?
Solved

First 2008 Domain Controller in a 2003 domain with an empty forest root

Posted on 2010-11-11
8
Medium Priority
?
403 Views
Last Modified: 2012-06-21
I've already practiced the procedure of adding the first 2k8 DC to a 2k3 domain in my lab (ADPrep, DCPromo, etc).  However, the production environment I have to upgrade has an empty forest root (root.com being the empty forest root and company.com being the domain I want to add the first 2k8 DC to.

Do I have to add a 2k8 DC to the empty forest root domain (root.com), or can I just add the first 2k8 DC to the child domain (company.com?
0
Comment
Question by:Anthony Graczyk
8 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 34114507
Either way works fine, there is no order as to what domain needs the first 2k8 box

Thanks

Mike
0
 
LVL 15

Assisted Solution

by:JBond2010
JBond2010 earned 1200 total points
ID: 34114601
Add the Windows Server 2008 to the company.com domain. The root.com is the very top of your Active Directory DNS name space.
0
 
LVL 57

Assisted Solution

by:Mike Kline
Mike Kline earned 800 total points
ID: 34114660
It doesn't matter though, he can add it to the child first too

The child functional level can actually be higher too

 
http://technet.microsoft.com/en-us/library/understanding-active-directory-functional-levels(WS.10).aspx
 
"You cannot set the domain functional level to a value that is lower than the forest functional level, but you can set it to a value that is equal to or higher than the forest functional level."

Thanks

Mike
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
LVL 24

Expert Comment

by:Awinish
ID: 34114699
Since Schema & domain naming master roles are forest wide,so let it be there is n number of domain but these two roles are going to be common for all the domain in forest,so it can be run on any dc with particular FSMO roles.

See the below link.

http://blogs.dirteam.com/blogs/sanderberkouwer/archive/2008/03/02/transitioning-your-active-directory-to-windows-server-2008.aspx
0
 
LVL 15

Accepted Solution

by:
JBond2010 earned 1200 total points
ID: 34114766
If he is to raise the forest functional level or the domain functional level the FSMO roles for the Schema Master, and Domain Master will have to be transferred to a Windows Server 2008 DC.
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 34114794
Yes but his question was does he have to add the new 2008 box to the parent or the child domain...answer is it doesn't matter either one is fine.
0
 
LVL 15

Assisted Solution

by:JBond2010
JBond2010 earned 1200 total points
ID: 34114890
Yes, but the future of his infrastructure is important too, if he chooses to raise the forest functional level or the domain functional level. General practice is usually to add the dc to the child domain.
0
 

Author Closing Comment

by:Anthony Graczyk
ID: 34115256
Thanks so much.  I did not anticipate such a quick response.
0

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
Active Directory can easily get cluttered with unused service, user and computer accounts. In this article, I will show you the way I like to implement ADCleanup..
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
Suggested Courses

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question