Re: Fallback to NT4 - Clients won't talk to Domain

From: CJ (chrisj_at_illicom.net)
Date: 07/09/04 

Date: Fri, 09 Jul 2004 02:49:31 GMT

Guys, forget the registry entry, just see my solution.

It is exactly what I did when going from an AD system back to NT domains.

"Paul" <country-air@news.postalias> wrote in message
news:27ecc01c4640a$ea789c80$a501280a@phx.gbl...
> Herb - did you have that registry entry, please? Or did
> the message from MS scupper it?
>
> Paul
>
>
> >-----Original Message-----
> >"Paul" <country-air@news.postalias> wrote in message
> >news:25e6001c4627f$57765d00$a601280a@phx.gbl...
> >> We have been experimenting in the lab with the UPGRADE
> >> route for converting our NT4 domain to Active Directory.
> >> One of the reasons we were attracted to this route was
> the
> >> claimed ability (in the Migration Cookbook) to fallback
> to
> >> the original domain by removing the new W2K DCs and
> >> replacing with the stored NT4 PDC. This all works OK,
> >> except...
> >>
> >> Any WXP client which has logged in to the new AD doesn't
> >> want to play with the 'fallen'back' NT4 domain. It says
> >> that it can't find a [NT4] domain controller. Indeed,
> the
> >
> >There is a feature/setting in XP that causes it to "latch
> onto"
> >Win2000+ DCs.
> >
> >It's a registry entry to put it back -- someone will post
> it
> >today or tomorrow in this thread, but you can look it up
> on
> >the MS website through search Google with something like:
> >
> > [ site:microsoft.com XP 2000 | 2003 DC BDC | PDC
> registry]
> >
> >I don't know if that will get it to the top but it will
> likely be in
> >there somewhere.
> >
> >Oh, and it's a "feature" because this lets the news
> clients get
> >their Group Policy and full AD benefits.
> >
> >--
> >Herb Martin
> >
> >
> >"Paul" <country-air@news.postalias> wrote in message
> >news:25e6001c4627f$57765d00$a601280a@phx.gbl...
> >> We have been experimenting in the lab with the UPGRADE
> >> route for converting our NT4 domain to Active Directory.
> >> One of the reasons we were attracted to this route was
> the
> >> claimed ability (in the Migration Cookbook) to fallback
> to
> >> the original domain by removing the new W2K DCs and
> >> replacing with the stored NT4 PDC. This all works OK,
> >> except...
> >>
> >> Any WXP client which has logged in to the new AD doesn't
> >> want to play with the 'fallen'back' NT4 domain. It says
> >> that it can't find a [NT4] domain controller. Indeed,
> the
> >> client's domain name has 'automatically' changed to the
> >> name of the AD domain and also the preferred DNS server
> >> has been altered. The event log says specifically that a
> >> downgrade is being attempted, and it is necessary for
> the
> >> client to rejoin the NT4 domain.
> >>
> >> Have we missed something? The Cookbook seems quite
> >> insistent that you can fall back in this manner! Is
> there
> >> an easy way to move all the clients back to the NT4
> domain
> >> without visiting them all?
> >>
> >> Incidentally, if we did find a way to rejoin the NT4
> >> domain for all our clients, then presumably we wouldn't
> be
> >> able to re-migrate them to AD without starting from
> >> scratch, because the upgraded W2K DC would no longer
> have
> >> valid machine accounts for the clients (different SIDs)?
> >>
> >> Paul
> >
> >
> >.
> >

Relevant Pages

  • RE: Add category that stays when email is received
    ... registry entry or apply a Group Policy", but did you mean "a registry entry ... AND apply a Group Policy"? ... Control how categories are shared as users exchange e-mail messages. ... I'm trying to automatically send notification email to multiple Outlook ...
    (microsoft.public.outlook.program_vba)
  • Re: How can I disable the use of regedit and regedt32?
    ... there is no name for the registry entry that is to ... The link to the Group Policy Table is dead. ... George Hester wrote: ... Policy or Local Security or Domain security or Controller security or ...
    (microsoft.public.win2000.general)
  • Addition of registry key
    ... I was told to use regini.exe to add the registry entry. ... publish to the entire environment and there is no distinctive active ... run a regedit.exe /s command. ... since I am unable to do it as either group policy or login script. ...
    (microsoft.public.win2000.registry)
  • RE: Need to Enable TLS 1.0 Globally in IE
    ... I think you should deploy registry entry in GPO. ... Get Secure! ... I need to enable TLS 1.0 in Internet Explorer on all PC's in my domain. ... I can't find this setting anywhere in Group Policy, ...
    (microsoft.public.windows.group_policy)
  • Re: Addition of registry key
    ... I was told to use regini.exe to add the registry entry. ... publish to the entire environment and there is no distinctive active ... since I am unable to do it as either group policy or login script. ...
    (microsoft.public.win2000.registry)
Loading