Getting Ready for an Upgrade

PART 1 OF 4

This topic applies to the Microsoft® Windows Server™ 2003 operating system, Standard Edition, and, except where noted, the x64-based version of Windows Server 2003, Standard Edition.

In This Topic

Upgrades Compared to New Installations

System Requirements and Hardware Compatibility

Important Files to Review

Upgrades in a Domain Containing Windows 2000 Domain Controllers

Upgrades in a Windows NT 4.0 Domain

This topic can help you plan for an upgrade to Microsoft® Windows Server™ 2003, Standard Edition, in a network with one to five servers and 100 or fewer clients. The information in Getting Started is designed to help with the upgrade or installation of such a network. For help with planning the upgrade or installation of a larger number of servers, see the Windows Server 2003 Deployment Kit. You can view the Windows Deployment and Resource Kits on the Web at: http://go.microsoft.com/fwlink/?LinkId=29883

For technical information and resources needed to evaluate, deploy, and administer the Windows server operating systems, see the Windows Server TechCenter on the Web at: http://go.microsoft.com/fwlink/?LinkId=28944

For detailed information about how to run Setup, see "Running Setup for an Upgrade: Windows Server 2003, Standard Edition,"on your Setup CD.

If you want to plan for a new installation, see "Getting Ready for a New Installation: Windows Server 2003, Standard Edition," on your Setup CD.

Note:
This release of Windows Server 2003, Standard Edition, includes Windows Server 2003 Service Pack 1 (SP1). When you install this release of Windows Server 2003, Standard Edition, SP1 is automatically installed at the same time. If you uninstall Windows Server 2003, Standard Edition with SP1, SP1 is automatically uninstalled as well. In addition, you cannot uninstall SP1 only.

After completing the upgrade of the first server, you can get detailed instructions about how to use products in the Windows Server 2003 family by opening Help and Support Center. To open Help and Support Center, click Start, and then click Help and Support.

Upgrades Compared to New Installations

This section compares upgrading to performing a new installation, to help you confirm your decision to upgrade. Upgrading is either replacing Windows NT® 4.0 (with Service Pack 5 or later) with a product in the Windows Server 2003 family, or replacing Windows 2000 with a product in the Windows Server 2003 family. Installing, in contrast with upgrading, means completely removing the previous operating system, or installing a product in the Windows Server 2003 family on a disk or disk partition with no previous operating system.

The following lists describe items to consider when deciding between an upgrade and a new installation:

Points to consider for an upgrade:

With an upgrade, configuration is simpler, and your existing users, settings, groups, rights, and permissions are retained.

With an upgrade, you do not need to re-install files and applications. As with any major changes to the hard disk, however, it is recommended that you back up the disk before beginning an upgrade.

Before planning to perform an upgrade, see "Operating Systems from Which You Can Upgrade" later in this topic.

If you are upgrading in a domain that includes domain controllers running Windows 2000, be sure to read "Upgrades in a Domain Containing Windows 2000 Domain Controllers" later in this topic.

If you are upgrading in a domain where all domain controllers run Windows NT 4.0, be sure to read "Upgrades in a Windows NT 4.0 Domain" later in this topic.

If you want to upgrade and then use the same applications as before, be sure to review applications information in Relnotes.htm (in the \Docs folder on the Setup CD). Also, for the most recent information on compatible applications for products in the Windows Server 2003 family, see the software compatibility information in the Windows Catalog at: http://go.microsoft.com/fwlink/?LinkId=37604

Points to consider for a new installation:

If you reformat your hard disk and then perform a new installation, the efficiency of your disk might improve (compared to not reformatting it). Reformatting also gives you the opportunity to modify the size or number of disk partitions, to make them match your requirements more closely.

If you want to practice careful configuration management, for example, for a server where high availability is important, you might want to perform a new installation on that server instead of an upgrade. This is especially true on servers on which the operating system has been upgraded several times in the past.

It is possible to install Windows Server 2003, Standard Edition, and also allow the computer to sometimes run another operating system. Setting up the computer this way, however, presents complexities because of file system issues. For more information, see "Deciding Whether a Computer Will Contain More Than One Operating System" in "Getting Ready for a New Installation: Windows Server 2003, Standard Edition," on your Setup CD.

Note:
If you used Windows NT 4.0 to create a volume set, mirror set, stripe set, or stripe set with parity, and you want to run Setup for Windows Server 2003, Standard Edition, on that computer, you must prepare the disk set first. For details, see "Working with Volume, Mirror, or Stripe Sets or Stripe Sets with Parity" later in this topic.

Operating Systems from Which You Can Upgrade

If you upgrade, Setup automatically installs Windows Server 2003, Standard Edition, into the same folder as the currently installed operating system. You can upgrade to Windows Server 2003, Standard Edition, from the following versions of Windows:

  • Windows NT Server 4.0 with Service Pack 5 or later

  • Windows NT Server 4.0, Terminal Server Edition, with Service Pack 5 or later

  • Windows 2000 Server

Note:
You cannot upgrade from an earlier version of a Windows server operating system to an Itanium-based or x64-based version of a Windows server operating system.

Remote Storage is not included on Windows Server 2003, Standard Edition. If you are using Windows 2000 Server with Remote Storage, you cannot upgrade to Windows Server 2003, Standard Edition. You can, however, upgrade to Windows Server 2003, Enterprise Edition, because Remote Storage is included in this product.

If you have Windows 2000 Server with the Remote Storage component installed, but you are not using Remote Storage, you can remove the component (through Add/Remove Programs in Control Panel) and then upgrade to Windows Server 2003, Standard Edition.

If you have Windows NT 4.0 Server Enterprise Edition, you can upgrade to Windows Server 2003, Enterprise Edition, but not Windows Server 2003, Standard Edition. Before upgrading from Windows NT 4.0, you must apply Service Pack 5 or later.

Note:
If you have a version of Windows NT earlier than 4.0, you cannot upgrade directly to a product in the Windows Server 2003 family. You must first upgrade to Windows NT 4.0 and apply Service Pack 5 before upgrading to a product in the Windows Server 2003 family.

Back to Top

System Requirements and Hardware Compatibility

Before upgrading your server, make sure that you have chosen hardware that supports Windows Server 2003, Standard Edition.

System Requirements

To ensure adequate performance, make sure that computers on which you upgrade to Windows Server 2003, Standard Edition, meet the following requirements:

  • One or more processors with a recommended minimum speed of 550 MHz (minimum supported speed is 133 MHz). A maximum of four processors per computer is supported. Processors from the Intel Pentium/Celeron family, AMD K6/Athlon/Duron family, or compatible processors are recommended.

  • 256 megabytes (MB) of RAM recommended minimum (128 MB minimum supported; 4 gigabytes (GB) maximum).

