Link to home
Start Free TrialLog in
Avatar of John Crawford
John CrawfordFlag for United States of America

asked on

Adding (Not upgrade 2000DC) 2003 Server is existing 2000 domain.

I have a small windows 2000 domain controller and want to install 2003 server (new Virtual Box) to eventually replace old VM. I do not (as manuals explain) want to upgrade 2000 DC, can't I just add the 2003 server to the existing 2000 domain, run both in parallel, then promote 2003 and decommission 2000 DC?

Options I see:
1. Join an existing domain (2003DC joining existing 2000 domain)
2. Create a new Child Domain, new Domain Tree, new forest (This does not look like what I want)
Avatar of arnold
arnold
Flag of United States of America image

yes. join, and it will be just another DC in the environment.
Avatar of oBdA
oBdA

* "2003DC joining existing 2000 domain": no, you can not join a DC to another domain.
* You can install the 2003 and join it as member server to the 2000 AD.
* If you want to promote the 2003 to a DC, you have to prepare the AD for the 2003 DC before being able to promote.
adprep.exe /forestprep
adprep.exe /domainprep

Open in new window

That said, and you probably know that this has to be asked: why do you want  to install a 15 year old OS that's long out of support? Even 2008R2 will be out of extended support in a little over 1 year. Mainstream support of Server 2012R2 has already ended.
If the person is still running a windows 2000 based AD, 2003 is an update that might meet the vendor requirements ....... of supported platform.
there are no updates available for 2003 unless the SPs were previously obtained, or exist in a WSUS server ....... If this is a rapid transition from 2000 through to 2012.
2012 can be added to a 2003 AD domain. do not recall whether 2008 can be added to a 2000....
Avatar of John Crawford

ASKER

oBdA

Yes ok, that was my intent, for the fresh install 2003 server to be a member, then run in parallels and promot after moving databases.
oBdA

To answer, I'm assuming 2008 and later cannot be joined as member of a 2000 DC.
arnold

I have no intention of trying to upgrade a virtual machine or even bare metal for that matter. What I want is to join 2003 (or 2008 12 etc) as a member in parallel. Then move my databases to cluster or NAS, then promote 2003 to valid DC status so it can replicate with 2000, then I can get ride of the 2000 DC's on the network.
Not speaking from personal experience here, but Microsoft says it's possible even for Server 2008 R2:
Prepare a Windows 2000 or Windows Server 2003 Domain for a Domain Controller That Runs Windows Server 2008 or Windows Server 2008 R2
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc754670(v%3dws.10)
I am assuming the adprep command line procedures update active directory database files on the Master Controller 2000DC (meaning insert 2003 cd or DVD into master controller and execute adprep commands) so as to be compatible with 2003 server.
No, it updates the AD Schema to support the newer versions.
Gecko odds,  a me,ber server can be added to 2000 2003, 2008, 2012,2016

The issue deals with based on the AD/Forest version and which OS version can function as a DC,
Often the DCs can be two versions out, 2000 2093,2008
2003, 2008,2012.

I stil do not understand what you are after, a cluster requires at least two .......


The DBs might not need to be touched for DC server ...
As I said in prior comment, I have a 2000DC I want to retire, I do not want to upgrade the virtual machine. What I want is to see if I can add a 2003 server as a Member, then move accounting databases off the 2000 DC and put on another server, NAS, cluster whatever, replicate at least once maybe twice, then promote the 2003 server to Master DC (I think this is the vernacular) then decommission the 2000DC.

The manual in the box and Microsoft articles keep pushing to upgrade the 2000 DC,  If this technology is designed to be fault tolerant and allow other member DC, then I should be able to do it this way.
You are transitioning from One to he other,
One way us to upgrade in place the existing which you seem to interpret any comment as a suggestion to do just that.
The other is to create a new VM running Windows (2003,2008) if you install 2008, you need to add the file services for Windows 2003 (ntfrs which is needed for sysvol/netlogon replication)
Add it as another dc. Allow the replication to complete, dcdiag, repadmin once the new has all the info, and the replication is complete, you can transfer all the roles from the old DC, to the new DC. You would need to make sure all existing member servers point their DNS records to the new server as prinary.
At this point, the old DC can be retired (first, power off the VM) to make sure the environment operates ......
You can then decom(demote the old DC to a member server)

You can now elevate the new ad/forest level to the highest level of that os 2003/2008 which ever is higher.
Transition the sysvol from ntfrs to dfs-r for future simpler transition.
arnold

Thanks, actually you suggested upgrading in place twice! Getting Started Windows Server 2003 Enterprise Manual:  Chapters 3 - Getting ready for an upgrade; AND Chapter 4 -  Running Setup for an Upgrade, you have pages and pages of text telling, instructing to upgrade a in-place system. Exactly what I don't need.

Some Good News: I do see in chapter 3 "Preparing for Upgrades in a Domain Containing Windows 2000 Domain Controller: Second Bullet Point Reads: Install Windows Server 2003, Enterprise Edition, on a member server in the domain and start the active directory installation wizard....  Im doing that now too see what options are available to become a member...
ASKER CERTIFIED SOLUTION
Avatar of oBdA
oBdA

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
oBdA

Thanks for being clear, Ok so during installation I DO NOT join WORKGROUP, but become a member of existing domain, right?

Then as you said, command line executions as required.

I going through this step by step, I'm mostly the "put out the fire" guy so I run cable, virtualize servers, install video securitiy, anything but I want to know and document active directory differences from 2000 all the way to 16.
Even if you "join" a workgroup during setup, you can always join it to the domain later. Domain join is not bound to the OS installation.