Re: NT4 BDC to Win2k3 server

From: Mike Culver (MikeCulver_at_discussions.microsoft.com)
Date: 03/18/05 

Date: Fri, 18 Mar 2005 07:01:07 -0800

hmmmm.....
Thanks but that article didn't really answer anything for me.

To be clear - I do not have AD now and I do not want to have AD after I
upgrade the BDC from NT4 svr to Win2k3 svr. I simply want to have the new
Win2k3 server be a member server in the NT4 domain. When this happens I'm
wondering what happens to all of the domain local groups that were used to
secure the file system when it was an NT4 BDC. I know the local groups will
still be int eh NT4 domain but when the server is a standalone server they
can't be used to secure the file system any longer.

Once I can get my main file servers to be win2k3 standalone servers in my
NT4 domain I can then concentrate on implementing AD.

Thanks,
MIKEC

"Don Wilwol" wrote:

> had me thinkin there for a minute......they say the mind is the first thing
> to go!! :-)
> So I looked it up, Upgrade Windows NT 4.0 BDCs,
> http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/deployguide/en-us/Default.asp?url=/resources/documentation/windowsserv/2003/all/deployguide/en-us/dssbe_upnt_huxa.asp.
> During the operating system upgrade the computer will restart three times.
> After the computer restarts for the last time, the Welcome to the Active
> Directory Installation Wizard appears.
>
> I don't think there is any way to back out of this.
>
> You can use admt to tranlate these groups. I think you will have to
> translate then to domain local groups, but you can verify this.
>
>
> --
> Hope it helps...........
>
> dw
>
> Don Wilwol
> Blog - http://spaces.msn.com/members/wilwol/
> Web - http://capital.net/~wilwol/dw.htm
> DonWilwol(REMOVE)@yahoo.com
>
> "Mike Culver" <MikeCulver@discussions.microsoft.com> wrote in message
> news:CE8E6D46-09E3-4A8D-BC5E-5C4CBD679B15@microsoft.com...
> > hmmm....I attended a Microsoft TechNet presentation on Upgrading NT4
> > Domains
> > to AD. I asked the presenter (offline) what would happen when I do this
> > and
> > he said DCPROMO would not run automatically. He also said there is a way
> > to
> > keep the local groups intact for the standalone server. Frankly I think
> > he
> > was wrong on the local group issue and now I'm wondering about the DCPROMO
> > issue. I guess a test environment is my only option to find out for sure.
> >
> > "Don Wilwol" wrote:
> >
> >> The domain local groups will remain domain local groups. You can't
> >> upgrade a
> >> BDC until the PDC is upgraded, then the BDC will become another domain
> >> controller. The only way to make this a member server is upgrade it,
> >> dcpromo
> >> will run automatically and become a DC, then you can run dcpromo again to
> >> demote it.
> >>
> >> Your only other option is a reg hack (you'll have to google it) to make
> >> the
> >> upgrade think its already a member server. I'm pretty sure you will loose
> >> the groups if you try this.
> >>
> >> --
> >> Hope it helps...........
> >>
> >> dw
> >>
> >> Don Wilwol
> >> Blog - http://spaces.msn.com/members/wilwol/
> >> Web - http://capital.net/~wilwol/dw.htm
> >> DonWilwol(REMOVE)@yahoo.com
> >>
> >> "MIKEC" <MIKEC@discussions.microsoft.com> wrote in message
> >> news:4203A18F-068F-4F0A-9D36-FADEE30B8A5D@microsoft.com...
> >> >I have an NT4 BDC file server that has extensive use of domain local
> >> >groups
> >> > to secure the file system. When I upgrade this server to Win2k3, what
> >> > happens to the file system security that was secured with domain local
> >> > groups
> >> > since the new win2k3 server is only a member server? I'm basing this
> >> > question on my experience with NT4 member servers inability to utilize
> >> > domain
> >> > local groups.
> >> >
> >> > If I can get passed this issue I can upgrade some of my servers....
> >>
> >>
> >>
>
>
>

Relevant Pages

  • windows server 2003 pop3 service
    ... Is it possible to have the Windows Server 2003 pop3 service setup to ... run in a non-domain environment on a standalone server? ... I have a server joined to a NT4 domain, but I do not want to use that ...
    (microsoft.public.windows.server.setup)
  • RE: file share migration
    ... migrate local groups from one server to another. ... You are right that the File Server Migration Wizard does not support ... MSVR-Migrator Key Benefits ...
    (microsoft.public.windows.server.migration)
  • RE: Can win9x clients connect to new 2003 domain
    ... Bob thanks for your reply and answers. ... > data on the new DC's and still access files on the NT4 domain?? ... > server and internet connection with firewall on the master domain. ...
    (microsoft.public.windows.server.migration)
  • Re: Quick Question - Whats the differance. . .
    ... > Local Groups are assigned access to resources ... > As already mentioned Server local groups can only be used to grant access ... > resources that are local to that Server, and can contain users or groups ... > where server owners/Domain Administrators are one and the same, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Exchange 2003 and NT4 trusted domain
    ... Actually one of the major reason MS went to AD is because of bandwidth. ... Windows Server. ... We were hoping to migrate the NT4 domain to Samba at some ...
    (microsoft.public.exchange.design)