No, it can't. A BDC has a read-only copy of the security database, this does
not exist in the W2K network architecture. All W2K DCs have a read/writeable
copy. The only way a W2K DC can participate in your domain is by upgrading
the existing NT4 PDC or installing NT4 on new server and then join + promote
+ upgrade.