Hi everyone,
We are running a single forest/single domain with two domain controllers. Domain functional level is Windows 2000 Native. Forest functional level is Windows 2000. The two domain controllers are both Windows 2003.
We would like to add a 2008 R2 DC to the domain. Adprep /forestprep and adprep /domainprep /gpprep are done already and went fine.
Before we do the dcpromo on the 2008 R2 we would like to be sure about some things....
We are still using a bunch of NT4 workstations. On these systemes people login to the domain and use mapped network drives to access data on shared folders on our 2003 fileserver.
If I enable the "allow cryptography algorithms compatible with Windows NT 4.0" group policy setting of the "default domain controllers policy", will this be sufficient to:
- allow people to login to the domain from an NT4 workstation ?
- add new NT4 workstation to the domain (add computer account) ?
If I don't enable "allow cryptography algorithms compatible with Windows NT 4.0"
- will people be able to map a network drive to \\SRV2\share1 using an account present in the local SAM of SRV2 (2003 member server) ?
Thanks in advance !
Kind Regards
Stijn