Upgrade AD when adding 2008 Server to Domain

We have added a new Windows 2008 Server (which will be a Terminal Server) to
our Windows 2003 AD Domain. Do we need to update the AD Schema? Our AD Policy
acts weird on the new server. Sometimes printers do not show up, then the run
command is enabled, then at times the task manager is enabled. We try and
lock down all of our TS Servers.

Thank you for your assistance.

Howdie!

Patriot schrieb:
> We have added a new Windows 2008 Server (which will be a Terminal Server) to
> our Windows 2003 AD Domain. Do we need to update the AD Schema? Our AD Policy
> acts weird on the new server. Sometimes printers do not show up, then the run
> command is enabled, then at times the task manager is enabled. We try and
> lock down all of our TS Servers.

No need to tweak anything specifically. You'd have to if the 2008 server
was a new Domain Controller.

Have you checked rsop.msc if the correct policies apply? Have you
checked whether the "weird" behavior is user specific? I know loopback
processing may confuse people sometimes..

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
ANY advice you get on the Newsgroups should be tested thoroughly in your
lab.

Hello Patriot,

Upgrading the schema is not needed for adding 2008 member servers to the
domain. As Florian states, ckeck if loopback policy is enabled on the OU
where the TS is located and if yes, which setting is choosen.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> We have added a new Windows 2008 Server (which will be a Terminal
> Server) to our Windows 2003 AD Domain. Do we need to update the AD
> Schema? Our AD Policy acts weird on the new server. Sometimes printers
> do not show up, then the run command is enabled, then at times the
> task manager is enabled. We try and lock down all of our TS Servers.
>
> Thank you for your assistance.
>