|
Chapter 15: Deploying Windows .NET Server 2003
15 Deploying Windows .NET Server 2003The purpose of this chapter is to help you plan for the installation of Windows .NET Server 2003 in a network environment. This chapter only scratches the surface, though. The Microsoft Windows .NET Server 2003 Deployment Kit (Microsoft Press, 2003) contains much more help with planning and deploying Microsoft's latest server operating system. Also, for information about setting up multiple domains with structured relationships, see the deployment kit. You can view the Resource Kits on Microsoft's Web site at http://www.microsoft.com/windows/reskits/.After reading this chapter, you'll be ready to run Windows .NET Server 2003 Setup and, later, use the Configure Your Server Wizard. Together, Setup and the Configure Your Server Wizard help you get your servers up and running quickly. To find out more about Configure Your Server, see Help and Support Center in Windows .NET Server 2003. To open Help and Support Center, after completing Setup, click Start, and then click Help And Support. You can also view Help and Support topics on Microsoft's Web site at http://www.microsoft.com/windows.netserver/.
Upgrades Compared with New InstallationsThis section compares upgrading with performing a new installation to help you decide whether to perform a new installation. (See Chapter 16, "Upgrading from Windows NT 4.0 Server," and Chapter 17, "Upgrading from Windows 2000 Server," for more information about upgrading.) Upgrading is either replacing Windows NT 4.0 (with Service Pack 5 or later) with a product in the Windows .NET Server 2003 family or replacing Windows 2000 with a product in the Windows .NET Server 2003 family. Installing, in contrast with upgrading, means completely removing the previous operating system or installing a product in the Windows .NET Server 2003 family on a disk or disk partition with no previous operating system.
Upgrade ConsiderationsThe following list contains some points to consider when doing an upgrade:
New Installation ConsiderationsThe following list contains some points to consider when doing clean installations:
System RequirementsTo ensure adequate performance, make sure computers on which you install Windows .NET Server 2003 meet the following requirements:
After Setup is finished, actual hard disk space used for the operating system will be more than the free space required for Setup because of space needed for the paging file, for any optional components you install, and (on domain controllers) for user accounts and other Active Directory information. The usual size for the paging file is 1.5 times the size of the RAM. For information about the paging file, optional components, user accounts, and information stored in Active Directory, see Help and Support Center. To open Help and Support Center, after completing Setup, click Start, and then click Help And Support.
As an alternative, for operation without a monitor or keyboard, you can choose a remote diagnostic and support processor that is designed for products in the Windows .NET Server 2003 family. See the hardware compatibility information in the Windows Catalog at http://www.microsoft.com/windows/catalog/ for more information.
Hardware CompatibilityOne of the most important steps to take before installing a server is to confirm that your hardware is compatible with products in the Windows .NET Server 2003 family. You can do this by running a preinstallation compatibility check from the Setup CD or by checking the hardware compatibility information at the Windows Catalog Web site. Also, as part of confirming hardware compatibility, verify that you have obtained updated hardware device drivers and an updated system basic input/output system (BIOS). (For an Itanium-based computer, check for an updated Extensible Firmware Interface.) Regardless of whether you run a preinstallation compatibility check, Setup checks hardware and software compatibility at the beginning of an installation and displays a report if there are incompatibilities.
Running a Preinstallation Compatibility CheckYou can run a hardware and software compatibility check from the Setup CD. The compatibility check does not require you to actually begin an installation. You can run the compatibility check in either of two ways:
Checking Drivers and System BIOSCheck that you have obtained updated drivers for your hardware devices and that you have the latest system BIOS (for an x86-based computer) or Extensible Firmware Interface (for an Itanium-based computer). The device manufacturers can help you obtain these items. Finally, if you have devices that do not use Plug and Play, or if you are aware that your Plug and Play devices are not implemented exactly to the standards, consider taking a device inventory of the hardware devices on your computer.
