
Microsoft
®
Windows Server
™
2003 White Paper
Windows NT 4.0 Server Upgrade Guide 61
are placed in the Built-in folder. Note that these special Container objects are not organizational
units. They cannot be moved, renamed, or deleted.
Existing Windows NT Server 4.0 and earlier groups are located in different folders depending on
the nature of the group. Windows NT Server 4.0 and earlier built-in local groups (such as
Administrators and Server Operators) are located in the Built-in folder. Windows NT Server 4.0
and earlier global groups (such as Domain Admins) and any user-created local and global groups
are located in the Users folder.
The upgraded PDC can synchronize security principal changes among the remaining Windows
NT Server 4.0 and earlier BDCs. It is recognized as the domain master by servers running
Windows NT Server 4.0 and earlier BDCs.
If a domain controller running Windows Server 2003 goes offline or otherwise becomes
unavailable, and no other Windows Server 2003 domain controllers exist in the domain, a
Windows NT BDC can be promoted to a PDC to fill the role for the offline Windows Server 2003
domain controller.
The upgraded domain controller is a fully functional member of the forest. The new domain is
added to the domain and site structure, and all domain controllers receive the notification that a
new domain has joined the forest.
Upgrading Any Remaining BDCs
After you have upgraded the Windows NT Server 4.0 and earlier PDC, you can continue to
upgrade all remaining BDCs. During the upgrade process, you may want to remove one BDC
from the network as a precaution in case a problem develops. This BDC stores a copy of your
current domain database.
If any problems arise during the upgrade, you can remove all domain controllers running Windows
from the production environment, and then bring the BDC back into your network and make it the
new PDC. This new PDC then replicates its data throughout the domain so that the domain is
returned to its previous state.
The only drawback to this method is that all changes that were made while the isolated BDC was
offline are lost. To minimize this loss, you can periodically turn the offline BDC on and off—when
the domain is in a stable state—during the upgrade process to update its copy of the directory.
When upgrading Windows NT Server 4.0 and earlier domains, only one domain controller running
Windows Server 2003 can create security principals (users, groups, and computer accounts).
This single domain controller is configured as a PDC emulator master. The PDC emulator master
emulates a Windows NT Server 4.0 and earlier PDC. For more information about the PDC
emulator role, see “Operations Master Roles” in the Windows Server 2003 on-screen Help and
Support Center.
Converting Groups
When you upgrade a PDC running Windows NT Server 4.0 to a server running Windows Server
2003, existing Windows NT groups are converted. Specifically, when the Windows Server 2003
Kommentare zu diesen Handbüchern