  • A hard disk partition or volume with enough free space to accommodate the setup process. To ensure that you have flexibility in your later use of the operating system, it is recommended that you allow considerably more space than the minimum required for running Setup, which is approximately 1.25 GB to 2 GB. The larger amount of space is required if you are running Setup across a network instead of from a CD-ROM, or if you are upgrading on a FAT or FAT32 partition (NTFS is the recommended file system).

  • In addition, a domain controller upgrade from Windows NT 4.0 could require much more space than other upgrades, because the existing user accounts database can expand by as much as a factor of ten during the upgrade, as Active Directory® functionality is added.

    Note:
    The setup process requires the free disk space described in the previous paragraphs. After Setup is finished, actual hard disk space used for the operating system will be more than the free space required for Setup, because of space needed for the paging file, for any optional components you install, and (on domain controllers) for user accounts and other Active Directory® information. The usual size for the paging file is 1.5 times the size of the RAM. For information about the paging file, optional components, user accounts, and information stored in Active Directory, see Help and Support Center. To open Help and Support Center, after completing Setup, click Start, and then click Help and Support.

  • VGA or higher-resolution monitor (Super VGA 800x600 or higher recommended), keyboard, and (optionally) a mouse or other pointing device.

  • As an alternative, for operation without a monitor or keyboard, you can choose a remote diagnostic and support processor that is designed for products in the Windows Server 2003 family. For details, see the hardware compatibility information in the Windows Catalog at: http://go.microsoft.com/fwlink/?LinkId=37824

For CD-ROM installation:
  • A CD-ROM or DVD drive.

For network installation:
  • One or more network adapters and related cables that are designed for products in the Windows Server 2003 family. For details, see the hardware compatibility information in the Windows Catalog at: http://go.microsoft.com/fwlink/?LinkId=37824

  • A server from which to offer network access for the Setup files.

For additional hardware-based functionality:
  • Appropriate hardware for the functionality you require. For example, if you require sound, you must have a compatible sound card with speakers or headphones, and if you plan to support network clients, the servers and clients must have appropriate network adapters and cables. For details about your hardware, see the hardware compatibility information in the Windows Catalog at: http://go.microsoft.com/fwlink/?LinkId=37824

Hardware Compatibility

One of the most important steps to take before upgrading your server is to confirm that your hardware is compatible with products in the Windows Server 2003 family. You can do this by running a preupgrade compatibility check from the Setup CD or by checking the hardware compatibility information at the Windows Catalog Web site. Also, as part of confirming hardware compatibility, check to see that you have obtained updated hardware device drivers and an updated system BIOS.

Regardless of whether you run a preupgrade compatibility check, Setup checks hardware and software compatibility at the beginning of an upgrade and displays a report if there are incompatibilities.

Running a preupgrade compatibility check from the Setup CD

You can run a hardware and software compatibility check from the Setup CD. The compatibility check does not require you to actually begin an upgrade. To run the check, insert the Setup CD in the CD-ROM drive and, when a display appears, follow the prompts for checking system compatibility. You will be offered the option to download the latest Setup files (through Dynamic Update) when you run the check. If you have Internet connectivity, it is recommended that you allow the download.

For more information about downloading the latest Setup files, see "Using Dynamic Update for Updated Drivers and Other Setup Files" later in this topic.

Another way to run the compatibility check is to insert the Setup CD in the CD-ROM drive, open a command prompt, and type:

d:\i386\winnt32 /checkupgradeonly

where d represents the CD-ROM drive.

Checking hardware and software compatibility information on the Microsoft Web site

Another way to confirm that your hardware and software are designed for products in the Windows Server 2003 family is to check the hardware and software compatibility information in the Windows Catalog at: http://go.microsoft.com/fwlink/?LinkId=37823

Note that one type of hardware no longer supported is the microchannel bus.

Checking drivers and system BIOS

Check that you have obtained updated drivers for your hardware devices and that you have the latest system BIOS. The device manufacturers can help you obtain these items. For information about the ACPI standard for the BIOS, see "Understanding ACPI BIOS" later in this topic.

Finally, if you have devices that do not use Plug and Play, or you are aware that your Plug and Play devices are not implemented exactly to the standards, consider taking a device inventory of the hardware devices in your computer. For more information, see the next section, "Taking an Inventory of Devices That Do Not Use Plug and Play."

Taking an Inventory of Devices That Do Not Use Plug and Play

This section describes steps you can take if the devices in your computer do not use Plug and Play technology. For important information about hardware compatibility (including the compatibility of devices), be sure to read "System Requirements" and "Hardware Compatibility" earlier in this topic. For specific information about using a mass storage controller (such as a SCSI, RAID, or Fibre Channel adapter) with a driver that was supplied by the manufacturer, see the next section, "Mass Storage Drivers and the Setup Process."

Products in the Windows Server 2003 family include Plug and Play technology so that devices (for example, video and network adapters) can be automatically recognized by the operating system, configuration conflicts are avoided, and you do not have to specify each device’s settings by hand. However, if you have devices that do not use Plug and Play, or you are aware that your Plug and Play devices are not implemented exactly to the standards, you might want to take steps to avoid device configuration conflicts. This section describes steps you can take, if you choose, to understand your device configuration before running Setup.

To take an inventory of your devices, use the existing operating system to obtain the current settings, such as memory address and interrupt request (IRQ), used with your devices. For example, with Windows NT 4.0, you can use Control Panel to view settings (on the Start menu, point to Settings, click Control Panel, and then double-click icons such as Network and Ports). You might also choose to view system BIOS information. To do this, watch the screen while starting the computer, and then press the appropriate key when prompted.

At the beginning of an upgrade, the Setup program automatically takes a device inventory as well. For devices that do not use Plug and Play, or that are not implemented exactly to Plug and Play standards, taking your own inventory helps prevent the following difficulties:

  • If two or more adapters share IRQ settings or memory addresses, the Setup program might not be able to resolve the conflict. To prevent this, you can take one of two approaches.

    You can remove one of the adapters before running Setup and re-install it afterward. For information about installing and configuring adapters and other hardware devices, see Help and Support Center. To open Help and Support Center, after completing Setup, click Start, and then click Help and Support.

    As an alternative, you can modify one adapter’s IRQ settings and memory addresses before running Setup, so that each adapter’s settings are unique.

  • If adapters do not respond in a standard way to the attempts by Setup to detect or enumerate them, Setup might receive indecipherable or inaccurate information. In this case, you might need to remove these devices before running Setup, and re-install and configure them afterward. For information about installing and configuring adapters and other hardware devices, see Help and Support Center. To open Help and Support Center, after completing Setup, click Start, and then click Help and Support.

