Re: Followup - Domain/Functional Level had been modified!

From: pbrill1 (pbrill1_at_discussions.microsoft.com)
Date: 12/28/04 

Date: Tue, 28 Dec 2004 08:05:05 -0800

Rebecca,

Thanks for the information, I do have a few more questions, however.

Of the 3 options that you referred to in your response:
1. Select interim level during Dcpromo. This option is only presented when
the PDC is upgraded into a new forest.
2. Set the forest level of an existing forest to interim, and then join the
forest during the upgrade of the PDC. The upgraded domain inherits the forest
setting.
3. After all the Windows NT 4.0 BDCs are upgraded or removed, each domain
must be transitioned to forest level and can be transitioned to Windows
Server 2003 forest mode.

#1 and #2 are best...but it does not seem as if I have that option, now that
our upgrade has been made to W2K3 (one of which is the PDC emulator).

In about 4 more weeks, we will remove the last 2 NT4 BDC's. Would it be
best to just upgrade the domain and forest levels to W2K3 Server at that
point, or do I lose something by not choosing interim mode first?

Also, when we remove the 2 NT4 BDC's later this month, every server will be
at W2K3 (except for 1 NT4 member server), and all clients are already at
W2000 or XP. Once the NT4 BDC's are removed from the network, there
shouldn't be any difficulty with upgrading to Windows 2003 Server...or are
there additional considerations to be aware of?

"Rebecca Chen [MSFT]" wrote:

> Yes, Interim mode is the best option.
>
> I suggest you raise hte foest function level to Windows Server 2003
> interim. Windows Server 2003 Active Directory permits a special forest and
> domain functional level named Windows Server 2003 interim. This functional
> level is provided for upgrades of existing Windows NT 4.0 domains where one
> or more Windows NT 4.0 backup domain controllers (BDCs) must have to
> function after the upgrade. Windows 2000 domain controllers are not
> supported in this mode.
>
> Windows Server 2003 interim can be activated in three different ways. The
> first two methods are highly recommended because security groups use linked
> value replication (LVR) after the Windows NT 4.0 domain's primary domain
> controller (PDC) has been upgraded to a Windows Server 2003 domain
> controller. The third option is sub-optimal because membership in security
> groups uses a single multi-valued attribute which may result in replication
> issues.
>
>
> Please refer to the following article, with the snippet Interim Level -
> Upgrade from a Windows NT 4.0 Domain
>
> How to raise domain and forest functional levels in Windows Server 2003
> http://support.microsoft.com/default.aspx?scid=kb;en-us;322692#5
>
> In addition, as Herb has stated, domain and forest function level cannot be
> rolled back after rasied. You'd better perform a full backup before you
> take any action.
>
> HTH!
>
> Best regards,
>
> Rebecca Chen
>
> MCSE2000 MCDBA CCNA
>
>
> Microsoft Online Partner Support
> Get Secure! - www.microsoft.com/security
>
> =====================================================
>
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
>
> =====================================================
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>

Relevant Pages

  • RE: NT4 to 2003 Migration
    ... you upgrade a Windows 2000 domain controller that resides in a Windows 2000 ... forest to Windows Server 2003 ...
    (microsoft.public.windows.server.migration)
  • Re: upgrade w2k child domain without root/forest access
    ... I will be upgrading my child domain to windows 2003. ... I have no access to the forest nor the root/forest domains. ... I have full control on my local child domain only. ... I was planning to do in place upgrade and run adprep /domain. ...
    (microsoft.public.windows.server.general)
  • Re: Upgrade windows 2000 domain to windows2003
    ... For the r2 issue as well as the upgrade itself, ... Select articles and click on upgrading your forest ... I have windows 2000 domain in native mode with two sites each site contain ... Adprep /forestprep ...
    (microsoft.public.windows.server.active_directory)
  • Re: error when upgrading 2000 Forest to 2003
    ... It's probably due to the fact that Ex2k is in your forest. ... Windows Services for UNIX 2.0 Installed ... 325379 How to Upgrade Windows 2000 Domain Controllers to Windows Server 2003 ...
    (microsoft.public.win2000.active_directory)
  • Forest functional level ugrade fails - domain level detection problem
    ... All of the domains of the forest have already been upgraded to Windows ... However, the upgrade of the forest fails, because some domains are ... listed), but other objects, in the configuration partition. ...
    (microsoft.public.windows.server.active_directory)