Adding (Not upgrade 2000DC) 2003 Server is existing 2000 domain.

I have a small windows 2000 domain controller and want to install 2003 server (new Virtual Box) to eventually replace old VM. I do not (as manuals explain) want to upgrade 2000 DC, can't I just add the 2003 server to the existing 2000 domain, run both in parallel, then promote 2003 and decommission 2000 DC?

Options I see:
1. Join an existing domain (2003DC joining existing 2000 domain)
2. Create a new Child Domain, new Domain Tree, new forest (This does not look like what I want)
LVL 1
John CrawfordIT AdministratorAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

arnoldCommented:
yes. join, and it will be just another DC in the environment.
oBdACommented:
* "2003DC joining existing 2000 domain": no, you can not join a DC to another domain.
* You can install the 2003 and join it as member server to the 2000 AD.
* If you want to promote the 2003 to a DC, you have to prepare the AD for the 2003 DC before being able to promote.
adprep.exe /forestprep
adprep.exe /domainprep

Open in new window

That said, and you probably know that this has to be asked: why do you want  to install a 15 year old OS that's long out of support? Even 2008R2 will be out of extended support in a little over 1 year. Mainstream support of Server 2012R2 has already ended.
arnoldCommented:
If the person is still running a windows 2000 based AD, 2003 is an update that might meet the vendor requirements ....... of supported platform.
there are no updates available for 2003 unless the SPs were previously obtained, or exist in a WSUS server ....... If this is a rapid transition from 2000 through to 2012.
2012 can be added to a 2003 AD domain. do not recall whether 2008 can be added to a 2000....
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

John CrawfordIT AdministratorAuthor Commented:
oBdA

Yes ok, that was my intent, for the fresh install 2003 server to be a member, then run in parallels and promot after moving databases.
John CrawfordIT AdministratorAuthor Commented:
oBdA

To answer, I'm assuming 2008 and later cannot be joined as member of a 2000 DC.
John CrawfordIT AdministratorAuthor Commented:
arnold

I have no intention of trying to upgrade a virtual machine or even bare metal for that matter. What I want is to join 2003 (or 2008 12 etc) as a member in parallel. Then move my databases to cluster or NAS, then promote 2003 to valid DC status so it can replicate with 2000, then I can get ride of the 2000 DC's on the network.
oBdACommented:
Not speaking from personal experience here, but Microsoft says it's possible even for Server 2008 R2:
Prepare a Windows 2000 or Windows Server 2003 Domain for a Domain Controller That Runs Windows Server 2008 or Windows Server 2008 R2
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc754670(v%3dws.10)
John CrawfordIT AdministratorAuthor Commented:
I am assuming the adprep command line procedures update active directory database files on the Master Controller 2000DC (meaning insert 2003 cd or DVD into master controller and execute adprep commands) so as to be compatible with 2003 server.
oBdACommented:
No, it updates the AD Schema to support the newer versions.
arnoldCommented:
Gecko odds,  a me,ber server can be added to 2000 2003, 2008, 2012,2016

The issue deals with based on the AD/Forest version and which OS version can function as a DC,
Often the DCs can be two versions out, 2000 2093,2008
2003, 2008,2012.

I stil do not understand what you are after, a cluster requires at least two .......


The DBs might not need to be touched for DC server ...
John CrawfordIT AdministratorAuthor Commented:
As I said in prior comment, I have a 2000DC I want to retire, I do not want to upgrade the virtual machine. What I want is to see if I can add a 2003 server as a Member, then move accounting databases off the 2000 DC and put on another server, NAS, cluster whatever, replicate at least once maybe twice, then promote the 2003 server to Master DC (I think this is the vernacular) then decommission the 2000DC.

The manual in the box and Microsoft articles keep pushing to upgrade the 2000 DC,  If this technology is designed to be fault tolerant and allow other member DC, then I should be able to do it this way.
arnoldCommented:
You are transitioning from One to he other,
One way us to upgrade in place the existing which you seem to interpret any comment as a suggestion to do just that.
The other is to create a new VM running Windows (2003,2008) if you install 2008, you need to add the file services for Windows 2003 (ntfrs which is needed for sysvol/netlogon replication)
Add it as another dc. Allow the replication to complete, dcdiag, repadmin once the new has all the info, and the replication is complete, you can transfer all the roles from the old DC, to the new DC. You would need to make sure all existing member servers point their DNS records to the new server as prinary.
At this point, the old DC can be retired (first, power off the VM) to make sure the environment operates ......
You can then decom(demote the old DC to a member server)

You can now elevate the new ad/forest level to the highest level of that os 2003/2008 which ever is higher.
Transition the sysvol from ntfrs to dfs-r for future simpler transition.
John CrawfordIT AdministratorAuthor Commented:
arnold

Thanks, actually you suggested upgrading in place twice! Getting Started Windows Server 2003 Enterprise Manual:  Chapters 3 - Getting ready for an upgrade; AND Chapter 4 -  Running Setup for an Upgrade, you have pages and pages of text telling, instructing to upgrade a in-place system. Exactly what I don't need.

Some Good News: I do see in chapter 3 "Preparing for Upgrades in a Domain Containing Windows 2000 Domain Controller: Second Bullet Point Reads: Install Windows Server 2003, Enterprise Edition, on a member server in the domain and start the active directory installation wizard....  Im doing that now too see what options are available to become a member...
oBdACommented:
When you want to introduce an additional DC into a domain, as in your case, you always start out with a member server.
You install the OS, you add it to the domain. Yes, that works with even with 2008 R2.
When the new server has a later OS than the current one, you'll then have to run the adprep commands I outlined above from the later version's installation media.
Then, assuming your AD is working correctly, you can promote the new server to a domain controller parallel to the old one.
I really don't see why you'd want to go with W2k3; the link I provided in https:#a42714237 lists everything you have to do to go directly to Server 2008 R2, which is at least not hopelessly outdated yet, especially since the reason you provided is "I'm assuming 2008 and later cannot be joined as member of a 2000 DC.", which is not the case.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
John CrawfordIT AdministratorAuthor Commented:
oBdA

Thanks for being clear, Ok so during installation I DO NOT join WORKGROUP, but become a member of existing domain, right?

Then as you said, command line executions as required.

I going through this step by step, I'm mostly the "put out the fire" guy so I run cable, virtualize servers, install video securitiy, anything but I want to know and document active directory differences from 2000 all the way to 16.
oBdACommented:
Even if you "join" a workgroup during setup, you can always join it to the domain later. Domain join is not bound to the OS installation.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Installation

From novice to tech pro — start learning today.