Re: Raising the Domain and Forest Mode

Hello Phani,

Pleasse describe more detailed the problems you have, including error messages and event viewer entries.

See also this article because of different security settings between NT4 and 2003 trust.
http://www.pbbergs.com/windows/articles/firewall_trust.html

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Thanks a Lot Meinolf.

On the other hand we have trust creation issues between our child
domain (Windows Server 2003 Domain Mode) and a Windows NT domain, do
you think the forest trust level has anything to do with this issue?

"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb6623ca18cba1e303cc470a@xxxxxxxxxxxxxxxxxxxxxxx

Hello Phani,

No, you can raise the levels without effecting the trust.

What you can think about is using forest trust's instead of two-way.
Here are all options described, go to "Forest Trusts":
http://technet.microsoft.com/en-us/library/cc773178.aspx#w2k3tr_trust
_how_slpn

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
Our current environment has Empty Root and one Child Domain. All
DC's running on W2k3. The functional levels of the domain/forest are
as under:

Forest Functional Level:- Windows 2000
Forest Root Domain Functional Level:- Windows 2000 Mixed
Child Domain:- Windows Server 2003 domain functional level
The child domain has a two way trust relationship with another
windows
2003 domain. I would like to know if raise the forest root
domain/forest functional levels to Windows 2003 is going to break
anything.
What are the considerations that need to be taken into account
before performing a raise, as this is a irreversible action we want
to be doubly sure.

Regards



.

Relevant Pages

  • Re: Re: Re: Re: Gradually migrate from Win2000 to Win2003 AD
    ... > Thanks for the info. Windows 2003 is quite new to me so I will have to ... > NTFS is far more effective and adding share permissions only ... >> This is approximated by Forest level trusts. ... >> trust between the two forests to be transitive to all ...
    (microsoft.public.win2000.active_directory)
  • Re: AzMan with 2000 mixed DC
    ... One of the reasons W2k3 domain and forest funtional levels ... the roles has map to back over the trust. ... Microsoft MVP (Windows Security) ... > We are deploying an application which uses AzMan, with the store in AD, ...
    (microsoft.public.security)
  • Re: Raising the Domain and Forest Mode
    ... On the other hand we have trust creation issues between our child domain (Windows Server 2003 Domain Mode) and a Windows NT domain, do you think the forest trust level has anything to do with this issue? ... The functional levels of the domain/forest are as ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain Functional Levels and Trusts
    ... > a Windows 2000 Mixed Mode domain? ... >>> I need to build a trust between two domains in separate forests. ... >>> Domain Functional Level. ... >> a pair of domains which are not in the same forest. ...
    (microsoft.public.windows.server.active_directory)
  • Re: AD trust RPC
    ... I have a two way transistive trust between two 2003 native mode ... DC1 is a DC in my forest, T1server2 is a DC in the other ... The session setup to the Windows NT or Windows 2000 Domain Controller ...
    (microsoft.public.windows.server.active_directory)
Loading