hmm - I thought Jason was talking Windows 2000 and multi-domain => there is no LVR in Win2000. Neither is there a forest-mode in Windows 2000.
And certainly switching the root domain to native mode should have no impact on a NAS device in the child domain (assuming the resources are not hosted in the root - otherwise, what's the point... I'm surprised it's not native mode already). It's been ages that I've heard of any issues involved with switching a Win2000 domain to native mode (maybe it's been ages since I've done it...) - but the chances are: you won't notice any impact. Obviously testing is always best - but it's not a question that the switch to Win2000 native mode works => you'd have to have your full list of dependencies on all apps that build on AD Auth. built up in your lab to get a useful testresult. Usually impossible in larger environemnts. As such, I would rather build on ensuring that I don't do the switch at peak time, ensure that I have enough staff to check the most critical systems and have all vendor's support numbers ready. And then do the switch. /Guido -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Almeida Pinto, Jorge de Sent: Dienstag, 13. Dezember 2005 20:15 To: [email protected]; [email protected] Subject: RE: [ActiveDir] Going Native in root domain Issues with Kerberos authentication??? Are you sure? That is available in ALL modes/leves. It must have been something with new features that are introduced when the level is increased... E.g. LVR with Exchange 2000 Cheers, Jorge ________________________________ From: [EMAIL PROTECTED] on behalf of Dan Holme Sent: Tue 12/13/2005 4:56 PM To: [email protected] Subject: RE: [ActiveDir] Going Native in root domain Make sure you know your environment, particularly anything that uses AD to AUTHENTICATE. For example, a while back there was a VERY popular NAS device that "broke" when you went Native in AD: it had issues with Kerberos authentication. (BTW: no, I'm not going to mention it by name b/c I haven't had coffee yet and don't remember AND I would hope they fixed it by now) Just make sure that anything that authenticates is going to be OK with your new functional level. Check non-MS OS's and hardware and apps. That "caution" aside, you shouldn't run into too many problems, and assuming your "root" is basically empty the odds of you running into problems are low. Just research and test first, as any consultant is bound to say! Dan -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jason Benway Sent: Tuesday, December 13, 2005 8:42 AM To: [email protected] Subject: [ActiveDir] Going Native in root domain We have a flat, multi-domain 2000 AD. Does anyone see any issue if the root domain goes domain native but stays mixed mode forest? Thanks,jb -------------------------- Jason Benway [EMAIL PROTECTED] GHSP 1250 S.Beechtree Grand Haven, MI 49417 616-847-8474 Fax: 616-850-1208 Required space inevitably expands to exceed available space... List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
