Determine Service Pack Levels

  • Article

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Before preparing your infrastructure for upgrade and installing the Windows Server 2003 operating system, all Windows 2000–based domain controllers in the forest must be running Windows 2000 Service Pack 1 (SP1) with hotfix 265089, or Windows 2000 SP2 (or later).

Hotfix 265089 (included in Windows 2000 SP2 and later) is required to prevent potential domain controller corruption. Use the repadmin /showattr command to inventory the operating system and service pack revision level on all domain controllers in a particular domain.

Note

  • When administering Windows 2000–based domain controllers from a computer running Windows XP Professional or Windows Server 2003, you might experience interoperability problems with the Windows Server 2003 administrative tools unless your Windows 2000–based domain controllers are running Windows 2000 SP3 or later. Some Windows Server 2003 Active Directory administrative tools sign and encrypt all LDAP traffic. Computers running Windows 2000 SP3 or later can interpret the signed and encrypted LDAP traffic.

To determine domain controller operating system and service pack levels

  • For each domain in the forest, type the following command at the command line of a computer that has the Windows Server 2003 support tools installed:

    repadmin /showattr domain controller in target domain ncobj:domain: /filter:"(&(objectcategory=computer)(primaryGroupID=516))” /subtree /atts:operatingSystem,operatingSystemVersion,operatingSystemServicePack

    The following text is sample output from this command:

    DN: CN=NA-DC-01,OU=Domain Controllers,DC=company,DC=com
    1> operatingSystem: Windows Server 2003
    1> operatingSystemVersion: 5.2 (3663)
DN: CN=NA-DC-02,OU=Domain Controllers,DC=company,DC=com
    1> operatingSystem: Windows 2000 Server
    1> operatingSystemVersion: 5.0 (2195)
    1> operatingSystemServicePack: Service Pack 3

    Note

    • The repadmin /showattr command does not show any hotfixes that might be installed on a domain controller.

Upgrade domain controllers to the appropriate service pack as needed. For more information about recommended hotfixes to use with Service Pack 2, see article 331161, "List of Fixes to Use on Windows 2000 Domain Controllers Before You Run the Adprep/Forestprep Command" in the Microsoft Knowledge Base. To find this article, see the Microsoft Knowledge Base link on the Web Resources page at https://www.microsoft.com/windows/reskits/webresources.