The following table lists the kinds of information to gather if you have devices that do not use Plug and Play, and you decide to take a device inventory before starting Setup.

Adapter Information to gather

Video

Adapter or chip set type and how many video adapters

Network

IRQ, I/O address, Direct Memory Address (DMA) if used, connector type (for example, BNC or twisted pair), and bus type

SCSI controller

Adapter model or chip set, IRQ, and bus type

Mouse

Mouse type and port (COM1, COM2, or PS/2) or USB

I/O port

IRQ, I/O address, and DMA (if used) for each I/O port

Sound adapter

IRQ, I/O address, and DMA

Universal serial bus (USB)

Which devices and hubs are attached

PC card

Which adapters are inserted and in which slots

Plug and Play

Whether enabled or disabled in BIOS

BIOS settings

BIOS revision and date

External modem

COM port connections (COM1, COM2, and so on)

Internal modem

COM port connections; for nonstandard configurations, IRQ and I/0 address

Advanced Configuration and Power Interface (ACPI); Power Options

Enabled or disabled; current setting

PCI

Which PCI adapters are inserted and in which slots

Mass Storage Drivers and the Setup Process

If you have a mass storage controller (such as a SCSI, RAID, or Fibre Channel adapter) for your hard disk, confirm that the controller is designed for products in the Windows Server 2003 family by checking the hardware and software compatibility information in the Windows Catalog at: http://go.microsoft.com/fwlink/?LinkId=37823

If your controller is compatible, but you are aware that the manufacturer has supplied a separate driver file for use with products in the Windows Server 2003 family, obtain the file (on a floppy disk) before you begin Setup. During the early part of Setup, a line at the bottom of the screen will prompt you to press F6. Further prompts will guide you in supplying the driver file to Setup so that it can gain access to the mass storage controller.

If you are not sure whether you must obtain a separate driver file from the manufacturer of your mass storage controller, you can try running Setup. If the controller is not supported by the driver files on the Setup CD, and therefore requires a driver file that is supplied by the hardware manufacturer, Setup stops and displays a message saying that no disk devices can be found, or it displays an incomplete list of controllers. After you obtain the necessary driver file, restart Setup, and press F6 when you are prompted.

Using a Custom Hardware Abstraction Layer (HAL) File

If you have a custom Hardware Abstraction Layer (HAL) file supplied by your computer manufacturer, before you begin Setup, locate the floppy disk or other medium containing the file. During the early part of Setup, a line at the bottom of the screen will prompt you to press F6: at this time press F5 (not F6). After you press F5, follow the prompts to include your HAL file in the Setup process.

Understanding ACPI BIOS

The basic input/output system (BIOS) is a set of software through which the operating system (or Setup) communicates with the computer’s hardware devices. The Advanced Configuration and Power Interface (ACPI) is the current standard for the way the BIOS works. Products in the Windows Server 2003 family support not only ACPI-compliant BIOS versions, but also some BIOS versions based on older advanced power management (APM) and Plug and Play designs.

Some ACPI-based BIOS versions are not compliant with the standard. The more recent the version of an ACPI BIOS, the more likely that it is compliant. An ACPI-based BIOS that is not compliant with the ACPI standard might not support workable communication between the operating system (or Setup) and your hardware. If workable communication is not supported, Setup stops and displays instructions for contacting your hardware manufacturer and taking other steps to solve the problem. If this happens, follow the instructions provided.

To learn more about the ACPI compliance of your BIOS:

  • For information about your BIOS version, before running Setup, restart the computer and watch the text on the screen. Pay particular attention to blocks of text containing the words "BIOS" or "ACPI BIOS."

  • For information about BIOS versions for your hardware, check your hardware documentation and contact your hardware manufacturer.

Using Dynamic Update for Updated Drivers and Other Setup Files

If you have a working Internet connection on the computer on which you run Setup, you can choose Dynamic Update during Setup and obtain the most up-to-date Setup files, including drivers and other files. Whenever an important update is made to any crucial Setup file, that update is made available through Dynamic Update functionality built into the Windows Update Web site. Some of the updated files will be replacements (for example, an updated driver or updated Setup file) and some will be additions (for example, a driver not available at the time that the Setup CD was created). It is recommended that you use Dynamic Update when running Setup.

Dynamic Update has been carefully designed so that it is reliable and easy to use:

  • The files on the Dynamic Update section of the Windows Update Web site have been carefully tested and selected. Only files that are important in ensuring that Setup runs well are made available through Dynamic Update. Files with minor updates that will not significantly affect Setup are not part of Dynamic Update.

  • Because Dynamic Update downloads only the files that are required for your computer, the Dynamic Update software briefly examines your computer hardware. No personal information is collected, and no information is saved. The only purpose is to select appropriate drivers for your hardware configuration. This keeps the download as short as possible and ensures that only necessary drivers are downloaded to your hard disk.

  • You can use Dynamic Update when running a preupgrade compatibility check from the product CD, or when running Setup itself. Either way, you obtain the most up-to-date files for running Setup. For information about running the compatibility check, see "Hardware Compatibility" earlier in this topic.

  • You can use Dynamic Update with unattended Setup. Preparing for this requires several steps. For a brief description of unattended Setup, see the "Planning for Unattended Setup" section in "Running Setup for an Upgrade: Windows Server 2003, Standard Edition." For details about how to use Dynamic Update with unattended Setup (also called automated installation), see "Automating and Customizing Installations" in the Windows Server 2003 Deployment Kit.

The Windows Update Web site offers a variety of updates that you can use after completing Setup. To learn more, go to: http://go.microsoft.com/fwlink/?LinkId=284

Back to Top

Important Files to Review

At some point in your planning process, before you run Setup, familiarize yourself with the Relnotes.htm file found in the \Docs folder on the CD for Windows Server 2003, Standard Edition.

This file contains important usage information about hardware, networking, applications, and printing. Also familiarize yourself with information about hardware compatibility for products in the Windows Server 2003 family. For more information, see "Hardware Compatibility" earlier in this topic.

For the most recent information on compatible applications for products in the Windows Server 2003 family, see the software compatibility information in the Windows Catalog at: http://go.microsoft.com/fwlink/?LinkId=37604

Back to Top

Upgrades in a Domain Containing Windows 2000 Domain Controllers

If you are upgrading servers in a domain containing Windows 2000 domain controllers, there are a few points to keep in mind. The following points are the most important:

  • The first step in planning the upgrade of a particular server is to check the compatibility of the hardware with products in the Windows Server 2003 family. For more information, see "Hardware Compatibility" earlier in this topic.

