Member Avatar for whyazid

I have a WINNT 4.0 server as a PDC. I am installing a new Server 2003. I want to make the new server as a BDC so that I can take all the domain user to the new server without creating a new user. Is there any method i can transfer the domain user if the Server 2003 could not be validated by the PDC

  • 3 Contributors
  • 2 Replies
  • 120 Views
  • 1 Year Discussion Span
  • Latest Post Latest Post by antioed

Dani AI

Generated

Short answer: you cannot make Windows Server 2003 act as a Windows NT 4.0 BDC. The PDC/BDC SAM-replication model used by NT4 is not how Server 2003/Active Directory works. That is why a Server 2003 machine will often "fail validation" if you try to join it as a BDC to an NT4 PDC.

As hinted, the supported, practical route is to migrate accounts into a new Active Directory domain rather than trying to make 2003 a BDC. Typical, safe workflow (outline) you can apply right away:

  1. Back up the NT4 PDC (full system state) and bring the NT4 server to the latest service pack/patch level. Clean up accounts and groups you will not migrate.
  2. Build the new Server 2003 Active Directory domain (test first in a lab). Ensure DNS, time sync and network name resolution between both environments.
  3. Establish the documented trust between the NT4 domain and the new AD domain per Microsoft’s migration guidance.
  4. On the AD side install the migration tool and, on the NT4 PDC, install the Password Export Server (PES) if you want to migrate passwords. Do a small pilot: migrate a handful of users, verify logons and access to file/print resources.
  5. Migrate users and groups (and if needed machines). Use the migration tool’s profile translation options so users keep their local profiles. Preserve SID history if required so users retain resource access.
  6. After full testing and cutover, demote/decommission the NT4 PDC per your plan.

Troubleshooting notes tied to the original validation problem: if validation/authentication fails during any step, check basic connectivity (DNS, NetBIOS/WINS if still used), firewalls/RPC/SMB ports, time sync, and that the account used has NT4 administrative rights. Do not skip backups and pilots—migrations involving NT4 domains commonly surface legacy quirks (old profiles, permissions, apps) that are safest to handle in a staged migration.

Recommended Answers

All 2 Replies

Member Avatar for ortontm

I have a WINNT 4.0 server as a PDC. I am installing a new Server 2003. I want to make the new server as a BDC so that I can take all the domain user to the new server without creating a new user. Is there any method i can transfer the domain user if the Server 2003 could not be validated by the PDC

I seen your question from Feb 2005, did you ever get an answer? I am currently trying to do the same thing. Any insight from your experience in this would really help.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.