RE: adprep /forestprep hotfix question

From: Frances [MSFT] (v-franhe_at_microsoft.com)
Date: 01/14/05


Date: Fri, 14 Jan 2005 09:55:06 GMT

Hello,
 
I believe you can run adprep /forestprep with SP4 installed.
 
Microsoft recommends that all the Windows 2000 domain controllers run the
Windows 2000 Service Pack 4 (SP4) or later operating systems. If you cannot
fully deploy Windows 2000 SP4 or later, all the Windows 2000 domain
controllers <must> have an Ntdsa.dll file whose date stamp and version is
later than June 4th, 2001 and 5.0.2195.3673.
 
Please refer to the following article for more details.
325379 How to upgrade Windows 2000 domain controllers to Windows Server 2003
http://support.microsoft.com/?id=325379
    
 
In addition, there are mainly three concerning vulnerabilities in KB 331161.
1. Schema Additions Delete Columns from the Database and Domain Controllers
Cannot Be Started
2. Inefficient Replication of Schema Changes Consumes Network Bandwidth
3. Active Directory Replication Is Delayed During the Index-Rebuilding
Process
 
In the related KB, I find these problems are corrected if you have SP4
installed.
 
Snippet: Vulnerability 1.
 
303077 SP2 Hotfixes Recommended Before Making Schema Changes in Active
http://support.microsoft.com/?id=303077

Please note the contents below:

Individual Windows 2000 domain controllers are not susceptible to the
timing sensitive deletion of Active Directory objects if Windows 2000
Service Pack 2 (SP2) is installed. Then Domain controllers, and implicitly
the forest, are protected.
 
Snippet: Vulnerability 2.

300642 Schema Modification Results in Schema Mismatch Event 1203 Message
http://support.microsoft.com/?id=300642
The problem is resolved in SP3

Snippet: Vulnerability 3.
307219 Replication Stops After Active Directory Schema Update
http://support.microsoft.com/?id=307219
 The problem is resolved in SP3
 
Regarding the part of Windows 2000 SP3 Advantages and Issues, I find most
the problems are fixed in SP4 except the following two issues:
 
324906 Cannot Start an Office Program After You Install Service Pack 3 (SP3)
http://support.microsoft.com/?id=324906
 
Some Windows 2000 SMB Redirector Hotfixes May Cause a Conflict with SP3
http://support.microsoft.com/?id=326798
 
You can decide whether to consider them or not based on your real
environment.
 
Hope it helps. Any update, let us get in touch!

Best regards,

Frances He

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



Relevant Pages

  • Re: Question about a situation with SBS 2000 and SP4
    ... Windows 2000 Service Pack 4 Network Install for IT ... I told him to do it ASP and apply the the SP4 and the SP4 rollup. ...
    (microsoft.public.backoffice.smallbiz2000)
  • Cant reinstall SP4 - file lock on "atapi.sys"
    ... A few weeks ago my Windows 2000 (SP4) installation suddenly didn't boot any more and after some unsuccesfull troubleshooting I was faced with the options of either a clean re-installation of Windows, or trying the "repair" option of the Win2k installation CD. ... terrified at the thought of also re-installing some 200 programs & apps after a clean Win2k install. ... but Service Pack Setup stopped midway through saying that the "atapi.sys" file was in use and that I should resume after closing all apps using it. ...
    (microsoft.public.de.german.win2000.sonstiges)
  • Re: W2K SP4 Hosed our PC - Need Help !!!
    ... install without IE6. ... with your assertion that Service Packs of Windows 2000 have come out to fix ... The issue in the server is a pretty esoteric thing. ... But I have told you where SP4 has the most problems. ...
    (microsoft.public.win2000.general)
  • Re: Using CHKREG.EXE to repair corrupted Registry
    ... Boy this SP4 keeps rearing its ugly head. ... Windows 2000 CD-ROM with SP4 installed. ... If you cannot boot and you cannot repair then in all likelihood it is time for a reinstall. ... get a new harddrive and install anew on that. ...
    (microsoft.public.win2000.general)
  • RE: Provide feedback to DC promotion/replacement
    ... Also, since I am installing the new DC, I wouldn't install anything ... domain controllers in the domain must be Windows Server 2003. ... Can you elaborate what the functinal level must be set to Windows Server ...
    (microsoft.public.windows.server.active_directory)