The sample data comes from a custom shop that builds and sells movable storage structures that are delivered to your property. …

829 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question