So
1. Install a 2003 box 2. Run adprep /forestprep (update schema) 3. Run adprep /domainprep (update domain NC) 4. Run adprep /domainprep /gpprep (update group policy ACLs) 5. Dcpromo the 2003 box in 6. Mark it as a global catalog 7. Transfer FSMO roles 8. Repoint any clients using the old box as DNS, WINS, whatever 9. Dcpromo the 2000 box down Thanks, Brian Desmond [email protected] c - 312.731.3132 Active Directory, 4th Ed - http://www.briandesmond.com/ad4/ Microsoft MVP - https://mvp.support.microsoft.com/profile/Brian From: Erik Goldoff [mailto:[email protected]] Sent: Tuesday, July 07, 2009 8:54 AM To: NT System Admin Issues Subject: Win2003 DC on Win2000 domain Client wants to bring in two new servers ( forklift new hardware ) into their current Windows 2000 domain, but wants to upgrade Active Directory to 2003 ... two new servers will ultimately replace two existing 2000 servers which are File/Print/DC and Exchange/DC My normally cautious method would be to bring in a temp 2000 box, promote it to DC in the 2000 domain, move FSMOs to it, then demote existing DCs... upgrade OS on temp box to 2003, then promote new 2003 servers to DC, moving FSMOs to one of them. Question : Is there an unreasonable risk to promoting a 2003 server to DC on the 2000 domain with 2000 DCs in place when there is no plan ( or license ) to upgrade the OS on the 2000 boxes to 2003 ? Erik Goldoff IT Consultant Systems, Networks, & Security ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
