Comments on: Windows Server 2008: How to install and configure an RODC http://4sysops.com/archives/windows-server-2008-how-to-install-and-configure-an-rodc/ For Windows Administrators Fri, 20 Nov 2009 22:25:43 -0500 http://wordpress.org/?v=abc hourly 1 By: Michael http://4sysops.com/archives/windows-server-2008-how-to-install-and-configure-an-rodc/comment-page-1/#comment-70183 Michael Tue, 20 May 2008 18:12:53 +0000 http://4sysops.com/archives/windows-server-2008-how-to-install-and-configure-and-rodc/#comment-70183 That’s interesting. I wasn’t aware of that. I think that is a good example how RODC increases the complexity and risk for new kinds of problems. That’s interesting. I wasn’t aware of that. I think that is a good example how RODC increases the complexity and risk for new kinds of problems.

]]> By: Dean http://4sysops.com/archives/windows-server-2008-how-to-install-and-configure-an-rodc/comment-page-1/#comment-69328 Dean Fri, 16 May 2008 16:11:46 +0000 http://4sysops.com/archives/windows-server-2008-how-to-install-and-configure-and-rodc/#comment-69328 If you add a Windows Server 2008 to a domain and promote it as a DC it does not hold any FSMO roles and is not a GC by default. The only exception is when you create the first DC in a domain. Just adding a Windows Server 2008 DC to the domain doesn’t mean that you can install RODC in it too – actually you can and that’s when you will experience problems. You have to make sure that the Windows Server 2008 DC is configured (and is really functioning) as a GC and the PDC master role has been transferred to it. Dean http://www.netometer.com If you add a Windows Server 2008 to a domain and promote it as a DC it does not hold any FSMO roles and is not a GC by default. The only exception is when you create the first DC in a domain.
Just adding a Windows Server 2008 DC to the domain doesn’t mean that you can install RODC in it too – actually you can and that’s when you will experience problems. You have to make sure that the Windows Server 2008 DC is configured (and is really functioning) as a GC and the PDC master role has been transferred to it.

Dean
http://www.netometer.com

]]> By: Michael http://4sysops.com/archives/windows-server-2008-how-to-install-and-configure-an-rodc/comment-page-1/#comment-69324 Michael Fri, 16 May 2008 15:53:35 +0000 http://4sysops.com/archives/windows-server-2008-how-to-install-and-configure-and-rodc/#comment-69324 Dean, as far as I know you can’t even install an RODC if there isn’t at least one Windows Sever 2008 DC in the same domain. Dean, as far as I know you can’t even install an RODC if there isn’t at least one Windows Sever 2008 DC in the same domain.

]]> By: Dean http://4sysops.com/archives/windows-server-2008-how-to-install-and-configure-an-rodc/comment-page-1/#comment-68832 Dean Wed, 14 May 2008 05:42:49 +0000 http://4sysops.com/archives/windows-server-2008-how-to-install-and-configure-and-rodc/#comment-68832 One ore detail, Michael – I have already users that complained when they’ve missed that detail – you must have Windows Server 2008 GC and PDC in the domain where the RODC is installed, otherwise you will experience problems. For example if an account is locked out the result will not be reflected by a RWDC. If I have to add something it is that the easier way to install DC or RODC on a Windows Server 2008 Core installation is using the Core Configurator: http://www.netometer.com/video/tutorials/2008-server-core-dcpromo-coreconfigurator/ Another useful feature is the IFM (Install From Media) which is also demonstratd at Netomer.com Regards, Dean Stefanov http://www.netometer.com One ore detail, Michael – I have already users that complained when they’ve missed that detail – you must have Windows Server 2008 GC and PDC in the domain where the RODC is installed, otherwise you will experience problems. For example if an account is locked out the result will not be reflected by a RWDC.
If I have to add something it is that the easier way to install DC or RODC on a Windows Server 2008 Core installation is using the Core Configurator:
http://www.netometer.com/video/tutorials/2008-server-core-dcpromo-coreconfigurator/

Another useful feature is the IFM (Install From Media) which is also demonstratd at Netomer.com

Regards,

Dean Stefanov
http://www.netometer.com

]]>