In this exercise, you will change your domain mode from mixed to native and note the differences before and after the change.

Caution   The change to native mode affects your entire domain, and can only be performed one time.

To examine the domain in mixed mode

  1. Open Active Directory Users and Computers from the Administrative Tools menu.
  2. Expand nwtraders.msft, and then click Users.
  3. Right-click Users, point to New, and then click Group.
  4. Active Directory Users and Computers displays the Create New Object - (Group) dialog box.

    Which group scope is disabled for security groups? Why?

    Answer

    Universal security groups are available only in native mode domains.

  5. Click Cancel.
  6. Leave Active Directory Users and Computers open.

To change your domain from mixed mode to native mode

  1. Open the Properties dialog box for nwtraders.msft.
  2. On the General tab, click Change Mode.
  3. The Active Directory Service message box display, indicating that after you change the domain to native mode, you cannot change back to mixed mode.

  4. Click Yes, and then click OK to close the nwtraders.msft Properties dialog box.
  5. Note   Because of a limitation in this prerelease version of Microsoft Windows 2000, a message box appears stating that you must restart each domain controller when the change to native mode has replicated to it. This restart is not required.

  6. In the Active Directory Service dialog box, click OK.

To examine the domain in native mode

  1. Expand nwtraders.msft if necessary, and then click Users.
  2. Right-click Users, point to New, and then click Group.
  3. Active Directory Users and Computers displays the Create New Object - (Group) dialog box.

    Can you create security type Universal groups?

    Answer

    Yes.

  4. Click Cancel.
  5. What else can you do with groups in native mode that you cannot do in mixed mode?

    Answer

    In native mode, you can add a global group to a global group.

  6. Close Active Directory Users and Computers, and then log off.