Windows Forum

Ask something
Discussion Locked

Win 2k on NT4 domain (Active directory)

0 helpful
8 replies

by simon

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have an NT4 domain and I have just added a Win 2000 server to this domain (no problem), I want to set up VPN through the Win2000 server but need active directory to make it work.

My question is how do I setup the active directory on the Win 2000 server when the NT4 server is NOT an active directory server? (thats the message I get when I try to add the Win2000 server to the NT4 server as a child domain).

Any help greatly appreciated.

Simon

8 replies

by ewgny

You are going to have to set up your Win2k Server
as a seperate Forest/Domain and then set up trusts between the win2k domain and the NT Domain

by cg it

W2K server with AD has to be the PDC for the domain and operate in mixed mode. [mixed mode so that non W2K servers can become part of the W2K AD domain]. Your NT 4 DC will have to be demoted to a BDC and replicate it's data between the W2K AD PDC. The W2K AD Domain Controller can't be a Child Domain within the forest because of Active Directory. A W2K server can be a member server to a NT4 Domain, but NT servers can not run Active Directory [only W2K server]. Pain in the butt but that's how it is with Active Directory. [side note: Active Directory handles all user accounts, computer accounts, trusts between servers, trusts between domains for the domain in which it has control of.]

Maxwell Edison, Joseph Moore Anna and Opatz are the masters of W2K and probably will give you more insite on this than I.

by cg it

a clarification. The W2K AD domain controller can't be a child domain because Active Directory handles all security, permissions, accounts and trusts between child/sub domains [and specified other domains not part of the intranetwork] for the entiredomain. re: Active Directory controls the entire hierarchy of the domain scheme including the forest(s) of child domains [by way of trusts] with the W2K PDC as the top tier domain controller.

by joseph moore

Since you are still running a NT4PDC, you CANNOT have Active Directory running on any Win2K machines that are members of the NT4 domain.
NT4PDCs and Win2K AD Domain Controllers cannot co-exist in the same domain.
You will have to either 1)upgrade the NT4PDC to Win2K (which will install AD on it) or
2) like Answer 1 said, remove the Win2k server from the NT4 domain, then set it up to be a Domain Controller of its OWN DOMAIN (running DCPROMO on it and making it the root DC of its own forest).You would then set up a Trust between the NT4 domain and the Win2K domain.

hope this helps

by simon

Thank you all for your comments they have helped me, and I have managed to use VPN on the Win2k server just need to know how to look at the NT4 server from the Win2k server.

Thanks again

Simon

This discussion is closed to new replies.