Inventorying Non-Plug and Play DevicesProducts in the Windows .NET Server 2003 family include Plug and Play technology so that devices (for example, video and network adapters) can be automatically recognized by the operating system, configuration conflicts are avoided, and you do not have to specify each device's settings by hand. However, if you have devices that do not use Plug and Play, or you are aware that your Plug and Play devices are not implemented exactly to the standards, you might want to take steps to avoid device configuration conflicts. This section describes steps you can take, if you choose, to understand your device configuration before running Setup.To take an inventory of your devices, if your computer has an existing operating system, use it to obtain the current settings, such as memory address and interrupt request (IRQ), used with your devices. For example, with Windows NT 4.0, you can use Control Panel to view settings. (On the Start menu, point to Settings, click Control Panel, and then double-click icons such as Network and Ports.) You might also choose to view system BIOS information. To do this, watch the screen while starting the computer, and then press the appropriate key when prompted. At the beginning of an installation, the Setup program automatically takes a device inventory as well. For devices that do not use Plug and Play or that are not implemented exactly to Plug and Play standards, taking your own inventory helps prevent the following difficulties:
Table 15-1 shows the kinds of information to gather if you have devices that do not use Plug and Play and you decide to take a device inventory before starting Setup. Table 15-1 Inventorying Device Configurations
Mass Storage Drivers and the Setup ProcessIf your mass storage controller (such as a SCSI, RAID, or Fibre Channel adapter) is compatible with products in the Windows .NET Server 2003 family but you are aware that the manufacturer has supplied a separate driver file for use with your operating system, obtain the file (on a floppy disk) before you begin Setup. During the early part of Setup, a line at the bottom of the screen will prompt you to press F6. Further prompts will guide you in supplying the driver file to Setup so that it can gain access to the mass storage controller.If you are not sure whether you must obtain a separate driver file from the manufacturer of your mass storage controller, you can try running Setup. If the controller is not supported by the driver files on the Setup CD and therefore requires a driver file supplied by the hardware manufacturer, Setup stops and displays a message saying that no disk devices can be found or displays an incomplete list of controllers. After you obtain the necessary driver file, restart Setup, and press F6 when prompted.
Using a Custom Hardware Abstraction Layer FileIf you have a custom hardware abstraction layer (HAL) file supplied by your computer manufacturer, before you begin Setup, locate the floppy disk or other medium containing the file. During the early part of Setup, a line at the bottom of the screen will prompt you to press F6; at this time, press F5 (not F6) to include your HAL file in the setup process. After you press F5, follow the prompts that are provided.
Understanding the ACPI BIOS for an x86-Based ComputerFor an x86-based computer, the BIOS is a set of software through which the operating system (or Setup) communicates with the computer's hardware devices. ACPI is the current standard for the way the BIOS works. Products in the Windows .NET Server 2003 family support not only ACPI-compliant BIOS versions but also some BIOS versions based on older Advanced Power Management (APM) and Plug and Play designs.Some ACPI-based BIOS versions are not compliant with the standard. The more recent the version of an ACPI BIOS, the more likely that it's compliant. An ACPI-based BIOS that isn't compliant with the ACPI standard might not support workable communication between the operating system (or Setup) and your hardware. If workable communication is not supported, Setup stops and displays instructions for contacting your hardware manufacturer and taking other steps to solve the problem. If this happens, follow the instructions provided. To learn more about the ACPI compliance of your BIOS:
Using Dynamic Update for Updated DriversIf you have a working Internet connection on the computer on which you run Setup, you can choose Dynamic Update during Setup and obtain the most up-to-date Setup files, including drivers and other files. Whenever an important update is made to any crucial Setup file, that update is made available through Dynamic Update functionality built into the Windows Update Web site. Some of the updated files will be replacements (for example, an updated driver or updated Setup file), and some will be additions (for example, a driver not available at the time the Setup CD was created). It's recommended that you use Dynamic Update when running Setup.Dynamic Update has been carefully designed so that it's reliable and easy to use:
The Windows Update Web site offers a variety of updates that you can use after completing Setup. To learn more, see http://windowsupdate.microsoft.com/.
Important Files to ReviewAt some point in your planning process, before you run Setup, familiarize yourself with the Relnotes.htm file found in the \Docs folder on the CD for Windows .NET Server 2003. This file contains important usage information about hardware, networking, applications, and printing. Also familiarize yourself with information about hardware compatibility for products in the Windows .NET Server 2003 family. For more information, see "Hardware Compatibility" earlier in this chapter.
