Re: 2003 Domain Functional Level + trusts



there should be no impact on increasing the DFL

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
<digital.evasion@xxxxxxxxx> wrote in message news:1194230282.993635.268980@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi All,
I have been looking desperately trying to find some definitive answers
to our problem, but I never find anything specific.
First, the scenario:
We are in the process of integrating 4 separate networks (their own
domain + forest etc.) into one AD.
We have (I have changed the names for security) b.local, s.local,
m.local and t.local.
b.local is the head office, and all email lives here. Each other
office has its own file/print/AD.

Secondly, What's happening:
1. we are going to redesign the entire networks to one AD. B.local is
going to be the root domain. Other domains will be consolidated as
follows: s.local & m.local go into s.b.local, t.local goes into
b.b.local. both s.b.local and b.b.local are obviously child domains of
b.local.
2. Each Office/network has an EXTERNAL, NON TRANSITIVE trust to
b.local, and b.local has an EXTERNAL NON TRANSITIVE trust to each
office/network.
3. b.local, s.local, m.local and t.local (so ALL) are running 2000
MIXED Domain Functional Level
4. There are NO 2000 servers in any forest/domain/network anymore.

Finally, what's the Question:
Before migrating migrating users, domains etc. should/can we raise the
DFL to Windows 2000 Native or Windows 2003 without breaking/destroying
the trusts?
My understanding is that EXTERNAL Trusts don't have an impact on what
version AD you run, as its external.
My Colleague's and I cannot find a problem, fault with doing this. Are
looking in the wrong spot?
In addition should/can we raise the Forest Functional Level as well?

Many many many thanks in advance.

Lukas


.



Relevant Pages

  • Re: Maximum ammount of BDCs in a single domain
    ... # Jorge de Almeida Pinto # MVP Windows Server - Directory Services ... have DCs and you have the PDC or some folks call it the PDCe for PDC ... Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.windows.server.active_directory)
  • Re: NEW DC ERROR LOGS: Please Help
    ... Microsoft MVP Windows Server - Active Directory ... > Windows cannot query for the list of Group Policy objects. ...
    (microsoft.public.win2000.active_directory)
  • Re: Cant add users from external domain to universal security groups
    ... you can't add users from one forest into a UG of another forest. ... Joe Richards Microsoft MVP Windows Server Directory Services ... However, when I attempt to add a Domain B user directy into a universal group on Domain A, Domain B isn't listed under the locations property sheet. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Error message when adding user to group
    ... One subdomain domain admins is already in the root domain enterprise ... What is the default DFL in the Domains? ... Enterprise Admin Group is a Global Group when the DFL is at windows ...
    (microsoft.public.windows.server.active_directory)
  • Re: time on client PCs
    ... People posting in the Windows 2000 Active Directory group tend to be ... Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.win2000.active_directory)

Loading