Microsoft Windows NT 4.0 Guide Uživatelský manuál stáhnout pdf (Strana 65)

Microsoft

Windows Server

™

2003 White Paper

Windows NT 4.0 Server Upgrade Guide 60

4. Click OK to confirm that you want to transfer the role, and then click Close.

Determining Forest Functionality

Forest functionality determines the type of Active Directory features that can be enabled in the

scope of a single forest. Each forest functional level has a set of specific minimum requirements

for the version of operating system that domain controllers throughout the forest can run. For

example, the Windows forest functional level requires that all domain controllers run Windows

Server 2003 operating systems.

In the scenario where you are upgrading your first Windows NT domain so that it becomes the

first domain in a new Windows Server 2003 forest, it is recommended that you set the forest

functional level to Windows interim. (You are prompted during the upgrade.) This level contains all

the features used in the Windows 2000 forest functional level and also includes two important

advanced Active Directory features:

• Improved replication algorithms made to the intersite topology generator.

• Replication improvements made to group memberships.

The Windows interim functional level is an option when upgrading the first Windows NT domain to

a new forest and can be manually configured after the upgrade. For more information about how

to set this functional level manually, see Windows Deployment and Resource Kits

on the

Windows Web site. The Windows interim forest functional level supports only domain controllers

running Windows and Windows NT, not domain controllers running Windows 2000. Servers

running Windows 2000 cannot be promoted to a domain controller in a forest where the forest

functional level has been set to Windows interim.

Upgrading the Windows NT Server 4.0 or Earlier PDC

The first server running Windows NT Server 4.0 that you must upgrade is the PDC. Upgrading the

Windows NT PDC is required for a successful upgrade of the domain. During the upgrade, the

Active Directory Installation Wizard requires that you choose to join an existing domain tree or

forest or start a new domain tree or forest. If you decide to join an existing domain tree, you must

provide a reference to the appropriate parent domain. For more information, see “Checklist:

Installing a Domain Controller” in the Windows Server 2003 on-screen Help and Support Center.

Running the Active Directory Installation Wizard installs all necessary components on the domain

controller, such as the directory data store, and the Kerberos v5 protocol authentication software.

After Kerberos has been installed, the setup process starts the authentication service and the

ticket granting service. In addition, if the domain controller represents a new child domain, a

transitive trust relationship is established with the parent domain. Eventually, the domain controller

from the parent domain copies all schema and configuration information to the new child domain

controller. The existing SAM objects are copied from the registry to the new data store. These

objects are security principals.

During the upgrade, objects are created to contain the accounts and groups from the

Windows NT domain. These Container objects—named Users, Computers, and Built-in—appear

as folders in Active Directory Users and Computers. User accounts and predefined groups are

placed in the Users folder. Computer accounts are placed in the Computers folder. Built-in groups

1 2 ... 60 61 62 63 64 65 66 67 68 69 70 ... 154 155

Komentáře k této Příručce

Žádné komentáře

Microsoft Windows NT 4.0 Guide Uživatelský manuál Strana 65

Komentáře k této Příručce

Související produkty a manuály pro Servery Microsoft Windows NT 4.0 Guide