  • Before you upgrade the first domain controller in a domain where one or more domain controllers run Windows 2000, or add a domain controller running a product in the Windows Server 2003 family, you must prepare the domain (and the forest in which it is located) using a simple tool on the Setup CD for Windows Server 2003, Standard Edition. For information, see "Preparing for Upgrades in a Domain Containing Windows 2000 Domain Controllers" later in this topic.

  • Before preparing the domain (and the forest in which it is located), it is recommended that you apply Service Pack 2 or later to all domain controllers running Windows 2000.

  • If you have Internet Information Services (IIS) 5.0 installed on a server, when you upgrade the operating system, IIS is upgraded to IIS 6.0. However, for application compatibility, IIS runs in IIS 5.0 isolation mode after the upgrade. For more information about IIS isolation modes, see the IIS 6.0 Help.

  • The Internet Explorer Enhanced Security Configuration is enabled by default when you upgrade. The security settings in this configuration can help make your computer more secure by limiting its exposure to malicious Web sites. Therefore, with this enhanced level of security, you might find that some Web sites do not display correctly in Internet Explorer when you are browsing Internet and intranet Web sites. Also, you might be prompted to enter your credentials when accessing network resources, such as files in Universal Naming Convention (UNC) shared folders. You can easily change the enhanced security settings. For more information, see Help and Support Center (after completing Setup, click Start, and then click Help and Support).

  • After upgrading the first server, you can read topics in Help and Support Center about the features that are most useful to you in products in the Windows Server 2003 family.

One concept to read about is domain and forest functional levels, which are levels of Active Directory functionality related to the mix of operating system versions on your domain controllers. As you complete domain controller upgrades and reduce the number of different operating system versions running on them, you can adjust the domain and forest functional levels appropriately.

To view Help and Support Center on a server running Windows Server 2003, after completing Setup, click Start, and then click Help and Support.

If you have servers running Windows NT, also review the following points:

  • Before running Setup, it is recommended that you review the file systems and partitions that exist on the server. You must have at least one NTFS partition on domain controllers. It is recommended that you use NTFS on all partitions on all the servers in the domain, because any FAT or FAT32 partition lacks many security features. For example, on FAT or FAT32 partitions, a shared folder can be protected only by the permissions set on that shared folder, not on individual files, and there is no software protection against local access to the partition. For more information, see "Reformatting or Converting a Partition to Use NTFS" in "Getting Ready for a New Installation: Windows Server 2003, Standard Edition," on your Setup CD.

  • If some of your domain controllers run Windows 2000 and some run Windows NT, it is recommended that you upgrade the Windows NT  domain controllers as soon as is practical, to reduce the number of version differences between computers, simplify management and troubleshooting, and strengthen security.

  • Before you begin an upgrade from Windows NT 4.0, you must apply Service Pack 5 or later.

  • If you have servers or client computers that run Windows NT 3.51, it is recommended that you install or upgrade to a newer operating system on all these computers, or retire them from operation. If you have more than one domain, you must upgrade domain controllers running Windows NT 3.51 for reliable logon validation. In any case, upgrading or retiring computers running Windows NT 3.51 strengthens security and reduces the number of version differences between computers, simplifying management and troubleshooting.

After the domain and forest are prepared, there are two stages in the upgrade of a domain controller. First you run Setup to upgrade the operating system and then, when Setup is complete, you run the Active Directory Installation Wizard (which appears on the screen the first time you log on).

Preparing for Upgrades in a Domain Containing Windows 2000 Domain Controllers

Before beginning the first domain controller upgrade in a domain where one or more domain controllers run Windows 2000, you must first prepare the domain and the forest in which it is located. After preparing the domain, you can begin the domain upgrade through either of the following approaches:

  • Upgrade an existing domain controller to a product in the Windows Server 2003 family. (Be sure to check hardware compatibility first, as described in "Hardware Compatibility" earlier in this topic.)

    If you attempt to upgrade the first domain controller and you have not yet prepared the domain and the forest, Setup stops and a pop-up provides instructions.

  • Install Windows Server 2003, Standard Edition, on a member server in the domain, and start the Active Directory Installation Wizard to change the member server into a domain controller.

    If you install Windows Server 2003, Standard Edition, on a member server in the domain and start the Active Directory Installation Wizard, but you have not yet prepared the domain and the forest, the wizard stops and a pop-up provides instructions.

For additional background information about this type of domain upgrade, see the previous section, "Upgrades in a Domain Containing Windows 2000 Domain Controllers."

To prepare the domain and forest before upgrading a domain containing Windows 2000 domain controllers
  1. Before carrying out this procedure, it is recommended that you apply Service Pack 2 or later to all domain controllers running Windows 2000.

  2. Locate the server that is the schema master and the server that is the infrastructure master (they might be the same server).

    In a network of two to five servers (a network within the size of those discussed in this manual), the schema master is usually the server on which you first installed or upgraded to Windows 2000. For information about identifying the schema master or the infrastructure master, search Windows 2000 Help for the topics called "Identify the schema master" and "Identify the infrastructure master." To view Windows 2000 Help, click Start and then click Help. You can also view Windows 2000 Help at: http://go.microsoft.com/fwlink/?LinkId=5197

  3. Back up the schema master.

    You can back up other servers as well, as an appropriate part of preparing for upgrading, but be sure to back up the schema master just before taking the next step.

  4. Disconnect the schema master from the network and do not reestablish the connection until step 9 in this procedure.

  5. On the schema master, while Windows 2000 is running, insert the Setup CD for Windows Server 2003, Standard Edition, in the CD-ROM drive.

  6. Open a command prompt, change to the CD-ROM drive, and change to the \i386 folder on the CD.

  7. On the schema master, at the command prompt, type:

    adprep /forestprep

    Note:
    To perform this step, you must be a member of the Enterprise Admins group and the Schema Admins group in Active Directory, or you must have been delegated the appropriate authority. As a security best practice, consider using Run as. Run as is a secondary logon method that you can use to start commands or programs using a different security context. For example, you can log on as a member of the Users group and, without logging off, run a command as a member of the Enterprise Admins group. To find more information in Windows 2000 about Run as, on a server running Windows 2000, click Start, click Help, click the Search tab, and then search for runas.

  8. After the preceding command has finished on the schema master, confirm that the preparation of the forest was successful. Steps you can take to do this include:

    • Confirm that no error messages have appeared.

    • Run any domain controller diagnostic tools that are available, for example, Dcdiag.exe, one of the tools available from the \Support\Tools folder on the Setup CD. Keep in mind that replication errors will appear while the domain controller is disconnected from the network.

    • Open Event Viewer and check the system log for errors or unexpected events.

  9. Evaluate the information you gathered in the previous step and choose accordingly:

    • If adprep /forestprep ran without errors, reconnect the schema master to the network and continue with the next step of this procedure.

