I've got two servers we're using here (Dell poweredge 2800 xeon 3.4, 2g ram, 2003 server standard r2; Dell poweredge 2500 pIII 1.4ghz, 512m, win 2k server). The smaller server is going to be put on a dmz to be our webserver. I'm wondering if I need to upgrade to server 2003, and if I do should it be r2? Thanks.

It would be HIGHLY recommended to upgrade it to Windows 2003. W2k3's IIS is WAY more secure than Windows 2000's IIS, not to mention the entire OS as a whole. No, it doesn't need to be R2, but I'd put in more RAM into it. Also, since it will be in the DMZ, make sure you harden the OS following best practices. Get Microsoft's free download of Windows 2003 Security Guide for more info. "Enough, enough bowing down to disillusion! Hats off & applause to rogues & evolution! The ripple effect is too good not to mention. If you’re not affected, you’re not paying attention!"

I agree it should be 2003. Since you are saying the smaller server will be a web server, I would actually use the Web Edition of 2003 Server since that is what it is designed for and most of the security settings are in place for that. And why not make it R2? Since this will be a clean install, you might as well make it R2 right off the bat. The upgrade from 2003 to R2 is not free. Get the newest right away and be done with it.

I'll check into using the web edition. I'll be using it with a business application where the webserver will be talking to the database server running sql. So I'll need to install the application, we're using Everest all in one, and I just want to make sure I wouldn't run into restrictions because it's a web edition. Otherwise that seems like it would be the way to go. Thanks again.