Installing my first 2003 DC into 2000 Native domain

[AndyNZ]

Hi all,
Im about to install my first 2003 AD controller into our domain and am wanting some advice on any gotchas etc.
Here's the plan.

1 Domain with 4 AD controllers over 2 sites.
1st 2003 DC will be installed on the site with the FSMO role holder to allow for faster /domainprep /forestprep.
All 2000 DC's are running Windows 2000 SP3 NOT SP4!
We have 1x Exchange 2003 server
Is this as simple as running the forest and domain prep commands and DCPromo-ing the 2003 server into the domain?
Will it have any affects on Group Policy - User Logons?
I want to run things in mixed mode for a while until im ready to upgrade the Terminal Server Licensing Server and the FSMO role holder.

Things I expect to be an issue.

1.) SMB signing with Win95 clients. We have a few Win95 dumb terminals that use Citrix. But I might disable the policy for this to be on the safe side.

2.) Internet Explorer Advanced Security thing. Does anyone leave this installed? It seems a pain unless its a public facing server.

3.) We have Safeword security tokens. The software updates the schema to allow for the tokens to work with logins. Hopefully the 2k3 schema updates do not conflict with/ overwrite these changes.

Is there anything else im missing?

Anyone want to share their experiences with this?

Thanks for your help in advance!

 

[asktheman]

You can install 2003 dc into the domain. you will have to make sure that you run ADPREP /forestprep and /Domainprep on the domain first.

It would be better to have SP4 installed. Is there any reason that you still only have sp3 for W2K.

After ADPREP has been successful, you can install your w2k3 DC, then when you have dcpromo'd the last windows 2000 dc out you can switch to native 2003 mode.

If you are running citrix. be careful with the TS licencing server. this may not work after the citrix server is restarted. as in a Windows 2003 domain the TS licencing server must be running on a w2k3 DC. (If there is a Citrix expert reading this please confirm of this is correct). I have see before that after an upgrade to Windows 2003 that TS Licencing server had to be reinstalled and the w2k3 TS licences added.