Domain Controller / Backup Controller Question

[C:Amie]

Hi,

I have a 2003 PDC. We had a power outage.. or 3 today and it's wreaked havock with the disks in the thing. Because of the downtime I realise that a backup is needed. I've a old box with 2000 Server SP4 on it that's a internal IIS box.

My question is can I use the 2000 SP4 box as a backup domain controller for the 2003 Active Directory, Domain and the like?

Many thanks

[cspm2003]

Since windows 2000 there are no more PDC and BDC, there are only DC. You should be able to set them both up as DCs. I think you simply have to setup the AD on the 2000 server to be another domain controller in a excisting domain, specify the domain of the 2003 server computer, and follow through the AD wizzard

[cspm2003]

also, do you want to make the 2000 server only a member server to handle logins to the network, or completey replicate everything from the 2k3 server to it, so if one goes out, the other one would still be up?

[C:Amie]

Thanks for replying, and thanks for the info.

I think that really all it needs to be is a facility to allow users to log-on. It doesn't need to serve out remote profiles or anything like that. Just security settings.

Cheers

[icuhackn]

Good Answers cspm2003, I totally agree!

[icuhackn]

My only concern with this is the fact that the 2003 Domain Controller now uses AD2.0 whereas Windows 2000 uses the old Active Directory. Is it backward compatible? I am not positive on that....

[trance]

You can upgrade the AD in 2000 so that it can coexist in a 2003 forest.

[C:Amie]

icuhackn, that's wat my concern is, I don't know if they can co-exist.

Trance, how does one go about doing that if you wouldn't mind explaining it.

Is it just part of the process if 2000 finds its self connecting to a 2003 server, 2003 will push the AD 2.0 to it and perform any necessary upgrades?

[cspm2003]

why dont you do this: grab two computers, install server 2k3 on the one with the AD installed, and then install windows 2000 server on the other one. Then configure the AD on the windows 2000 computer, and see if you can join it to as a DC to the windows server 2003 domain. I would do this anyways before touching your working network just to make sure everything goes smothely since you've never done it before

[C:Amie]

It's a nice idea, and I would if I could, but I don't have the server licenses or boxes to do it.

This is my home network, not a corp.

Thanks

[+BudMan MVC]

how about a UPS for starters :) This would remove any issues of disk corruption due to hard down on loss of power. And for the life of me, I can not think why anyone would pay for 2k3 server or 2k server for that matter in a home setup.

I can understand using them as a learning tool, etc.. But then if being used as learning, you could try whatever you wanted - and not really have to worry about backup now would you ;)

But really what use does a domain have in a home network? None that would be worth the cost for sure. If you want a central user database, roaming profiles, etc.. - why not just setup samba as a PDC? FREE!

[C:Amie]

I'm a Microsoft Partner and amongst other subscriptians with them I get Windows Servers and client OS's for personal use. However, the numbers aren't infinate and I've not been able to renew my subscriptions this year for various reason that are of no concern here ;)

If I wanted a Linux PDC, I'd have installed a Linux PDC and would probably be in the Linux thread asking something as equally riviting :p

The Active Directory Security model is much better than stand alone Windows security, and my front door and LAN Hub's tend to offer a revolving door policy for anyone passing through. Security's good!

.. humm... probably should get a lock for the front door though :whistle:

:shifty:

[Chris123NT]

icuhackn, that's wat my concern is, I don't know if they can co-exist.

Trance, how does one go about doing that if you wouldn't mind explaining it.

Is it just part of the process if 2000 finds its self connecting to a 2003 server, 2003 will push the AD 2.0 to it and perform any necessary upgrades?

Pop a windows server 2003 cd into the 2k server and do the following:

Open command prompt

Get to CDROM:\I386

and type adprep /forestprep

and then adprep /domainprep

Hope this helps :D

[Aaron P]

The second DC running Windows 2000 will be able to exist as DC in the 2003 domain only if you haven't raised domain functional level to Windows 2003.

By default Active Directory will operate in Mixed Mode which will support DCs running Windows NT 4, Windows 2000 and Windows 2003.

Windows 2000 Functional Level or Windows 2000 Native Mode will support DCs running Windows 2000 and Windows 2003

Windows 2003 Functional Level or Windows 2003 Native Mode will support DCs running Windows 2003 only.

To check your domain level open Active Directory Users and Computers, right click the domain and choose Raise Domain Functional Level.

[C:Amie]

Thanks guys, that's great. I appreciate your assistance.

The Domain is running in Windows 2000 Native Mode

The PC is currently just a domain member. I'm assuming that I should run the AD install wizard first off, reboot and then run

adprep /forestprep

adprep /domainprep

I've had a read over a few MSKB articles, that was the impression I got anyway.

Cheers :beer:

[Aaron P]

You'll have to run ADPREP before promoting the 2003 server to a DC.