I manage the LAN of 6 schools of 31 sites in our system. System has approx. 130 NT4 servers systemwide & 5000+ workstations 95-XPpro. Each school has a PDC,1 or 2 BDC & member servers. We run 10/100 network to Cisco switch/router, T1’s to Bellsouth Cloud and T3 to Central office. DNS & Wins on central office server. A 2 way trust relationship between Central PDC & each school’s domain. UserNames are just entered in one long Sam database; there are no groups, policies, etc.Security if null. The NE thinks hidden shares are secure and the firewall protects everything else. Our network engineer is being forced to upgrade to 2003 server, but won’t consider an Active Directory STructure. I had pushed for an Enterprise server @ Central Office w/Active Directory, Containers for each school/site location and a domain controller @each school. But was told we didn’t have enough bandwidth (which I feel is erroneous) Last week the engineer took a 2003 server into a school to replace a PDC. He pretty much set it up like the NT4 (each school its own domain, Local DHCP (specific ip addresses are assigned @ each location) But pulls DNS& Wins across WAN). when he took out the NT4 PDC, I am not sure what he did with the BDC. I know he is having trouble seeing the server from the CO, but other than that I haven’t heard any complaints. He plans to do this same install at all locations. I am not in a position to argue w/the engineer but feel this is a disaster waiting to happen. I had hoped when we moved to 2003 things would get better, but now I am worried. What consequences can I expect as more 2003 servers are introduced like this. My schools are already complaining their XP machines are sluggish. This behavior coincides with the install of the 2003 on our WAN. Is that coincidence or a consequence? How would you address a situation like this. ANY AND ALL YOUR INPUT IS GREATLY APPRECIATED.