Setting up an efficient active directory environment

I recently was given responsibility for all IT assets in my company.
We currently have:
 - one P4 based Windows 2003 server named ABRA
 - three Netware 5.13 servers

We are in the process of revamping the environment.  I have upgraded all workstations and registers to Windows XP SP2.  I bought four new Windows 2003 R2 servers.  These servers each have dual core2 Quad 2.4 ghz processors, 4 gb RAM.  Two have eight 500 gb SATA drives and two have eight 157 gb SAS drives.  These servers are named AHR01 through AHR04

The first server will be used for a file/print server.  It is part of the domain.  The other three servers will be used to run Navision and RMS Headquarters.  (AHR01)

When we are done upgrading to Navision and RMS we will eliminate the Netware servers and environment.

My questions are as follows:
- Should I make the other three new servers domain controllers?
- How do I move the Active Directory schema master role off of the old ABRA server and onto the new AHR01 server?
John SmithersAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

* I recommend allowing domain controllers to be dedicated to the job of being DCs. Having said that, you should configure a minimum of 2 for fault tolerance. Pick the least-utilized of your 3 remamining servers and make it a 2nd DC. Don't forget to configure it as a Global Catalog server, and to point your clients to one DC as primary DNS and the other as secondary.

* Before adding an R2 DC to a 2003 domain, you will need to run adprep /forestprep and adprep /domainprep using the version of adprep.exe that's found on Disc 2 of the R2 media.

* You can transfer FSMO roles by using the ntdsutil command-line utility, as described here:

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
John SmithersAuthor Commented:
Thank you.  We only have about 30 users of the domain.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.