Works RPCoverHTTPS with W2K GC   

Hi Group,

in our AD two DC's are working also as a GlobalCatalog (GC). One of these
DC is working with W2K3/SP1, the other is working with W2K/SP4. The OS of
the Exchange 2003 also is a W2K3/SP1 as a memberserver. 

The question is whether RPCoverHTTPS is working when one Global Catalog
Server is running under Windows 2000?

A Microsoft WhitePaper says that all Global Catalog Server *must* be
running under Windows 2003 Server! Is this correct? If yes, how can we fix
this?

BTW: We known about the registry hack[1] to opening the port 6004 on the GC
but does it work under Windows 2000 also?

[1] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters
Reg_Multi_SZ "NSPI interface protocol sequences" Value: "ncacn_http:6004"

Bye Tom 
-- 
"Ich hatte vom Feeling her ein gutes Gefhl."
(Andy Mller)

date: Thu, 20 Oct 2005 10:37:07 +0200   author:   Thomas Wildgruber

Re: Works RPCoverHTTPS with W2K GC   

Hi,

All places where I looked for information about RPC over HTTP is says that
Windows 2003 DC's is required so lets assume that this is the case.

The only way to "fix" this would then be to make sure that all your DC's
obeys the prerequisit.

Leif

"Thomas Wildgruber"  skrev i en meddelelse
news:53tsfaqz9hnd$.dlg@pronto.org...
> Hi Group,
>
> in our AD two DC's are working also as a GlobalCatalog (GC). One of these
> DC is working with W2K3/SP1, the other is working with W2K/SP4. The OS of
> the Exchange 2003 also is a W2K3/SP1 as a memberserver.
>
> The question is whether RPCoverHTTPS is working when one Global Catalog
> Server is running under Windows 2000?
>
> A Microsoft WhitePaper says that all Global Catalog Server *must* be
> running under Windows 2003 Server! Is this correct? If yes, how can we fix
> this?
>
> BTW: We known about the registry hack[1] to opening the port 6004 on the
GC
> but does it work under Windows 2000 also?
>
> [1] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters
> Reg_Multi_SZ "NSPI interface protocol sequences" Value: "ncacn_http:6004"
>
> Bye Tom
> -- 
> "Ich hatte vom Feeling her ein gutes Gefhl."
> (Andy Mller)
>

date: Fri, 21 Oct 2005 17:44:58 +0200   author:   Leif Pedersen [MVP]

Re: Works RPCoverHTTPS with W2K GC   

Hi Leif,

On Fri, 21 Oct 2005 17:44:58 +0200, Leif Pedersen [MVP] wrote:

> All places where I looked for information about RPC over HTTP is says that
> Windows 2003 DC's is required so lets assume that this is the case.

Same same. I didn't found any HowTo which described a workaround for this
case. But in our AD we have a W2K3 DC which ist actually the master
(Roleholder of all FSMO roles) and a GC. But also we have a (secondary) DC
running under W2K and this one also is working as a GC. I kind of thought
maybe in this constellation there is a possibility to get RPCoverHTTPS
working as well ;-)
 
> The only way to "fix" this would then be to make sure that all your DC's
> obeys the prerequisit.

Anyway, now we have to options. First of all, we can recapture the GC of
the W2K DC. I think the requirements for this setup are given -> Only one
single domain in the forest and no trusted domains, so afaik in this case
it is allowed to run a GC with the infastructuremaster on one machine when
this is the only GC in this domain (forest). Only if there are more than
one GC are working in this setup, afaik every DC must be a GC. (but i'm not
sure)

The second one would be a inplace upgrade from the W2K DC to a working W2K3
-> damned i like it ;-)

Thanks for your attention, i hope my english was understandable ;-)

Bye Tom
-- 
"One good Whiskey a day, keeps the doctor away"

date: Fri, 21 Oct 2005 20:28:00 +0200   author:   Thomas Wildgruber