May I add Client Side Extensions for GPO's if you still have XP boxes? Some GPO's may or may not work because XP doesn't know about the new GPO's. Then again, I'm not sure if that matters if you don't up change your FFL or DFL.
From: David Lum [mailto:david....@nwea.org] Sent: Thursday, November 08, 2012 7:00 AM To: NT System Admin Issues Subject: Standing up 2K8DC - finally. Opinions? So, the slow waters here finally have us standing up our first W2K8 DC in our employee domain on Saturday. * We have already extended the schema * Have already gone through this list: http://blogs.technet.com/b/glennl/archive/2009/08/21/w2k3-to-w2k8-active -directory-upgrade-considerations.aspx * We have GPO's that already implement the LM Hash, older cryptology and the SMB-signing change, some others on that list don't apply. * We have confirmed with Microsoft (they were here a few months ago) that our AD infrastructure is healthy and configured as they'd recommend. * Exchange is hosted, not onsite I think this will be a no-brainer upgrade, but I am still going to have folks text VPN, Windows, Linux and Mac client logins and file accesses. Has anyone ever seen a crippling issue when adding the first 2008 DC to their 2003 domain? David Lum Sr. Systems Engineer // NWEATM Office 503.548.5229 // Cell (voice/text) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
