First 2008 Domain Controller in a 2003 domain with an empty forest root

I've already practiced the procedure of adding the first 2k8 DC to a 2k3 domain in my lab (ADPrep, DCPromo, etc).  However, the production environment I have to upgrade has an empty forest root (root.com being the empty forest root and company.com being the domain I want to add the first 2k8 DC to.

Do I have to add a 2k8 DC to the empty forest root domain (root.com), or can I just add the first 2k8 DC to the child domain (company.com?
Anthony GraczykIT ManagerAsked:
Who is Participating?
 
JamesConnect With a Mentor Senior Cloud Infrastructure EngineerCommented:
If he is to raise the forest functional level or the domain functional level the FSMO roles for the Schema Master, and Domain Master will have to be transferred to a Windows Server 2008 DC.
0
 
Mike KlineCommented:
Either way works fine, there is no order as to what domain needs the first 2k8 box

Thanks

Mike
0
 
JamesConnect With a Mentor Senior Cloud Infrastructure EngineerCommented:
Add the Windows Server 2008 to the company.com domain. The root.com is the very top of your Active Directory DNS name space.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
Mike KlineConnect With a Mentor Commented:
It doesn't matter though, he can add it to the child first too

The child functional level can actually be higher too

 
http://technet.microsoft.com/en-us/library/understanding-active-directory-functional-levels(WS.10).aspx
 
"You cannot set the domain functional level to a value that is lower than the forest functional level, but you can set it to a value that is equal to or higher than the forest functional level."

Thanks

Mike
0
 
AwinishCommented:
Since Schema & domain naming master roles are forest wide,so let it be there is n number of domain but these two roles are going to be common for all the domain in forest,so it can be run on any dc with particular FSMO roles.

See the below link.

http://blogs.dirteam.com/blogs/sanderberkouwer/archive/2008/03/02/transitioning-your-active-directory-to-windows-server-2008.aspx
0
 
Mike KlineCommented:
Yes but his question was does he have to add the new 2008 box to the parent or the child domain...answer is it doesn't matter either one is fine.
0
 
JamesConnect With a Mentor Senior Cloud Infrastructure EngineerCommented:
Yes, but the future of his infrastructure is important too, if he chooses to raise the forest functional level or the domain functional level. General practice is usually to add the dc to the child domain.
0
 
Anthony GraczykIT ManagerAuthor Commented:
Thanks so much.  I did not anticipate such a quick response.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.