asked on

Allow an existing W2k server to authenticate users

I have a SBS2003 Server Premium network with 2x W2k Servers.

I would like to allow an existing member-server running Windows 2000 to authenticate users in the event the SBS server is unavailable (down for maintenance or down for the count).

I have read and understand the instructions on running dcpromo on a server that is in a workgroup to promote it to a DC but is it possible to accomplish this on an existing domain-member server without removing it first from the domain, and then running DCPROMO?

Hypercat (Deb)

First, a cautionary note: your domain will have to be in mixed mode in order to promote a Win2000 server to a domain controller. I am not sure but I think SBS by default installs itself in mixed mode, but you should check before you proceed. On the other hand, it's better to have all of your DC's on the same operating system, so it would be preferable to upgrade one of your existing Win2000 servers to Win2003 before making it a domain controller. Other than that, you do not need or want to remove the server from the domain before running dcpromo. On a domain that is already in existence, your server has to be already joined to the domain to promote it to a second domain controller on the existing domain. All you do is run dcpromo on the existing member server and it will be promoted to a domain controller.

tonybutc

ASKER

excellent. thank you for confirming I can just run dcpromo.

tonybutc

ASKER

*sorry i had intended to include this in my last post.

Are there limitations or problems I should expect I kept W2k Server instead of updating it or is your suggestion just a best practices approach?

ASKER CERTIFIED SOLUTION

Hypercat (Deb)

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

tonybutc

ASKER

Thank you for the information. Looks like its time to upgrade.