    • If adprep /forestprep ran but error messages provided instructions for additional steps to take, follow the instructions and then return to the confirmation process described in the previous step.

    • If adprep /forestprep did not run successfully, or diagnostic tools such as Dcdiag.exe revealed a significant problem, restore the schema master from backup and investigate the corrective steps necessary so that adprep /forestprep can be run successfully.

  10. If the schema master is a different computer from the infrastructure master, wait for the changes made by adprep /forestprep to replicate from the schema master to the infrastructure master. Wait at least fifteen minutes, but allow longer (half a day or a day) if the schema and infrastructure masters are not at the same site. If you try to perform the domain preparation on the infrastructure master before the changes have replicated, Adprep will provide an error message to notify you that more time is needed.

  11. On the infrastructure master, while Windows 2000 is running, insert the Setup CD for Windows Server 2003, Standard Edition, in the CD-ROM drive.

  12. Open a command prompt, change to the CD-ROM drive, and change to the \i386 folder on the CD.

  13. On the infrastructure master, type:

    adprep /domainprep

    Note:
    To perform this step, you must be a member of the Domain Admins group or the Enterprise Admins group in Active Directory, or you must have been delegated the appropriate authority. As a security best practice, consider using Run as. Run as is described in the previous note in this section.

  14. After the preceding command has finished on the infrastructure master, confirm that the preparation of the domain was successful. Steps you can take to do this include:

    • Confirm that no error messages have appeared.

    • Run any domain controller diagnostic tools that are available.

    • Open Event Viewer and check the system log for errors or unexpected events.

  15. Evaluate the information you gathered in the previous step and choose accordingly:

    • If adprep /domainprep ran without errors, continue with the next step of this procedure.

    • If adprep /domainprep ran but error messages provided instructions for additional steps to take, follow the instructions and then return to the confirmation process described in the previous step.

  16. Wait for the changes made by adprep /domainprep to replicate from the infrastructure master to other domain controllers. Wait at least fifteen minutes, but allow longer (half a day or a day) if you have a domain controller in a remote site. If you begin to upgrade one of the other domain controllers before the changes have replicated, a pop-up message will notify you that more time is needed.

After you complete this procedure, you can leave your domain controllers running Windows 2000 for an indefinite length of time, or you can begin the domain controller upgrade immediately.

Note:
For information about upgrading multiple domains, see the Windows Server 2003 Deployment Kit.

Back to Top

Upgrades in a Windows NT 4.0 Domain

The sections that follow provide information about upgrading servers in a Windows NT 4.0 domain, that is, a domain where all domain controllers run Windows NT 4.0. The guidelines provided are for a network with one to five servers and 100 or fewer clients (the size of network discussed in this manual). For information about upgrading servers in a domain where one or more domain controllers run Windows 2000, see "Upgrades in a Domain Containing Windows 2000 Domain Controllers" earlier in this topic.

The following list describes the sections about upgrading servers in a Windows NT 4.0 domain:

  • For an overview of the upgrading process, see "Stages in the Process of Upgrading Servers in a Windows NT 4.0 Domain" later in this topic.

  • For information about initial preparations such as checking hardware compatibility and reviewing the size of partitions on server hard disks, see "Basic Preparations for the Upgrade of Servers in a Windows NT Domain" later in this topic.

  • For more information about planning steps that help you tailor the upgrade to your specific situation, see the following sections later in this topic:

    • "Planning Server Roles and the Order of Server Upgrades from Windows NT"

    • "Features Available with the Upgrade of Any Server in a Windows NT Domain"

    • "Features Available with the First Domain Controller Upgrade in a Windows NT Domain"

    • "Planning DNS for the Upgrade of Domain Controllers Running Windows NT 4.0"

  • For more information about the final preparations to make just before beginning an upgrade, and guidelines about choices to make during the upgrade of domain controllers, see "Performing Backups and Carrying out Upgrades of Domain Controllers Running Windows NT 4.0" later in this topic.

Other Sources of Information

For additional information, see the following sources:

  • For conceptual information and procedures for using Active Directory, see the Active Directory topics in Help and Support Center.

    To view these topics on a server running Windows Server 2003, after completing Setup, click Start, and then click Help and Support.

  • For information about deployments and upgrades in multiple domains or in domains larger than five servers, see the Windows Server 2003 Deployment Kit. You can view the Windows Deployment and Resource Kits on the Web at: http://go.microsoft.com/fwlink/?LinkId=29883

Stages in the Process of Upgrading Servers in a Windows NT 4.0 Domain

There are three stages to the process of upgrading servers in a domain where all the domain controllers run Windows NT 4.0:

Basic preparations   There are a small number of basic preparations you must carry out before upgrading servers to a product in the Windows Server 2003 family, such as confirming hardware compatibility and reviewing the partitioning of the disks on the servers. For more information, see "Basic Preparations for the Upgrade of Servers in a Windows NT Domain" later in this topic.

Planning server roles and the order in which to upgrade servers   Planning server roles and the order in which to upgrade servers involves understanding the server roles available, as well as deciding when to upgrade domain controllers in relation to member servers:

  • The server roles available for servers running Windows NT are slightly different than for servers running Windows Server 2003. Also, in contrast with servers running Windows NT, you can change the role of a server running Windows Server 2003 without reinstalling the operating system. For more information, see "Planning Server Roles and the Order of Server Upgrades from Windows NT" later in this topic.

  • If the first Windows NT server you upgrade is a member server, many features become available immediately. For information about reasons for upgrading a particular member server early in the process, see "Features Available with the Upgrade of Any Server in a Windows NT Domain" later in this topic.

  • When you upgrade the primary domain controller, many Active Directory features become available (in addition to all the other features in the Windows Server 2003 family). For information about how these features can simplify administration, see "Features Available with the First Domain Controller Upgrade in a Windows NT Domain" later in this topic.

    However, the upgrade to Active Directory also involves some advance planning. For information about the planning necessary before upgrading to Active Directory, see "Planning DNS for the Upgrade of Domain Controllers Running Windows NT 4.0" later in this topic.

Important:
When you begin the upgrade of domain controllers running Windows NT 4.0, you must upgrade the primary domain controller first.

Performing backups and carrying out the upgrade process   There are a few preparations to make just before beginning the upgrades, such as ensuring that you have applied Service Pack 5 or later, and performing backups:

  • For information about the preparations to make just before beginning the upgrade, see "Applying the Service Pack, Performing Backups, and Other Preparations" later in this topic.

  • For information about choices to make during the upgrade of the primary domain controller, see "Running the Active Directory Installation Wizard After Upgrading the Primary Domain Controller" later in this topic.

  • For information about Active Directory, see "Learning About Active Directory After the First Server is Upgraded" later in this topic.

