将2000 ad升级到2003 ad，并更改域名的实验
Dc01 (第一台dc，作为test.com.cn域的主域控) Windows 2000 adv Ip 192.168.0.1
Netmask 255.255.255.0 Dns 192.168.0.1
Dc02(作为test.com.cn域的额外域控) Windows 2000 adv Ip 192.168.0.2
Netmask 255.255.255.0 Dns 192.168.0.1
Client1（作为客户端，win2000 pro） Ip 192.168.0.6
Net mask 255.255.255.0
我们在test.com.cn 域中建3个用户，分别为test,test1,test2
在dc01上建一个共享目录share，对test，test1，test2设置不同的访问权限 在test.com.cn域中设置组策略，隐藏客户端桌面上的我的文档 以上设置，均为了验证以后的实验需要。
实验开始
首先我们将client1加入域，分别用test，test1，test2三个用户登录，访问dc01上的共享目录。验证是否符合之前设置的权限
登录client1后，观察桌面，发现没有我的文档图标，说明组策略也正常应用
接着我们开始做ad的升级实验，将2000ad升级到2003R2
在升级之前，先安装win2000的support tools，然后运行dcdiag，看是ad是否存在错误，如果运行结果都pass，就可以接着做了。我们在dc01上安装support tools，并运行dcdiag Microsoft Windows 2000 [Version 5.00.2195] (C) 版权所有 1985-2000 Microsoft Corp.
C:\\Documents and Settings\\Administrator>dcdiag
DC Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial non skippeable tests
Testing server: Default-First-Site-Name\\DC01 Starting test: Connectivity
......................... DC01 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\\DC01 Starting test: Replications
......................... DC01 passed test Replications Starting test: NCSecDesc
......................... DC01 passed test NCSecDesc Starting test: NetLogons
......................... DC01 passed test NetLogons Starting test: Advertising
......................... DC01 passed test Advertising Starting test: KnowsOfRoleHolders
......................... DC01 passed test KnowsOfRoleHolders Starting test: RidManager
......................... DC01 passed test RidManager Starting test: MachineAccount
......................... DC01 passed test MachineAccount Starting test: Services
......................... DC01 passed test Services Starting test: ObjectsReplicated
......................... DC01 passed test ObjectsReplicated Starting test: frssysvol
......................... DC01 passed test frssysvol
