Re: How to Fallback NT Domain incase of fail

correct and because of that you would need to rejoin all wxp/w2k/w2k3 that
have started using kerberos.

do it in steps...

first....
use the NT4Emulator key so that all w2k3 DCs emulate NT4. at this point you
w2k3 dcs and nt4 dcs....
test authentication by:
(1) shutting down NT4 DCs and using only w2k3 dcs
(2) shutting down w2k3 DCs and using only NT4 dcs

if things are not OK remove all w2k3 DCs and promote one NT4 DC to PDC.
(don't forget you also have a NT4 BDC "in the closed". you can use that one
the upgrade to AD screws your complete NT4 domain)


if everything is OK start by the NT4Emulator key and at that moment the NT4
DCs will not be used after kerberos is being used. because of that you can
start removing the NT4 dcs.

in my experience I have NEVER seen this go wrong. however, make sure you
create a procedure to do this and make sure you test it!

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
"New User" <user@xxxxxxx> wrote in message
news:unvkIk5bGHA.1276@xxxxxxxxxxxxxxxxxxxxxxx
Jorge Silva wrote:
Hi
If my memory serves me correctly the Windows 2000 machine can be taken
offline and the Windows NT 4.0 BDC can be promoted to a PDC in the NT
domain.


But the Win2K & WinXP have change the Full name to the AD's name. I can't
login with original NT Domain!


.

Relevant Pages

  • Re: How to Fallback NT Domain incase of fail
    ... In fact after the NT4 Upgrade ... authentication with Kerberos can't authenticate with the "old" BDC. ... you w2k3 dcs and nt4 dcs.... ...
    (microsoft.public.win2000.active_directory)
  • Re: Any issue?
    ... however, before introducing the w2k3 dcs, did you fix the fix? ... network with mixed windows 2000 and windows 2003 R2 domain controllers? ...
    (microsoft.public.windows.server.active_directory)
  • Re: SMB/CIFS after a forestprep/domainprep
    ... As soon as yuou introduce w2k3 DCs, ... Server/Exchange 2000 Server, I must inventory all Windows 95, MAC, Unix ... I'm leaving the existing Windows 2000 Servers in place. ... Does the domainprep/forestprep somehow change the behavior of my existing ...
    (microsoft.public.windows.server.active_directory)
  • Re: win2k3 & win2k ad integration?
    ... > Can anyone tell me if there's are any issues w/ having a win2k3 dc and ... for how to add W2K3 DCs to a W2K domain. ... Windows: General MVP ...
    (microsoft.public.win2000.active_directory)
Loading