Re: running 2003 schema on 200 dc's

Running K3 schema on 2K DCs is fine.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm


Jason Meyer wrote:

I am curious if there is a big problem with running /forestprep on a 2k domain then letting the DC's sit at 2k for awhile(ie a few months). Reason being is that I inadvertantly upgraded a 2000 member running my CA to 2k3 and its not loading the templates/giving me access denieds when I try to issue new certs. I have read that if I update the schema the changes will fix my CA issue. I guess i could go back to 2k on the CA but I would rather not(pain in the ass), but I do have a back up of the CA db before I did the upgrade/migration.

Yeah I know, I should have read up more about migrating CAs....learned my lesson.

Thanks for the advice.

Jason
.

Relevant Pages

  • Re: Restoring Active Directory
    ... You always want to be careful with companies wanting to extend your schema, ... you will be able to defunct the old bad attribs. ... >>What exactly is the vendor saying? ... >>Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.win2000.active_directory)
  • Re: Different Order in GAL
    ... There must be a way to modify the schema, that the displayname will ... Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.exchange2000.active.directory.integration)
  • Re: Where to find default user account security settings?
    ... The Schema and the extended-rights container are the best places to get the info. ... Joe Richards Microsoft MVP Windows Server Directory Services ... If so it is a combination of the defaultSD from the schema definition combined with the effective inherited permissions in the container or OU that the user is created in and whether or not the userid is considered an "admin id" by the OS and thereby impacted by the adminsdholder process. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Restoring Active Directory
    ... and Schema and the like that'll benefit me in the future so all is not lost. ... > should allow you to apply your Exchange schema mods (test in a test lab forest ... > What exactly is the vendor saying? ... > Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.win2000.active_directory)
  • Re: Force Password change (Delegate control)
    ... It is selling like hotcakes and I am getting a ton of positive feedback. ... Joe Richards Microsoft MVP Windows Server Directory Services ... Author of O'Reilly Active Directory Third Edition ...
    (microsoft.public.win2000.active_directory)
Loading