bizcrown101
asked on
What happens to user names and permissions when you promote a server
I have a domain controller setup with 'businessname.corp' as the domain. Now I'm needing to setup a backup domain controller. The server however that will need to be a backup domain controller already has user names and complex file permissions. It's also functioning as a web server as well. What is going to happen if I promote this standard Windows 2003 server to a backup domain controller? Will the user names and file permissions stay intact or am i going to be starting from scratch?
Thanks in advance.
Thanks in advance.
>> Now I'm needing to setup a backup domain controller
Is this server allready in the domain?
>> It's also functioning as a web server as well.
IUSR and IWAM accounts will stay intact after promotion to domain controller
However all LOCAL user accounts - will cease to exist when this server is promoted to a domain controller
Is this server allready in the domain?
>> It's also functioning as a web server as well.
IUSR and IWAM accounts will stay intact after promotion to domain controller
However all LOCAL user accounts - will cease to exist when this server is promoted to a domain controller
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks a lot for the answers.
I suppose my other choice is to promote our Windows 2003 server that is running our SQL Server database.
Unfortunately those are the only choices I have; web server or SQL 2000 server. I was leaning toward the web server because it's not hit very hard and has far less user permissions to setup. I suppose the final option is to not have a backup domain controller but that really worries me as we will have all 75 clients dependent on just this one server.
Yes, I know the correct answer is to get another server. Unfortunately we will not be able to have one for a few more months. This feels like a pretty tight spot for a lot of reasons.
But in general would you guys recommend SQL Server box becoming a BDC over the web server? The SQL Server box is more secure but it's also got data on it that needs far more security. In other words there will be many users that NO MATTER WHAT cannot be allowed access to the SQL Server data. All authentication on the SQL Server is through SQL Server, I do not use NT authentication. Jeez, sucks to work on a shoestring and tight timeframes to boot!
I suppose my other choice is to promote our Windows 2003 server that is running our SQL Server database.
Unfortunately those are the only choices I have; web server or SQL 2000 server. I was leaning toward the web server because it's not hit very hard and has far less user permissions to setup. I suppose the final option is to not have a backup domain controller but that really worries me as we will have all 75 clients dependent on just this one server.
Yes, I know the correct answer is to get another server. Unfortunately we will not be able to have one for a few more months. This feels like a pretty tight spot for a lot of reasons.
But in general would you guys recommend SQL Server box becoming a BDC over the web server? The SQL Server box is more secure but it's also got data on it that needs far more security. In other words there will be many users that NO MATTER WHAT cannot be allowed access to the SQL Server data. All authentication on the SQL Server is through SQL Server, I do not use NT authentication. Jeez, sucks to work on a shoestring and tight timeframes to boot!
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Well I've managed to dig up a machine we can put Windows 2000 on to use as BDC. We are running the Windows 2003 server in mixed mode so it sure.
I appreciate all your suggestions. They have been excellent. I hadn't thought of the virtual server deal... I think that will be helpful in many circumstances.
Thanks a bunch!
I appreciate all your suggestions. They have been excellent. I hadn't thought of the virtual server deal... I think that will be helpful in many circumstances.
Thanks a bunch!
Hey that works! Of course if you have Win2000 you could run that virtually as well if you didn't want to deal with another machine to manage.
(Can you tell that I love Virtual Server!?)
Jeff
TechSoEasy
(Can you tell that I love Virtual Server!?)
Jeff
TechSoEasy
ThanQ
Yep Virtual server is a good product - I keep a raft of virtual machines for testing on my work VM server :)
Yep Virtual server is a good product - I keep a raft of virtual machines for testing on my work VM server :)
Generally, you don't want a web server to be a domain controller. If you need a secondary DC, this would not be the server to do it on.
Jeff
TechSoEasy