I was truly surprised myself to have missed Todd's original question - I just noticed it when you started answering to it.
Been too busy lately to go through all of the Active Dir posts - this awsome list has become very active. And besides that, I know you don't have kids and thus have so much spare time on your hand for answering every single question out there ;-) Ok - now that I know that you seem to be drinking while typing some of the answers, I'll have to do more quality checking again ;-)) Back to the topic: another quick note on inplace-upgrading 2000 - 2003 DCs or other machines: this is a VERY different experience than going from NT4 to 2000. Since the file-structure between 2000/2003 basically stayed the same (other than the name of the OS directory, which changed from WinNT to Windows), you won't really notice a negative impact on a machine which was inplace-upgraded to one, which was installed from scratch. I've also always had a gut-feeling to preferr new-installs over an inplace-upgrade (definitely for NT4 to 2000), and likely people would still feel better when re-installing a 2003 OS instead of in-place uprading... But especially for DCs, the two scenarios can well be combined, as we did at HP: - we first in-place upgraded all 2000 DCs to 2003 to move to 2003 forest functional level as quick as possible - then with more time to spare, we backed-up the systemstate of the 2003 DCs locally, DC-Promoed them down, and re-installed them with 2003 from scratch - at last re-promoted them to DCs using the IFM (install from media) option with the previously backed up systemstate => this got a us to 2003 very easily and had least impact on the WAN durint the re-installation /Guido -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Samstag, 10. Juli 2004 00:06 To: 'joe'; [EMAIL PROTECTED] Subject: RE: [ActiveDir] 2003 DC Promo Question.... And BTW, where were all you smart guys earlier when Todd was in need of an answer and you could have responded before I made myself look like a boob. Oh yeah, good to see you posting again Guido. Oh and Dean, you have been quiet lately too, but good to see you are still watching for my dumb-a** posts so you can thump me right proper. :o) joe -----Original Message----- From: joe [mailto:[EMAIL PROTECTED] Sent: Friday, July 09, 2004 6:04 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] 2003 DC Promo Question.... Yeah, I looked around, I can't find where I might have read that and it was a long time ago. I found a doc that I could have interpreted that way had I been out drinking with Guido and Dean, but not sober. So either I was drunk or the doc disappeared, though I swear I had heard this separately as well as I recall being, WTF! But then wasn't too worried as I do not do OS upgrades unless it is absolutely unavoidable which is almost never (NT4 to 2K was an exception, at least for the PDC...) Todd, I am curious what you saw now as I had it in my mind it was a possibility. Now it seems it insn't so what happened? joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier, Guido Sent: Friday, July 09, 2004 5:40 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] 2003 DC Promo Question.... I can confirm that you have to tranfer the role manually - 2003 won't try to do this by itself. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean Wells Sent: Freitag, 9. Juli 2004 16:32 To: Send - AD mailing list Subject: RE: [ActiveDir] 2003 DC Promo Question.... Hmmm ... re: "If you do an OS Upgrade from 2K to K3 on a Domain Controller I believe it will pull the PDC functionality to it"; nothing I've witnessed would seem to back that up. In the event I'm just a bad witness or someone with the retention of a Gold Fish and they do indeed do that, it's just plain wrong, wrong, wrong. PDC physical placement is important in certain scenarios, to arbitrarily move the role during an upgrade process could have significant security implications. -- Dean Wells MSEtechnology * Tel: +1 (954) 501-4307 * Email: [EMAIL PROTECTED] http://msetechnology.com -----Original Message----- From: joe [mailto:[EMAIL PROTECTED] Sent: Thursday, July 08, 2004 9:49 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] 2003 DC Promo Question.... Hey Todd. If you do an OS Upgrade from 2K to K3 on a Domain Controller I believe it will pull the PDC functionality to it. If you DCPROMO in a fresh K3 it will not pull the role from what I have seen with the domains I have been involved with. Personally though, I am not into upgrades of OSes, much rather wipe and reload. A brilliant friend of mine once came up with a method for us to do that remotely that we used for NT4 to 2K. We would shoot the load down to the machine, then fire up a script that would look at some config info and store it, then boot into Win98 and slam the load down on the machine and reconfigure it when it finished rebuilding. While you should move those roles I don't believe there is an absolute requirement EXCEPT for the Domain Naming role which may be needed for setting up DNS App partitions. The PDC role should be moved just so that it can create the new security principals that K3 has that are already ACLed on your directory (look at the dsacls output of your domain after the domain prep and you will see unresolved SIDS), however I do not believe there is a requirement to keep it there or in fact do it at all. I am sure if I am wrong ~Eric will chime in or someone else will say something though I am surprised I see no responses to this post and it was sent a couple of weeks ago... joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Thursday, June 24, 2004 9:58 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] 2003 DC Promo Question.... Greetings, I have a Windows 2000 forest that has been Forest Prepped and had the root domain of the forest domain prepped as well as another domain tree root domain prepped. I plan to follow the recommendations outlined in the article below in order to upgrade to 2003. My plan is to transfer FSMO roles to 2000 machines, and DCPROMO down existing DC's. Rebuild them as 2003 Servers then DCPROMO the box. According to my experience and what is outlined below in the article. The first DC's that are joined to the domain need to be servers that hold PDC and DNC FSMO roles. My experience was that when I tried the method outlined above, the first New 2003 DC joined to the root forest took on the PDC emulator role automatically. (I did this back in November 2003) http://support.microsoft.com/default.aspx?scid=kb;EN-US;325379 I want to verify this behavior because there is a movement in my group to want to deploy new 2003 DC's before upgrading the FSMO role holders. One person on my team says that the wording in the Q article isn't clear enough, that you must upgrade the FSMO role holders. So I bring this to the AD guru list to help me verify my perceptions, and to help answer any remaining questions. Thanks in advance, Todd List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
