RE: Active Directory Install

From: Mark Whitby (Whitby_at_discussions.microsoft.com)
Date: 03/08/05


Date: Tue, 8 Mar 2005 05:37:06 -0800


Hi Joe,

If you're creating a new domain controller for a new domain, then the
existing local accounts will be moved into your new domain. If your
standalone server is promoted into an existing domain, its local accounts
will be lost.

If this is a standalone server, couldn't you just use local policy to
configure the security settings you require? The benefit of GPO's is the
ability to have policies applied consistently across multiple machines in
your domain. If you've only got one server, perhaps a local policy would
serve better than upgrading the server to be a domain controller.

Regards,
Mark.

"Joe_Ng" wrote:

> I was wondering if there were any issues with installing
> AD on a 2003 server running as a standalone TS. The users
> are set up as local users only, but now they are wanting
> to set up GPOs to beef up security.
>
> Basically, I want to know if the existing user accounts
> are moved into the AD tree. Can someone confirm this?
>
> I found a nice checklist here:
> http://www.petri.co.il/how_to_install_active_directory_on_
> windows_2003.htm
>
> Anything else to note?
>
> Thanks,
> JN
>



Relevant Pages

  • Re: Adding additional domain controller on member server
    ... network is not huge, about 125 users so we have only used 1 thus far. ... It asks whether this is a new or additional domain controller. ... Check to see what local accounts exist - anything created for services, ... because running dcpromo on an Exchange server will break it. ...
    (microsoft.public.windows.server.setup)
  • Re: Adding additional domain controller on member server
    ... I'm taking your advice and purchasing a new server. ... network is not huge, about 125 users so we have only used 1 thus far. ... It asks whether this is a new or additional domain controller. ... Check to see what local accounts exist - anything created for services, ...
    (microsoft.public.windows.server.setup)
  • RE: how do i add SBS2003 to an existing DNS
    ... controller to a member server or standalone server. ... if the server is the only domain controller in an existing domain when you ... do a demotion of the domain controller to a member or standalone server. ...
    (microsoft.public.windows.server.sbs)
  • Re: Adding additional domain controller on member server
    ... on the server to chance breaking it. ... It asks whether this is a new or additional domain controller. ... exclamation sign that states "All local accounts will be deleted ... Frankly, if this were my network, I'd rather leave this box running ...
    (microsoft.public.windows.server.setup)
  • Re: Multiple domain controllers running Windows Server 2003 SBS
    ... We have a 2003SBS standalone server ... Windows server that is not a domain controller, nor part of any domain - ... What is your exact network configuration? ...
    (microsoft.public.windows.server.sbs)