Decisions to Make for a New InstallationThis list outlines the basic decisions to make for a new installation:
Choosing a Licensing ModeProducts in the Windows .NET Server 2003 family support two licensing modes: Per Device or Per User and Per Server. If you choose the Per Device or Per User mode, each computer or user that accesses a server running a product in the Windows .NET Server 2003 family requires a separate CAL. With one CAL, a particular client computer can connect to any number of servers running products in the Windows .NET Server 2003 family. This is the most commonly used licensing method for companies with more than one server running products in the Windows .NET Server 2003 family. Figure 15-1 illustrates this mode.In contrast, Per Server licensing means that each concurrent connection to this server requires a separate CAL. In other words, this server can support a fixed number of connections at any one time. For example, if you select the Per Server client licensing mode with five licenses, this server can have five concurrent connections. (If each client requires one connection, this is five clients at any one time.) The clients using the connections do not need any additional licenses. The Per Server licensing mode is often preferred by small companies with only one server. It's also useful for Internet or remote access servers, where the client computers might not be licensed as network clients for products in the Windows .NET Server 2003 family. You can specify a maximum number of concurrent server connections and reject any additional logon requests. Figure 15-2 shows Per Server licensing mode. Figure 15-1 This diagram shows Per Device or Per User licensing mode. If you are unsure which mode to use, choose Ser Server because you can change once from Per Server mode to Per Device or Per User mode at no cost. After you choose Per Server and complete Setup, you can display topics about licensing modes in Help and Support Center. (Click Start, and then click Help and Support.) Figure 15-2 This diagram illustrates Per Server licensing mode.
Installing Multiple Operating SystemsOn a computer with an appropriate disk configuration (outlined in Table 15-2), you can install more than one operating system and then choose between the operating systems each time you restart the computer.For example, on an x86-based computer, you can set up a server to run Windows .NET Server 2003 most of the time but allow the server to sometimes run Windows NT Server 4.0, Enterprise Edition, in order to support an older application. (However, to do this you would need to make specific file system choices and would need Service Pack 5 or later, as described in "File System Compatibility" and "Choosing a File System" later in this chapter.) During restarts, a display appears for a specified number of seconds, allowing you to select between the two operating systems. (You can specify a default operating system that will run if no selection is made during the restart process.) Table 15-2 shows the disk configurations on which you can install more than one operating system. You must follow the requirements in the table. For example, on a basic disk, you must install each operating system, including Windows .NET Server 2003, in a separate partition. This ensures that each operating system does not overwrite crucial files that are needed by another operating system. Table 15-2 Requirements for Multiple Operating Systems
If you used Windows 2000 or Windows XP to change a disk with no partitions directly to a dynamic disk, you must return the disk to basic before you can install an operating system on it. All data will be lost in this process, so back it up first. You can then use Windows 2000 or Windows XP to revert to basic, or you can use Windows .NET Server 2003 Setup. To use Windows 2000 or Windows XP, follow the instructions in Help for your operating system. To use Windows .NET Server 2003 Setup, during the partitioning phase, find the dynamic disk among the list of available partitions and then delete it (which erases all data on all volumes). You will be prompted to confirm your action. After you do this, the disk will contain only unpartitioned space, and you can use Setup to create a new (basic disk) partition on it.
Reasons to Install Only One Operating SystemSetting up a computer so that you can choose between two or more operating systems at startup does have an advantage: It allows you to use applications that run only with a particular operating system. However, there are definite reasons to install only one operating system:
Requirements for Installing Multiple Operating SystemsBefore you decide to set up a computer with more than one operating system, review the following restrictions.
File System CompatibilityOn computers that contain multiple operating systems, compatibility becomes more complex when you consider file system choices. The file systems to choose from are NTFS, FAT, and FAT32. (For more information, see "Choosing a File System" later in this chapter.)NTFS is normally the recommended file system because it is more efficient and reliable and supports important features, including Active Directory and domain-based security. With NTFS, however, you need to take file system compatibility into account when considering whether to set up a computer to contain more than one operating system because with Windows 2000 and the Windows .NET Server 2003 family, NTFS has new features in addition to those in Windows NT. Files that use any new features will be completely usable or readable only when the computer is started with Windows 2000 or a product in the Windows .NET Server 2003 family. For example, a file that uses the new encryption feature won't be readable when the computer is started with Windows NT Server 4.0 or Windows NT Server 4.0, Enterprise Edition, which were released before the encryption feature existed.
Using NTFS as the only file system on a computer that contains both Windows .NET Server 2003 and Windows NT is not recommended. On these computers, a FAT partition containing the Windows NT 4.0 operating system ensures that when started with Windows NT 4.0, the computer will have access to needed files. In addition, if Windows NT is not installed on the system partition, which is almost always the first partition on the disk, it's recommended that the system partition also be formatted with FAT. If you set up a computer so that it starts with Windows NT 3.51 or earlier on a FAT partition and Windows .NET Server 2003 on an NTFS partition, when that computer starts with Windows NT 3.51, the NTFS partition will not be visible. If you set up a computer this way, and the partition containing Windows NT 3.51 is not the system partition (which is almost always the first partition on the disk), the system partition must also be formatted with FAT.