  • For guidelines regarding further upgrades, see "Completing Further Upgrades from Windows NT 4.0" later in this topic.

Basic Preparations for the Upgrade of Servers in a Windows NT Domain

There are a small number of basic preparations you must carry out to lay the groundwork for upgrading servers in a domain where all the domain controllers run Windows NT 4.0. For information about how these preparations fit into the overall process of the upgrade, see "Stages in the Process of Upgrading Servers in a Windows NT 4.0 Domain" earlier in this topic.

Important:
If you have servers or client computers that run Windows NT 3.51, it is recommended that you install or upgrade to a newer operating system on all these computers, or retire them from operation. If you have more than one domain, you must upgrade domain controllers running Windows NT 3.51 for reliable logon validation. In any case, upgrading or retiring computers running Windows NT 3.51 strengthens security and reduces the number of version differences between computers, simplifying management and troubleshooting.

Compatibility check   Check to see whether the applications and hardware on your systems are compatible with products in the Windows Server 2003 family, and then update or replace them as necessary. For important details about how to do this, see "Hardware Compatibility" and "Important Files to Review" earlier in this topic.

Review partition sizes, especially on domain controllers   Review the partitions on the servers to make sure there is plenty of free space available for the Windows Server operating system to run. It is especially important to allow plenty of free space on domain controllers, because the existing user accounts database can expand by as much as a factor of ten when Active Directory functionality is added. For information about the disk requirements for the operating system, see "System Requirements" earlier in this topic.

Review file systems on server partitions   You must have at least one NTFS partition on domain controllers. It is recommended that you use NTFS on all partitions on all the servers in the domain, because any FAT or FAT32 partition lacks many security features. For example, on FAT or FAT32 partitions, a shared folder can be protected only by the permissions set on the share, not on individual files, and there is no software protection against local access to the partition. For more information, see "Choosing a File System for the Installation Partition" and "Reformatting or Converting a Partition to Use NTFS" in "Getting Ready for a New Installation: Windows Server 2003, Standard Edition," on the product CD.

Service pack   Obtain Service Pack 5 or later, because it is necessary for the upgrade.

Mirror sets or other disk sets   If you used Windows NT 4.0 to create a volume set, mirror set, stripe set, or stripe set with parity, and you want to run Setup for Windows Server 2003, Standard Edition, on that computer, you must prepare the disk set first. For details, see "Working with Volume, Mirror, or Stripe Sets or Stripe Sets with Parity" later in this topic.

Working with Volume, Mirror, or Stripe Sets or Stripe Sets with Parity

With the disk management technologies in Windows NT 4.0, you could create volume sets, mirror sets, stripe sets, or stripe sets with parity, each with specific capabilities and limitations. By using the dynamic disk technology introduced with Windows 2000, you can use similar technologies, with the added flexibility of being able to extend disk volumes without repartitioning or reformatting.

This transition from the technologies used in Windows NT 4.0 means that you must make certain choices before running Setup for Windows Server 2003, Standard Edition. Any volume sets, mirror sets, stripe sets, or stripe sets with parity that you created with Windows NT 4.0 are not supported in Windows Server 2003, Standard Edition, although they were supported to a limited extent in Windows 2000.

If you used Windows NT 4.0 to create a volume set, mirror set, stripe set, or stripe set with parity, and you want to run Setup for Windows Server 2003, Standard Edition, on that computer, you must choose one of the following methods.

For a mirror set, break the mirror

If you are running Windows NT 4.0 on a computer that has a mirror set and you want to run Setup for Windows Server 2003, Standard Edition, on that computer, first back up the data (as a safeguard — the data will not be erased) and then break the mirror. Ensure that you have applied Service Pack 5 or later, required before running Setup for Windows Server 2003, Standard Edition. Then run Setup.

For a volume set, stripe set, or stripe set with parity, back up the data and delete the set

If you are running Windows NT 4.0 on a computer that has a volume set, stripe set, or stripe set with parity, and you want to run Setup for Windows Server 2003, Standard Edition, on that computer, first back up the data. Next, delete the set (which will delete the data). Ensure that you have applied Service Pack 5 or later, required before running Setup for Windows Server 2003, Standard Edition. Then run Setup.

After running Setup for Windows Server 2003, Standard Edition, you can make the disk dynamic, restore backed-up data as necessary, and make use of the volume options shown in the table later in this section. To open Help and Support Center, after completing Setup, click Start, and then click Help and Support.

If necessary, use the Ftonline support tool

The preceding methods are the recommended methods for preparing to run Setup for Windows Server 2003, Standard Edition, on a computer that contains a volume set, mirror set, stripe set, or stripe set with parity created with Windows NT 4.0. However, if you do not use these methods and you must access one of these sets after running Setup for Windows Server 2003, Standard Edition, you can use the Ftonline tool. The Ftonline tool is part of the Windows Server 2003 family Support Tools. To open Help and Support Center, after completing Setup, click Start, and then click Help and Support.

Types of Multidisk Volumes on Dynamic Disks

The disk sets described in the previous section have different names in the Windows Server 2003 family than they had in Windows NT 4.0:

Windows NT 4.0 name Windows Server 2003 family name

Volume set

Spanned volume on a dynamic disk

Mirror set

Mirrored volume on a dynamic disk

Stripe set

Striped volume on a dynamic disk

Stripe set with parity

RAID-5 volume on a dynamic disk

Planning Server Roles and the Order of Server Upgrades from Windows NT

This section provides a list of basic guidelines to use when planning server roles and the order of server upgrades in a domain where all the domain controllers run Windows NT 4.0. For information about how this planning fits into the overall process of the upgrade, see "Stages in the Process of Upgrading Servers in a Windows NT 4.0 Domain" earlier in this topic.

Use the following guidelines when planning server roles and the order of server upgrades from Windows NT:

  • Familiarize yourself with the slight differences between the naming of server roles for servers running Windows NT as compared to servers running Windows Server 2003:

    • In Windows NT, there are two kinds of domain controllers, the primary domain controller, which is limited to one per domain and contains a read-write database, and backup domain controller, which is not limited in number and contains a read-only database.

    • For domain controllers running Windows Server 2003, there is only one kind of domain controller, without a "primary" or "backup" designation. All domain controllers contain matching copies of the user accounts and other Active Directory data in a given domain, and provide read-write access to that data.

    • In addition to domain controllers, the possible roles for either operating system include member server, which belongs to a domain but does not contain a copy of the Active Directory data, and stand-alone server, which belongs to a workgroup instead of a domain.

  • Note that in contrast with Windows NT, you can change the role of a server without rerunning Setup. However, as a general practice, it is best to plan the roles ahead of time and change them only as necessary.

