Change of Forest Functional Level may cause problem with trust?

Hi at all,
I would to know if is there some critical issues with pre-existent external
Trust when you change Active Directory Forest Funtional Level (from Windows
2000 to Windows 2003 Native Mode)?

The doubt is in general if it is necessary to recreate the external Trusts
or no impact is expected.

Thanks!

Hi Maurizio

No issues with the different levels. The Levels only affect the way the
forest/domains within function and has no impact of external trusts
--
Garry Starck
MCITP, MCTS AD, MCSE 2003 Messaging, MCDBA


"Maurizio Arrigoni" wrote:

> Hi at all,
> I would to know if is there some critical issues with pre-existent external
> Trust when you change Active Directory Forest Funtional Level (from Windows
> 2000 to Windows 2003 Native Mode)?
>
> The doubt is in general if it is necessary to recreate the external Trusts
> or no impact is expected.
>
> Thanks!
>

Maurizio,
once you switch to the Windows Server 2003 forest functional level, you
might be able to take advantage of the forest trust relationship - which
gives you benefits of transitivity and Kerberos authentication (providing
that the "other" forest is also operating on Windows Server 2003 - or
higher - forest functional level)
Note that this is not a requirement - but simply an additional option you
have...

hth
Marcin

"Maurizio Arrigoni" <MaurizioArrigoni@discussions.microsoft.com> wrote in
message news:30ADF959-52C9-437C-9DB5-8084F57B9C88@microsoft.com...
> Hi at all,
> I would to know if is there some critical issues with pre-existent
> external
> Trust when you change Active Directory Forest Funtional Level (from
> Windows
> 2000 to Windows 2003 Native Mode)?
>
> The doubt is in general if it is necessary to recreate the external Trusts
> or no impact is expected.
>
> Thanks!
>

Hello Maurizio,

Does have no impact on the existing trust. Just as Marcin said check out
the new options you have. The link includse an overview from all levels up
to 2008 R2:
http://technet.microsoft.com/en-us/l.../cc771132.aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi at all,
> I would to know if is there some critical issues with pre-existent
> external
> Trust when you change Active Directory Forest Funtional Level (from
> Windows
> 2000 to Windows 2003 Native Mode)?
> The doubt is in general if it is necessary to recreate the external
> Trusts or no impact is expected.
>
> Thanks!
>

You can break a trust if one of the trusts is to an older NT domain.
Windows 2003 enforces a stricter security policy.

If this trust is with an NT domain I have an article on how to configure it
at:
http://www.pbbergs.com/windows/articles.htm

Select NT4 -v- Active Directory Trust

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.


"Maurizio Arrigoni" <MaurizioArrigoni@discussions.microsoft.com> wrote in
message news:30ADF959-52C9-437C-9DB5-8084F57B9C88@microsoft.com...
> Hi at all,
> I would to know if is there some critical issues with pre-existent
> external
> Trust when you change Active Directory Forest Funtional Level (from
> Windows
> 2000 to Windows 2003 Native Mode)?
>
> The doubt is in general if it is necessary to recreate the external Trusts
> or no impact is expected.
>
> Thanks!
>