Mike Baudino wrote:
All,
We're a bit behind the times...
I've got an AD environment for our developers. The DCs are all ESX
VMs. Not all VMware hosts are yet upgraded to support Win2k3 SP1 or
R2. Some are upgraded to support SP1, none will support R2, and some
won't support either. I'm being pushed to get SP1 per security. What
I'm looking for is whether anyone has experienced any problems running
most DCs as SP1 with some still SP0 for an extended period of time
(three months -- potentially more). The DCs are not running DNS Server
nor any other service than merely running as a DC.
There should be no problem with running SP1 and DCs without SP1 for some
time in the same domain but You should be aware of few things which
changed with SP1.
For example there is change in the list of attributes which are
preserved in tombstone:
http://blogs.technet.com/efleis/archive/2005/07/12/407648.aspx
This may not affect You, but its better to know this.
Another thing is security concern regarding dynamic objects and problem
which is present in pre-SP1 systems:
http://blogs.dirteam.com/blogs/tomek/archive/2006/06/23/1175.aspx
But from my experience there are no major issues which are caused by DCs
with SP1 and without SP1 in the same domain
--
Tomasz Onyszko
http://www.w2k.pl/ - (PL)
http://blogs.dirteam.com/blogs/tomek/ - (EN)
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx
