4. Advice on upgrading an NT4 PDC server to a Win2k server

The no. 4 Ask the Expert question of 2002, based on page views.

I need to upgrade my Windows NT 4.0 PDC server to a Windows 2000 server, so I can set up another Win2k server as a BDC. I have two other NT 4.0 servers that also act as BDCs. My question is twofold:

  • Should I upgrade the PDC to Win2k server, or do a fresh install? (A fresh install would be a huge undertaking.)
  • And, will the NT server BDCs have any problems with authentication and replication?

    This question posed on 26 June 2002

    If you do not have to time to create a pristine environment, don't rush it. Just upgrade the PDC to Windows 2000 and Active Directory. The concept of a Windows 2000 BDC is non-existent. The Windows 2000 DCs all operate on the same level. There are specialized server roles called FSMO roles that can be assigned to the operational configuration of being a Global Catalog Server.

    While running with NT 4.0 BDCs, your AD will be running in mixed mode. You will want to move to native mode as soon as you can. This means the NT 4.0 BDCs must either be upgraded or permanently removed from the network. I would strongly suggest taking one BDC off of the network (power it down) while you perform the PDC upgrade. Should something go horribly wrong, you can bring the BDC back on the network (after shutting the Win2k PDC down) and convert your domain back to the previous NT 4.0 state.

    Keep in mind that the NT 4.0 BDCs will only be handling authentication for the NT 4.0 workstations. Any Windows 2000 Professional or Windows XP workstations will only authenticate to the Windows 2000 DCs. And while you only have one Win2k DC in the network, you are exposing yourself to a single point of failure. If the Win2k DC goes down, the Win2k workstations and XP workstations will not be able to authenticate on the domain.

    Also, once you have upgraded the PDC, directory replication will stop working. Until you upgrade the BDCs and switch to native mode, replication will not work. You can perform some manual steps to get around this. The best description of this is in an excerpt from the MCSE study guide for the 70-222 exam.

    Click here to read more of Paul Hinsberg's answers to migration questions or ask him a question.

    Editor's Note: You can sign up to have free Active Directory administration tips delivered to your inbox every Tuesday morning.

  • Dig deeper on Microsoft Windows 2000 Server Administration

    Pro+

    Features

    Enjoy the benefits of Pro+ membership, learn more and join.

    0 comments

    Oldest 

    Forgot Password?

    No problem! Submit your e-mail address below. We'll send you an email containing your password.

    Your password has been sent to:

    -ADS BY GOOGLE

    SearchServerVirtualization

    SearchCloudComputing

    SearchExchange

    SearchSQLServer

    SearchWinIT

    SearchEnterpriseDesktop

    SearchVirtualDesktop

    Close