  • As was true with Windows NT, a domain must have at least one domain controller, but it is recommended that a domain have multiple domain controllers for resilience in the handling of logon requests and directory updates.

  • If the features you need most are not Active Directory features, you can focus on upgrading member servers first. For information about reasons for upgrading a particular member server early in the process, see "Features Available with the Upgrade of Any Server in a Windows NT Domain" later in this topic.

  • If the features you need most are Active Directory features, focus on upgrading domain controllers first, and carry out the advance planning that is necessary for this part of the upgrade.

    Important:
    When you begin the upgrade of domain controllers running Windows NT 4.0, you must upgrade the primary domain controller first. For information about the features that come with Active Directory, see "Features Available with the First Domain Controller Upgrade in a Windows NT Domain" later in this topic. For information about the planning necessary before upgrading to Active Directory, see "Planning DNS for the Upgrade of Domain Controllers Running Windows NT 4.0" later in this topic.

  • When you begin upgrading domain controllers, if you have a remote access server that is a member server, it is recommended that you upgrade it before the last domain controller is upgraded. Such a server is dependent on domain controllers for user information, and therefore should not be "left behind" when domain controllers are upgraded. As an alternative, you can weaken the security permissions in Active Directory so that the remote access server running Windows NT can read user attributes from the domain controllers running products in the Windows Server 2003 family. For more information, see the Windows Server 2003 Deployment Kit.

Features Available with the Upgrade of Any Server in a Windows NT Domain

If you are interested in the features in the following list, you might want to focus on upgrading the member servers in your Windows NT 4.0 domain. For information about reasons to upgrade the domain controllers, see "Features Available with the First Domain Controller Upgrade in a Windows NT Domain" later in this topic.

  • Management tools:

    • Microsoft Management Console

    • Plug and Play

    • Device Manager

    • Add Hardware Wizard (in Control Panel)

    • Support for universal serial bus

    • Enhanced Backup utility

  • File system support: The version of NTFS in the Windows Server 2003 family includes support for disk quotas, the ability to defragment directory structures, and compressed network I/O.

  • Application services: Win32 Driver Model, DirectX 7.0, and Windows Script Host.

  • Printer protocol support: Device and protocol support allowing choices from more than 2,500 different printers. Other printing enhancements are included; for example, Internet Printing Protocol support, which allows users to print directly to a URL over an intranet or the Internet.

  • Scalability and availability: Improved symmetric multiprocessor support as compared to Windows NT.

  • Security: Encrypting File System.

Features Available with the First Domain Controller Upgrade in a Windows NT Domain

If you are interested in the features in the following list, all of which are features of Active Directory, focus on upgrading the primary domain controller, as opposed to member servers. (The first domain controller that you upgrade must be the primary domain controller. It is recommended that you also upgrade backup domain controllers.) For information about the DNS planning necessary before beginning the upgrade of domain controllers running Windows NT, see "Planning DNS for the Upgrade of Domain Controllers Running Windows NT 4.0" later in this topic.

For information about reasons to upgrade member servers, see "Features Available with the Upgrade of Any Server in a Windows NT Domain" earlier in this topic.

Note:
When a domain controller is upgraded, it has all the features of the Windows Server 2003 family, which means it has all the features in the following list, plus the features in "Features Available with the Upgrade of Any Server in a Windows NT Domain" earlier in this topic.

When you upgrade a domain controller to run the Windows Server 2003 operating system instead of Windows NT, many Active Directory features become available in the domain:

  • Simplified management of network-resource information and user information.

  • Group Policy, which you can use to set policies that apply across a given site, domain, or organizational unit in Active Directory.

  • Security and authentication features, including support for Kerberos V5, Secure Sockets Layer 3.0, and Transport Layer Security using X.509v3 certificates. (For more information, see "What’s New in the Windows Server 2003 Family.")

  • Directory consolidation, through which you can organize and simplify the management of users, computers, applications, and devices, and make it easier for users to find the information they want. You can take advantage of synchronization support through interfaces based on the Lightweight Directory Access Protocol (LDAP), and work with directory consolidation requirements specific to your applications.

  • Directory-enabled applications and infrastructure, which make it easier to configure and manage applications and other directory-enabled network components.

  • Scalability without complexity, a result of Active Directory scaling to millions of objects per domain and using indexing technology and advanced replication techniques to speed performance.

  • Use of Internet standards, including access through Lightweight Directory Access Protocol and a namespace based on the Domain Name System (DNS).

  • Active Directory Service Interfaces (ADSI), a powerful development environment.

  • Additional Active Directory features, as described in the section on Active Directory in "What’s New in the Windows Server 2003 Family."

Planning DNS for the Upgrade of Domain Controllers Running Windows NT 4.0

The Domain Name System (DNS) is a hierarchical naming system used for locating computers on the Internet and private TCP/IP networks. This section describes the planning for DNS that is recommended before you upgrade to Active Directory, that is, before you upgrade the primary domain controller in a Windows NT domain to become a domain controller running Windows Server 2003.

DNS is the name resolution service used by Active Directory. Products in the Windows Server 2003 family can support both the Windows Internet Name Service (WINS) common in Windows NT networks, and DNS. You must deploy DNS to support Active Directory. You can choose to migrate from WINS to DNS or configure your new DNS infrastructure to support your current WINS infrastructure.

For the upgrading of a network with one to five servers and 100 or fewer clients (which is the size of network discussed in this manual), only a simple DNS plan is needed, because there will be no parent or child domains. (For information about upgrading networks with more than five servers, see the Windows Server 2003 Deployment Kit.) DNS names consist of name labels separated by periods. A simple DNS domain name for a Windows Server 2003 family domain could take the form domainname.ext where ext is an established "top-level domain" type such as com or org. With a domain name of that form, the form of a computer name in the domain would be:

computername.domainname.ext

When you upgrade the primary domain controller in a Windows NT 4.0 domain (the primary domain controller must be upgraded first, before backup domain controllers), you will be offered several different options for the handling of DNS. If there is no DNS server available to work with Active Directory, you will be offered, by default, the option of installing DNS on the domain controller you are upgrading (formerly the primary domain controller). In a network with one to five servers, the simplest approach is to accept this default. Then, after completing the upgrade of the server on which DNS was installed, take note of its static IP address, and configure other computers to send any DNS requests to that IP address. For additional basic information about DNS and how to configure it during Setup, see "Name Resolution for TCP/IP" in "Getting Ready for a New Installation: Windows Server 2003, Standard Edition," on your Setup CD. For more detailed information about DNS, see the Windows Resource and Deployment Kits on the Web at: http://go.microsoft.com/fwlink/?LinkId=29883

Another way to view information about DNS is to go to a computer running any product in the Windows Server 2003 family, click Start, and then click Help and Support.

