I have a 2000 member server in a 2003 FFL/DFL domain with a 2003 DC. I'm hoping to stand up a new 2012R2 DC, transfer fsmo roles and demote the 2003DC.

If I keep the FFL/DFL at 2003, will the 2000 member server still be able to authenticate once I only have 2012 DCs?

closed as off-topic by Greg Askew, kasperd, mdpc, Diamant, HBruijn Feb 5 '16 at 13:58

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions should demonstrate reasonable business information technology management practices. Questions that relate to unsupported hardware or software platforms or unmaintained environments may not be suitable for Server Fault - see the help center." – Greg Askew, mdpc, Diamant, HBruijn
If this question can be reworded to fit the rules in the help center, please edit the question.


Every Windows O.S. starting with Windows 2000 will be able to authenticate against any Active Directory domain controller; you can only have issues if you still have NT 4.0 systems lingering around, because they only support old-style NTLM authentication which is not in use anymore on recent DCs.

That said, you really shouldn't keep Windows 2000 systems around, if at all possible.

Not the answer you're looking for? Browse other questions tagged or ask your own question.