Hello,

I have a AD with a mix of Windows 2000 and Windows 2003 DC's.
I currently have 2 Window 2000 DNS servers running as primary and
secondary.

- Do i risk anything if i change the zones to AD integrated zones ?.

Thanks,
Jan -

You stand to benefit, rather than run risks

A little, light reading is needed, I suspect

http://www.microsoft.com/technet/pro...n/w2kdns2.mspx

neil





"Jan" wrote:

> Hello,
>
> I have a AD with a mix of Windows 2000 and Windows 2003 DC's.
> I currently have 2 Window 2000 DNS servers running as primary and
> secondary.
>
> - Do i risk anything if i change the zones to AD integrated zones ?.
>
> Thanks,
> Jan -
>
>
>

Jan wrote:
> Hello,
>
> I have a AD with a mix of Windows 2000 and Windows 2003 DC's.
> I currently have 2 Window 2000 DNS servers running as primary and
> secondary.
>
> - Do i risk anything if i change the zones to AD integrated zones ?.


You will need to delete the secondary zone first. After you change the
standard primary zone to AD integrated, the zone will replicate to all
Domain Controllers in the domain, if a DC has a secondary zone in place, it
won't be able to load both the AD integrated and secondary zones.
It can also be problematic mixing Win2k and Win2k3 DNS servers in a multiple
domain forest. Win2k zones will replicate to Win2k3 DCs in the same domain
but will not replicate to Win2k3 DCs in other domains. Win2k3 supports
replication partitions that will replicate to Win2k3 DNS servers in other
domain, as long as they are in the same forest. However, these partitions
don't replicate to Win2k DCs, so moving the zone to one of these Win2k3
partitions will remove the zone from Win2k DCs. If this is done, the only
way you can get the zones on Win2k DCs is to create them as secondary zones.



--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This s
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
https://secure.lsaol.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oe.com/OEBackup/Default.aspx
===================================

Thanks,

So removing the secondary DNS server + zone and then changing
the primary to AD integrated would do the job.

And after that i could add a Windows 2003 DNS server (i only have one
domain forest).

/Jan -


"Kevin D. Goodknecht Sr. [MVP]" <admin@nospam.WFTX.US> wrote in message
news:O68dRRsQGHA.4956@TK2MSFTNGP09.phx.gbl...
> Jan wrote:
>> Hello,
>>
>> I have a AD with a mix of Windows 2000 and Windows 2003 DC's.
>> I currently have 2 Window 2000 DNS servers running as primary and
>> secondary.
>>
>> - Do i risk anything if i change the zones to AD integrated zones ?.
>
>
> You will need to delete the secondary zone first. After you change the
> standard primary zone to AD integrated, the zone will replicate to all
> Domain Controllers in the domain, if a DC has a secondary zone in place,
> it
> won't be able to load both the AD integrated and secondary zones.
> It can also be problematic mixing Win2k and Win2k3 DNS servers in a
> multiple
> domain forest. Win2k zones will replicate to Win2k3 DCs in the same domain
> but will not replicate to Win2k3 DCs in other domains. Win2k3 supports
> replication partitions that will replicate to Win2k3 DNS servers in other
> domain, as long as they are in the same forest. However, these partitions
> don't replicate to Win2k DCs, so moving the zone to one of these Win2k3
> partitions will remove the zone from Win2k DCs. If this is done, the only
> way you can get the zones on Win2k DCs is to create them as secondary
> zones.
>
>
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This s
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> http://support.wftx.us/
> https://secure.lsaol.com/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oe.com/OEBackup/Default.aspx
> ===================================
>
>

Jan wrote:
> Thanks,
>
> So removing the secondary DNS server + zone and then changing
> the primary to AD integrated would do the job.

I don't know exactly what you mean by removing the "secondary DNS server",
this is a misnomer, there really is no such thing as a secondary DNS server.
You need to remove the secondary zone from the DNS server, that should allow
the zone in AD to replicate to the DNS server. It should take 30 min or less
for the zone in AD to replicate.





--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This s
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
https://secure.lsaol.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oe.com/OEBackup/Default.aspx
===================================

Your right. Its just because i have 2 DNS servers i call it
the "secondary DNS server".

Thanks for your ,
Jan -

"Kevin D. Goodknecht Sr. [MVP]" <admin@nospam.WFTX.US> wrote in message
news:uWJu4xDRGHA.6008@TK2MSFTNGP10.phx.gbl...
> Jan wrote:
>> Thanks,
>>
>> So removing the secondary DNS server + zone and then changing
>> the primary to AD integrated would do the job.
>
> I don't know exactly what you mean by removing the "secondary DNS server",
> this is a misnomer, there really is no such thing as a secondary DNS
> server.
> You need to remove the secondary zone from the DNS server, that should
> allow
> the zone in AD to replicate to the DNS server. It should take 30 min or
> less
> for the zone in AD to replicate.
>
>
>
>
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This s
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> http://support.wftx.us/
> https://secure.lsaol.com/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oe.com/OEBackup/Default.aspx
> ===================================
>
>