Performing Backups and Carrying out Upgrades of Domain Controllers Running Windows NT 4.0

There are a few preparations to make just before beginning an upgrade from Windows NT 4.0, such as ensuring that you have applied Service Pack 5 or later, and performing backups.

During the upgrade, there are a few choices to make for the upgrade of a network of two to five servers (a network within the size of those discussed in this manual). The following sections describe these final preparations and provide guidelines for making choices.

Before beginning this stage of the upgrade process, be sure to review "Basic Preparations for the Upgrade of Servers in a Windows NT Domain" and "Planning Server Roles and the Order of Server Upgrades from Windows NT" earlier in this topic.

Applying the Service Pack, Performing Backups, and Other Preparations

Before beginning an upgrade of servers in a domain where all the domain controllers run Windows NT 4.0, apply an appropriate Service Pack, perform backups, and consider whether to remove a backup domain controller temporarily from the network:

  • Be sure that you have applied Service Pack 5 or later to the servers. You must apply Service Pack 5 or later before you can begin an upgrade from Windows NT 4.0.

  • As with any major change to the contents of hard disks on your servers, it is recommended that you back up each server before upgrading it. Also be sure to review "Preparing Your System for an Upgrade" in "Running Setup for an Upgrade: Windows Server 2003, Standard Edition."

  • If you are preparing to upgrade the primary domain controller, to protect your existing network integrity, consider removing a backup domain controller temporarily from the network. To do this, in your existing Windows NT network, choose a backup domain controller, ensure that it has a current copy of the user accounts database, and back it up. Then disconnect its network cable. After the upgrade of your primary domain controller to become a domain controller running Windows Server 2003 (you must upgrade the primary domain controller first), this disconnected system is available for promotion to a Windows NT primary domain controller if necessary. However, in the course of an uneventful upgrade, you would not and could not promote the Windows NT backup domain controller to primary domain controller. Instead, you would continue the upgrade process, eventually reconnecting the disconnected server and upgrading it.

Running the Active Directory Installation Wizard After Upgrading the Primary Domain Controller

To upgrade the primary domain controller to become a domain controller running Windows Server 2003, you must first run Setup to upgrade the operating system. After the operating system is installed, you can run the Active Directory Installation Wizard (which appears on the screen the first time you log on). This section provides guidelines for making choices in the Active Directory Installation Wizard when upgrading the primary domain controller.

For information about preparations necessary before beginning the upgrade, see "Stages in the Process of Upgrading Servers in a Windows NT 4.0 Domain" earlier in this topic. For information about starting Setup, see "Running Setup for an Upgrade: Windows Server 2003, Standard Edition."

Important:
When you begin the upgrade of domain controllers running Windows NT 4.0, you must upgrade the primary domain controller first.

The following table shows the choices that are recommended when running the Active Directory Installation Wizard on the server that was formerly the primary domain controller. These recommendations are for a network of two to five servers (a network within the size of those discussed in this manual):

Choices on the server that was formerly the primary domain controller Recommended action for a network of two to five servers

Domain in a new forest or Child domain in an existing domain tree or Domain tree in an existing forest

Choose Domain in a new forest.

Forest functional level of Windows Server 2003 interim (This choice appears only if Domain in a new forest was previously selected.)

Choose Windows Server 2003 interim. With this domain functional level, you can have domain controllers running Windows NT 4.0 or Windows Server 2003, but no domain controllers running Windows 2000.

During the upgrade, you can choose the location of three important items: the database containing user accounts and other Active Directory data, the log file, and the system volume (Sysvol) folder. The database and the log file can be on any kind of partition (FAT, FAT32, or NTFS); the database can expand by as much as a factor of ten from the size it had with Windows NT, so allow plenty of room for it. (Initially, the log file will take up very little space.) The system volume folder must be on an NTFS partition. (For information about NTFS and other file systems, see "Choosing a File System for the Installation Partition" and "Reformatting or Converting a Partition to Use NTFS" in "Getting Ready for a New Installation: Windows Server 2003, Standard Edition.")

Learning About Active Directory After the First Server is Upgraded

As soon as the first server is upgraded, you can open Help and Support and read information about how to use Active Directory. To open Help and Support Center, click Start, and then click Help and Support. The following list provides suggestions about information to review:

  • Additional information about upgrading from a Windows NT 4.0 domain.

  • "New ways to do familiar tasks," that is, a table that compares the way you completed domain tasks with Windows NT with the way you complete those tasks with products in the Windows Server 2003 family.

  • Domains and forests.

  • Functional levels (domain functional level and forest functional level). After upgrading the last domain controller in a Windows NT domain to become a domain controller running Windows Server 2003, you have the option of changing functional levels, as described in the Active Directory topics.

  • The global catalog and also operations master roles, which you do not have to take action on as part of the upgrade, but might want to learn about.

For information about deployments and upgrades in multiple domains or in domains larger than five servers, see the Windows Server 2003 Deployment Kit. You can view the Windows Deployment and Resource Kits on the Web at: http://go.microsoft.com/fwlink/?LinkId=29883

Completing Further Upgrades from Windows NT 4.0

After you upgrade your primary domain controller and ensure that it is functioning to your satisfaction, you can begin the upgrade of any backup domain controllers. (You can upgrade member servers at any time.)

Upgrade the backup domain controllers one at a time (ensure that each is backed up before upgrading). Before beginning the upgrade of each backup domain controller, make sure that at least one domain controller running Windows Server 2003 is available on the network, because the user accounts and other Active Directory data will be copied from the domain controllers that have already been upgraded. Start and test each server on the network to ensure that it is functioning to your satisfaction before upgrading another backup domain controller.

An upgraded domain controller will appear as a Windows NT 4.0 primary domain controller to Windows NT 4.0 servers and client computers. However, it is recommended that you complete the upgrade of all servers in the domain relatively quickly (rather than allowing a long delay). This reduces the number of version differences between computers, simplifying management and troubleshooting, and also strengthens security.

The Internet Explorer Enhanced Security Configuration is enabled by default when you upgrade. The security settings in this configuration can help make your computer more secure by limiting its exposure to malicious Web sites. Therefore, with this enhanced level of security, you might find that some Web sites do not display correctly in Internet Explorer when you are browsing Internet and intranet Web sites. Also, you might be prompted to enter your credentials when accessing network resources, such as files in Universal Naming Convention (UNC) shared folders. You can easily change the enhanced security settings.

If you have a remote access server that is a member server, it is recommended that you upgrade it before the last domain controller is upgraded. For more information, see "Planning Server Roles and the Order of Server Upgrades from Windows NT" earlier in this topic.

Back to Top