This is important
since you are practically limiting your forest functionality to any of the Windows 2000
Server??“ and Windows Server 2003??“compatible functional levels. Your most critical step
before successfully installing a new Windows Server 2008 domain in an existing Windows
2000/2003 forest is to extend the schema to support Windows Server 2008 by running
the following command on the schema master:
Adprep /forestprep
Figure 4-14. Installation Summary screen
115 Chapter 4: Active Directory Domain Services
Like Windows Server 2003, Windows Server 2008 requires that the primary domain
controller operations master run on Windows Server 2008 before any Windows Server
2008 security principles are created.
Hands-On Exercise: Installing a New Windows Server 2008 Domain in an Existing Windows Server
2003 Forest In this exercise you will need an existing Windows Server 2003 forest. I set up
a new Windows Server 2003 domain and forest called LABTEST.LOCAL, into which I will
add my new Windows Server 2008 domain. You must have the username and password
of an account on the existing Windows 2003 forest that is a member of Enterprise Admins,
Schema Admins, and Domain Admins Windows global security groups.
1. Log on to the server in the existing Windows 2003 forest that currently acts
as the schema master. You must log in with an account that is a member of
Enterprise Admins, Schema Admins, and Domain Admins.
Pages:
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159