Active Directory Functionality Level and Trust
At the moment, I'm getting ready to do a pristine migration of NT to 2003. So right now, I have one DC in 2003 that run an AD in "Windows 2000 mixed" functional level with a two-way trust to a NT 4 Domain.
At the moment, I can take AD User and add them in NT 4.0 Security Group but I'm unable to add NT users into AD Group. Only the Universal Groups can contain users from another domain in an AD but right now, I cannot create Universal group because my AD is not in Windows 2000 native or Windows 2003 functionality level.
Question : Will raising my AD functionally level to Windows 2000 native or Windows 2003 will broke my two-trust between my 2003 AD and NT Domain??
Google all you want, but...
The answer you seek is not that apparent. Your accounts will have to be migrated to W2K because of the ASD. (Look to Novell 4.5...that is where Microsoft got/bought this technological innovation from!) Although you do not have to worry about your TRUST relationships...as soon as you enacted an AD you told your network that the new Sheriff in town was W2K. Your NT domain will still exist, but all changes that you want to impose on your network (including policies, user rights, etc.) will have to be declared by the FOREST/TREE!