Raise Windows 2000 Domain from Mixed to Native Mode

This guide provides the necessary steps to convert a Microsoft Windows 2000 Active Directory domain from mixed mode to native mode. In Windows 2000, mixed mode allows backward compatibility with legacy Windows NT 4.0 backup domain controllers (BDCs), while native mode unlocks advanced Active Directory features such as universal security groups, group nesting, and SID history. Raising the domain mode is a permanent, one-way administrative action that must only be performed once all domain controllers are upgraded to Windows 2000 Server.

Prerequisites

  • Ensure that all Windows NT 4.0 BDCs in the domain have been upgraded to Windows 2000 Server or decommissioned. Once native mode is enabled, NT 4.0 domain controllers cannot participate in the domain.
  • Verify domain replication is healthy across all existing Windows 2000 domain controllers.
  • Log in to a domain controller using an account that belongs to the Domain Admins or Enterprise Admins group.

Steps to Change Domain Mode via Active Directory Users and Computers

  1. Click Start, point to Programs, point to Administrative Tools, and select Active Directory Users and Computers.
  2. In the console tree on the left, right-click the root domain node (the domain name you want to convert) and select Properties.
  3. In the domain properties dialog box, select the General tab.
  4. Locate the section labeled Domain operation mode. It will display the current status as: "Mixed mode (can have Windows NT 4.0 domain controllers)".
  5. Click the Change Mode button.
  6. A warning dialog box will appear stating: "After you change the domain mode to native mode, you cannot change the domain mode back to mixed mode. Do you want to change the domain mode?"
  7. Click OK to confirm the change.
  8. Click Apply, then click OK to close the domain properties window.

Verification and Propagation

The domain operation mode is now set to Native Mode. Allow sufficient time for the Active Directory change to replicate to all domain controllers in the forest. You can verify the change by reopening the domain's Properties dialog box; the Domain operation mode will now indicate "Native mode (only Windows 2000 domain controllers)", and the Change Mode button will be permanently disabled.