Windows Tip Sheet

But I Don't WANT to Upgrade!

You don't have to upgrade to take advantage of some of Windows 2003 tools.

Sometimes, new product features are too cool not to live without. Like the drag and drop capability offered by AD Users and Computers (ADUC) or the Resultant Set of Policy (RSoP) Wizard, both offered in Windows 2003. But convincing the boss to undergo a major enterprise upgrade just for the sake of a few features…well, good luck. If you can do it, let me know, because I want to come work at your company.

Guess What? You Don't Have to Upgrade!
Fortunately, some features don't require a full-on enterprise upgrade. For example, consider the two features I just mentioned, drag and drop and RSoP in Win2003's ADUC. You can get both features in an all-Windows 2000 domain, provided you have at least one Win2003 DC somewhere in the mix.

Keep in mind that, normally, ADUC will connect to whatever DC authenticated you. So, even if you've installed the Win2003 AdminPak.msi and you have the new ADUC snap-in, when it connects to a Win2K DC you won't be able to use any of Win2003's cool new features. But that doesn't mean you're stuck! You can right-click the domain in ADUC to target a different DC. Just make sure your domain contains at least one Win2003 DC (which works just fine in an all-Win2K domain, by the way), and have ADUC specifically target that DC (make sure you're using the Win2003 version of ADUC, of course).

Win2003 DCs can process RSoP queries, allowing you to use this powerful tool for planning and troubleshooting Group Policy Object application throughout the domain. Win2003 DCs can also process object drag and drop, such as dragging a user from one domain to another (yes, you could just right-click the user and select "Move" but drag and drop is so much cooler).

There's a bunch of Win2003 features that work just fine without a native Win2003 domain. For example, Win2003 DCs cache universal security group membership information, allowing the DC to process user logons even if a GC isn't immediately available. Any Win2003 DC can do this, even if it's in a Win2K domain and even if it's the only Win2003 DC you own.

Micro Tip Sheet

If you frequently open a command-line window by typing "cmd" at the Run prompt, you may not be happy with the default directory Windows picks. Change it by modifying HKEY_CURRENT_USER\Software\Microsoft\CommandProcessor: There's an AutoRun value that needs to be set to CD /D C:\ to start new command windows at the C:\ directory.

Do you know where your Flexible Single-Master Operations (FSMO) roles are? Use the Netdom.exe utility (part of the Support Tools) to query the domain and find out. Hang a poster in the datacenter listing each of the five FSMOs and their current holder. That way if one of those servers goes down, you'll remember that it held a FSMO role and be able to decide whether or not the role needs to be seized on another DC.

More Resources
Microsoft's technical resources for Win2003, including new features: http://www.microsoft.com/windowsserver2003/techinfo/default.mspx

Download the Win2003 AdminPak: http://www.microsoft.com/downloads/details.aspx?FamilyID=
c16ae515-c8f4-47ef-a1e4-a8dcbacff8e3&DisplayLang=en

Read this before installing the Win2003 AdminPak on WinXP: http://support.microsoft.com/default.aspx?scid=kb;en-us;304718

About the Author

With more than fifteen years of IT experience, Don Jones is one of the world’s leading experts on the Microsoft business technology platform. He’s the author of more than 35 books, including Windows PowerShell: TFM, Windows Administrator’s Scripting Toolkit, VBScript WMI and ADSI Unleashed, PHP-Nuke Garage, Special Edition Using Commerce Server 2002, Definitive Guide to SQL Server Performance Optimization, and many more. Don is a top-rated and in-demand speaker and serves on the advisory board for TechMentor. He is an accomplished IT journalist with features and monthly columns in Microsoft TechNet Magazine, Redmond Magazine, and on Web sites such as TechTarget and MCPMag.com. Don is also a multiple-year recipient of Microsoft’s prestigious Most Valuable Professional (MVP) Award, and is the Editor-in-Chief for Realtime Publishers.

comments powered by Disqus

Reader Comments:

Thu, Jun 24, 2004 Anonymous Anonymous

Microsoft will discontinue your products anyway

Tue, Jun 22, 2004 Anonymous Anonymous

Nothing new nor interesting...

Sat, Jun 19, 2004 G USA

Olli is right upgrading just one DC to Win 2003 means a CAL upgrade to 2003. Those "cool features" still equal $$$$

Wed, Jun 16, 2004 Olli Germany

But mixing a W2K3-DC in my domain means to order new CALs for all clients?!

Wed, Jun 16, 2004 Anonymous Anonymous

Should not "new product features are too cool not to live without" be "new product features are too cool to live without"?

Then again English is not my mother tongue....

Add Your Comment Now:

Your Name:(optional)
Your Email:(optional)
Your Location:(optional)
Comment:
Please type the letters/numbers you see above

Redmond Tech Watch

Sign up for our newsletter.

I agree to this site's Privacy Policy.