• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 591
  • Last Modified:

Can I make a Windows Server 2003 DC read only?

I was wondering something.  I know with 2008 you can make a DC read-only, but I was wondering if there was some way to make a 2003 DC read-only too?

Here is my scenario:
1 main site (PDC resides here along with a couple other DCs for backup purposes)
3 remote sites (each site has a DC)

I would like to make the 3 remote site DCs read-only, if not then I will have to change the admin password to keep my level 1 tech hands out of the cookie jar, but they really need to have access to a couple of the programs on the server at those sites.  It would be nice to just make sure they could not make any changes the AD from those sites.

Thanks for your time.

3 Solutions
No. This feature is only supported on Windows Server 2008. Sorry.
You need to tell them not to touch the AD and specific programs, or upgrade to win 2008.

I hope this helps !
Rajith EnchiparambilOffice 365 & Exchange ArchitectCommented:
You cannot have a read only DC in WIndows 2003.

It is a new feature in Windows 2008. In order to have a read only DC, you need to have atleast one Windows 2008 DC (not read only) along with your 2003 DCs to start with. Only after that, you can think of having a read only DC.

So, the first step will be to introduce a new Windows 2008 DC to the mix.

Hope this helps.

rsnellmanIT ManagerAuthor Commented:
OK, I thought that was the case.  So, I think I will be going to plan B, which is demote the current DC and make it a file server only and give them access to only that server for the specific programs.

Maybe I could give them a different login account, so they could log into that remotely and access those specific programs.

That should be the best route, right now, correct?  It is unfortunate that I have to go this route, but for whatever reasons my boss will not enforce it and they won't listen to me.  So, for their sake and more for mine, I need to take these measures to prevent an AD disaster.

Ok, thanks again for everything.

Have a great day.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Easily Design & Build Your Next Website

Squarespace’s all-in-one platform gives you everything you need to express yourself creatively online, whether it is with a domain, website, or online store. Get started with your free trial today, and when ready, take 10% off your first purchase with offer code 'EXPERTS'.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now