Multibooting with Windows NT 4.0If you plan to set up a computer so that it contains Windows NT 4.0 and Windows .NET Server 2003, first review the following precautions:
Encrypting File SystemIf you set up a server so that it contains some combination of Windows .NET Server 2003 and Windows 2000 or Windows XP, or contains multiple partitions with products in the Windows .NET Server 2003 family, and you want to use EFS on the computer, you must take certain steps. These steps make encrypted files readable between the different installations:
For more information about EFS, roaming user profiles, and importing and exporting certificates, see Help and Support Center.
Chapter 15: Deploying Windows .NET Server 2003
Choosing a File SystemYou can choose among three file systems for an installation partition: NTFS, FAT, and FAT32. NTFS is strongly recommended in most situations. You can use important features such as Active Directory and domain-based security only by choosing NTFS as your file system.
Table 15-3 describes a number of installation scenarios for x86-based computers (the last two scenarios are fairly uncommon) and provides file system guidelines for each one: Table 15-3 File Systems for Scenarios
The sections that follow provide information about reformatting or converting a FAT or FAT32 partition to use NTFS, as well as additional background information about NTFS, FAT, and FAT32.
Reformatting or Converting to NTFSIf you have a FAT or FAT32 partition on which you want to install a product in the Windows .NET Server 2003 family, and you want to use NTFS instead, you have two choices:
If you install a product in the Windows .NET Server 2003 family on a FAT or FAT32 partition, you are offered the option to convert the partition to NTFS. You can also convert a FAT or FAT32 partition after Setup by using Convert.exe. For more information about Convert.exe, after completing Setup, type help convert at the command prompt.
If you format a partition during Setup, the file system choices are listed as NTFS and FAT. Table 15-4 provides information about the relationship between partition size and file system choices during Setup. Table 15-4 Formatting Partitions during Setup
If you format a partition during Setup, you can choose between a quick format and a full format:
NTFS Compared with FAT and FAT32NTFS has always been a more powerful file system than FAT and FAT32. Windows 2000, Windows XP, and the Windows .NET Server 2003 family include a new version of NTFS, with support for a variety of features, including Active Directory, which is needed for domains, user accounts, and other important security features.FAT and FAT32 are similar to each other except that FAT32 is designed for larger disks than FAT. The file system that works most easily with large disks is NTFS. Note that file system choices have no effect on access to files across the network. For example, using NTFS on all partitions on a server does not affect clients connecting across a network to shared folders or shared files on that server, even if those clients run an earlier operating system such as Windows 98 or Windows NT. The following list describes the compatibility and sizes of each file system with various operating systems:
Understanding NTFSThis section provides background information about the features available with NTFS. Some of these features are as follows:
This is only a partial list of the features in NTFS in the Windows .NET Server 2003 family. For more information about new features, see Chapter 11, "File Services."
Planning Disk PartitionsYou must plan your disk partitions before you run Setup only if both of the following conditions are true:
Disk partitioning is a way of dividing your physical disk so that each section functions as a separate unit. When you create partitions on a basic disk, you divide the disk into one or more areas that can be formatted for use by a file system, such as FAT or NTFS. Different partitions often have different drive letters (for example, C and D). A basic disk can have up to four primary partitions, or three primary partitions and one extended partition. (An extended partition can be subdivided into logical drives, while a primary partition cannot be subdivided.)
Before you run Setup to perform a new installation, determine the size of the partition on which to install. There is no set formula for figuring a partition size. The basic principle is to allow plenty of room for the operating system, applications, and other files that you plan to put on the installation partition. The files for setting up Windows .NET Server 2003 require approximately 1.25 GB to 2 GB on an x86-based computer and 3 GB to 4 GB on an Itanium-based computer, as described in "System Requirements" earlier in this chapter. It's recommended that you allow considerably more disk space than the minimum amount. It's not unreasonable to allow 4 GB to 10 GB on the partition, or more for large installations. This allows space for a variety of items, including optional components, user accounts, Active Directory information, logs, future service packs, the paging file used by the operating system, and other items. When you perform a new installation, you can specify the partition on which to install. If you specify a partition on which another operating system exists, you will be prompted to confirm your choice. During Setup, create and size only the partition on which you want to install Windows .NET Server 2003. After installation is complete, you can use Disk Management to manage new and existing disks and volumes. This includes creating new partitions from unpartitioned space; deleting, renaming, and reformatting existing partitions; adding and removing hard disks; and changing a basic disk to the dynamic disk storage type, or changing dynamic to basic. On Itanium-based computers with more than one disk, you can plan not only the sizes of partitions but also the partition style for each disk. A partition style determines the way that information about the partition is stored. There are two partition styles. The newer style (used on Itanium-based computers only) stores partition information in the GUID partition table (GPT). The older style stores information in the MBR. On Itanium-based computers, you must install Windows .NET Server 2003 on a GPT disk. With GPT, you can create more partitions and larger volumes and take advantage of other benefits. For more information about partition styles on Itanium-based computers, see Help and Support Center and the Microsoft Windows .NET Server 2003 Resource Kit, Server Management Guide.
