I am getting ready to introduce my first 2008 DC into an windows 2003 enterprise domain. Functional levels are at 2003 and the diagnostics went well. I ran adprep /forestprep with no problems. I am getting ready to run /domainprep. My question is does that change anything that would affect users such as permissions. I ready where it changes the everyone group. I don't think anyone is using that group but just want to be safe. Thanks.

This step will change AD SCHEMA only. No permissions are affected.

Hello, adprep /forestprep is used to prepare AD schema. adprep /domainprep is used to prepare domains. So, don't worry. This will not affect users permissions. It is just a preparation. Just check with your vendors if your application which interact with AD can still work without problems. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

Thanks. Is exchange 2007 a problem?

Exchange 2007 isn't a problem - it will work quite happily with the updated schema and with your 2008 DCs. http://technet.microsoft.com/en-us/library/ff728623.aspx Out of interest, why would you not be going to 2008 R2 for your DCs?Tony

Yes, I agree with MrX and Tony. It will not effect on users permissions or Exchange 2007. http://technet.microsoft.com/en-us/library/dd464018(WS.10).aspx Thanks

Hi, What does Adprep.exe do? Adprep.exe has parameters that perform a variety of operations that help prepare an existing Active Directory environment for a domain controller that runs a later version of Windows Server. Not all versions of Adprep.exe perform the same operations, but generally the different types of operations that Adprep.exe can perform include the following: l Updating the Active Directory schema l Updating security descriptors l Modifying access control lists (ACLs) on Active Directory objects and on files in the SYSVOL shared folder l Creating new objects, as needed l Creating new containers, as needed For the detailed information, please refer to the Microsoft TechNet article “Running Adprep.exe” provided by MYousufAli. Regards, Arthur Li TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com . Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

By adding a 2008 DC to your existing 2003 forest you are starting the transition to a 2008 DC only environment. For more information about this process as a whole see this article. This is pretty straight forward process. http://networkadminkb.com/Shared%20Documents/Transitioning%20a%20Windows%202003%20Domain%20to%20Windows%202008%20R2.aspx

Sorry I thought I did mention that. It is R2 Datacenter. Thanks.

Hi, I would like to confirm what is the current situation? If there is anything that I can do for you, please do not hesitate to let me know, and I will be happy to help. Regards, Arthur Li TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com .Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.