Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 244
  • Last Modified:

PDC being used in Windows Server 2003 Enviroment

I have inherited a Windows 2003 server enviroment that is still using a PDC.  It is my understanding that in a 2003 enviroment that there is no need to have a PDC.  How can I move away from this so that all of the DC are created equally?  What are the advantages and dis advantages.
0
securitythreat
Asked:
securitythreat
  • 3
  • 2
  • 2
  • +1
2 Solutions
 
redseatechnologiesCommented:
Hi securitythreat,

In 200x it is that way already - what do you mean "is still using a PDC"?

-red
0
 
Lee W, MVPTechnology and Business Process AdvisorCommented:
Either you have an NT4 domain with NO 2003 domain controllers OR you have a 2003 domain with no NT4 PDC.  There is simply NO PDC in a 2003 (Active Directory) domain.  You don't "move away" from it.
0
 
MidnightOneCommented:
securitythreat:

In a Windows NT domain, there is a PDC (the only read-write copy of the security database) and BDCs (read-only copies).

In Windows 2000 and later domains, there is no PDC - there is however a PDC Emulator FSMO that performs a lot of the same functions.

If you have a Windows NT PDC -and- a Windows 2003 domain controller on the same domain, there's --going-- to be problems.

With all THAT said, you can still have a Windows NT domain and Windows 2003 servers that aren't domain controllers and there won't be (many) problems.

HTH

MidnightOne
0
Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

 
securitythreatAuthor Commented:
Then what writes are transferred when the primary server crashed?
0
 
Lee W, MVPTechnology and Business Process AdvisorCommented:
How do you define primary server?

MidnightOne, in my opinion, incorrectly suggested (intentionally or not) the PDC Emulator is equal to the PDC.  IT is not.  There is NO PDC.  There are 5 FSMO roles that COULD be distributed over 5 servers.  If you did that which would you call the "PDC"?  EVERYTHING is a DC.  And 1-5 DCs hold the FSMO roles.  By default, the first DC to run 2000/2003 (Active Directory) is the system with all 5 FSMO roles.

You MUST have FSMO masters on your domain - so in that respect, you CANNOT have all DCs created equal... and you don't want, nor need, more than 2 DCs per site.
0
 
MidnightOneCommented:
leew:

While the PDC Emulator FSMo isn't equal to a PDC under WinNT, and despites MS's claim to the contrary, I've yet to see a domain function even moderately well when the DC with the PDC Emulator role failed.

*shrugs*

MidnightOne
0
 
redseatechnologiesCommented:
I agree with you MidnightOne,

>>MidnightOne, in my opinion, incorrectly suggested (intentionally or not) the PDC Emulator is equal to the PDC

Where did you suggest that?  I cannot see you say that at all!  What you said, was as follows;

>>In Windows 2000 and later domains, there is no PDC - there is ***however a PDC Emulator FSMO that performs a lot of the same functions***

Which is correct.

Petri agrees with us both...

http://www.petri.co.il/understanding_fsmo_roles_in_ad.htm

-red
0
 
Lee W, MVPTechnology and Business Process AdvisorCommented:
I never said the PDC emulator wasn't similar.  My feeling was that MidnightOne didn't clarify enough how different the PDC emulator in AD and the PDC in an NT4 domain differed in his original post.
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

  • 3
  • 2
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now