Remote Installation ServicesIf you plan to use Remote Installation Services on this server so that you can install operating systems on other computers, a separate partition for use by Remote Installation Services is necessary. Plan on using NTFS on this partition: NTFS is required for the Single Instance Store feature of Remote Installation Services.If you need to create a new partition for Remote Installation Services, plan on doing it after Setup, and leave enough unpartitioned disk space so that you can create it. (At least 4 GB of space is recommended.) As an alternative, for the system disk (not cluster disks), you can plan to make the disk a dynamic disk, which allows more flexibility in the use of the disk space than a basic disk. For more information about Remote Installation Services and about disk and partition choices, see Help and Support Center.
Options When Partitioning a DiskYou can change the partitions on your disk during Setup only if you are performing a new installation, not an upgrade. You can modify the partitioning of the disk after Setup by using Disk Management.If you are performing a new installation, Setup examines the hard disk to determine its existing configuration and then offers the following options:
Working with Dynamic DisksA dynamic disk is a disk using the new storage type introduced with Windows 2000. If you changed a disk to dynamic and you want to perform a new installation on the disk, review the following:
You can use Windows 2000 or Windows XP to return to basic, or you can use the Setup program for a product in the Windows .NET Server 2003 family. To use Windows 2000 or Windows XP, follow the instructions in Help for your operating system. To use Setup for a product in the Windows .NET Server 2003 family, during the partitioning phase, find the dynamic disk among the list of available partitions and then delete it (which erases all data on all volumes). You will be prompted to confirm your action. After you do this, the disk will contain only unpartitioned space, and you can use Setup to create a new (basic disk) partition on it.
Working with Volumes, Mirrors, and StripesWith the disk management technologies in Windows NT 4.0, you could create volume sets, mirror sets, stripe sets, or stripe sets with parity, each with specific capabilities and limitations. By using the dynamic disk technology introduced with Windows 2000, you can use similar technologies, with the added flexibility of being able to extend disk volumes without repartitioning or reformatting.This transition from the technologies used in Windows NT 4.0 means that you must make certain choices before running Setup for Windows .NET Server 2003. Any volume sets, mirror sets, stripe sets, or stripe sets with parity that you created with Windows NT 4.0 are not supported in Windows .NET Server 2003, although they were supported to a limited extent in Windows 2000. If you used Windows NT 4.0 to create a volume set, mirror set, stripe set, or stripe set with parity, and you want to run Setup for Windows .NET Server 2003 on that computer, you must choose one of the following methods:
Types of Multidisk Volumes on Dynamic DisksThe disk sets described in the preceding section have different names in the Windows .NET Server 2003 family than they had in Windows NT 4.0:
Configuring NetworkingTCP/IP is the network protocol that provides Internet access. It's the protocol used by most servers, although you can use additional or different network adapters and their associated protocols on your servers. Setup and the Configure Your Server Wizard are designed to make it easy to configure TCP/IP and the services that support it.To use TCP/IP, make sure that each server is provided with an IP address, either a dynamic address provided through software or a static address that you obtain and set. You will also have to provide users with names that are easy to use. Name resolution can be accomplished by various methods, primarily Domain Name System (DNS) and Windows Internet Naming Service (WINS). The following sections provide more information. For detailed information about TCP/IP, Dynamic Host Configuration Protocol (DHCP), DNS, and WINS, see Help and Support Center as well as the Resource Kits for the Windows .NET Server 2003 family. You can also view Help and Support topics on the Web at http://www.microsoft.com/windows.netserver/.
