Active Directory Installation: Changes During dcpromo

The Windows NT domain model assigned each installed server a single, unchangeable role. Servers could only be a primary domain controller, backup domain controller, or server. To change a computer's role, reinstallation was necessary. This is not true for Windows 2000 or Windows Server 2003. Any Windows 2000 or Windows Server 2003 server can be promoted to become a domain controller, and any domain controller can be demoted and become a simple server. This change to server role is managed using the dcpromo command. The exception to this rule is the Windows Server 2003 web server edition, which cannot be promoted.

When a server is promoted to domain controller, many changes occur:

  • The local ...

Get Windows Server 2003 Security: A Technical Reference now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.