IP AddressesAs described in the preceding section, using TCP/IP requires an IP address to be provided for each computer. There are two basic approaches for providing an IP address for a server you are installing:
One server or several servers can provide DHCP along with one or more name resolution services, which are called DNS and WINS. The name resolution services are described in the next section, "Name Resolution." If you want to run Setup before you have finalized your decisions about which server to use as your DHCP server and what static IP address to assign to that server, you can choose Typical Settings in the Networking Settings dialog box during Setup and complete the network configuration later. If you do this and there is no DHCP server on the network, Setup will use a limited IP addressing option called Automatic Private IP Addressing (APIPA). During the time that a server is using APIPA, it can communicate only with other computers using APIPA on the same network segment. A server that is using APIPA cannot make connections to the Internet (for browsing or e-mail) and cannot be used with DNS or Active Directory (which depends on DNS). If you know which server you want to use as your DHCP server, when installing that server, in the Networking Settings dialog box in Setup, choose Custom settings, and specify a static IP address and related network settings. After Setup, use Configure Your Server, along with information in Help and Support Center, to install the DHCP component and complete the configuration of the DHCP server.
If you want to run Setup on a server before you have finalized your decision about the static IP address you want to assign to that server, you can choose Typical Settings in the Networking Settings dialog box during Setup and configure that server later. In this situation, if a DHCP server is on the network, Setup will obtain an IP address configuration from DHCP. If no DHCP server is on the network, Setup will use APIPA. APIPA is described in the preceding item in this list. For more information about static IP addresses, including private IP addresses (which you choose from certain ranges of addresses) and public IP addresses (which you obtain from an Internet service provider), see Help and Support Center.
Name ResolutionAfter you have formed a plan for IP addressing, the next components to consider are those for name resolution, which is the process of mapping a computer name (something that users can recognize and remember) to the appropriate IP address. Name resolution is a process that provides users with easy-to-remember server names instead of requiring them to use the numeric IP addresses by which servers identify themselves on the TCP/IP network. The name resolution services are DNS and WINS:
DNS is installed automatically when you create a domain controller (or promote a server to become a domain controller) unless the Windows .NET Server 2003 software detects that a DNS server already exists for that domain. You can also install DNS by using Configure Your Server or by using Add/Remove Windows Components, which is part of Add Or Remove Programs in Control Panel. If you plan to install DNS on a server, specify a static IP address on that server and configure that server to use that IP address for its own name resolution. For information about assigning a static IP address, see the preceding section, "IP Addresses." For more information about configuring DNS, see Help and Support Center.
If you plan to install WINS on a server, specify a static IP address on that server. For information about assigning a static IP address, see the preceding section, "IP Addresses." For more information about configuring WINS, see Help and Support Center.
Planning for Your ServersDomains, and the Active Directory directory system of which they are a part, provide many options for making resources easily available to users while maintaining good monitoring and security. For more information about Active Directory, see Chapter 3, "Active Directory."With Windows .NET Server 2003, servers in a domain can have one of two roles: domain controllers, which contain matching copies of the user accounts and other Active Directory data in a given domain; and member servers, which belong to a domain but do not contain a copy of the Active Directory data. (A server that belongs to a workgroup, not a domain, is called a stand-alone server.) It's possible to change the role of a server from domain controller to member server (or stand-alone server) and back again, even after Setup is complete. However, it's recommended that you plan your domain before running Setup and change server roles (and server names) only when necessary. Multiple domain controllers provide better support for users, compared with a single domain controller. With multiple domain controllers, you have multiple copies of user account data and other Active Directory data; however, it's still important to perform regular backups, including Automated System Recovery backups, and familiarize yourself with the methods for restoring a domain controller. In addition, multiple domain controllers work together to support domain controller functions, such as carrying out logon validations. As you manage your Windows .NET Server 2003 family domains, you might want to learn more about operations master roles. Operations master roles are special roles that are assigned to one or more domain controllers in an Active Directory domain. The domain controllers that are assigned these roles perform operations that are single-master (not permitted to occur at different places on a network at the same time). For example, the creation of security identifiers for new resources (such as new computers) must be overseen by a single domain controller to ensure that the identifiers are unique. The first domain controller installed in a domain is automatically assigned all the operations master roles. You can change the assignment of operations master roles after Setup, but in most cases this is not necessary. You will need to be particularly aware of operations masters roles if problems develop on an operations master or if you plan to take one out of service. For more information about operations master roles, which are part of Active Directory, see Help and Support Center.
For More InformationSee the following resource for more information:
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||