Upgrade forest/domain when child domain/ tree domain

Question

Hi,

What to do if you want to upgrade forest/domain 2008r2 to 2012r2 when child domain/tree domain are/is present?

What would be the steps. What is the difference if you have child domain or tree domain and you want to upgrade "main" forest/ domain? Where do you start?
What are the other aspects when dealing with child/tree domain?
Thank you

Answer 1

Hi,

If you want upgrade the functional level from Windows server 2008 R2 to Windows 2012 R2, you have to start by raise the domain functional level of all child and root domain in the forest.

Regarding the domain functional upgrade , you can start by any child domain includes the root domain.

So , if there is no domain controller on windows 2008 R2 in a domain , you can proceed by upgrade its domain functional level to WIndows 2012 R2.

Please don't forget to mark this reply as answer if it help you to fix your issue

Answer 2

The recommended way to upgrade a domain is to promote domain controllers that run newer versions of Windows Server and demote older domain controllers as needed. That method is preferable to upgrading the operating system of an existing domain controller. This list covers general steps to follow before you promote a domain controller that runs a newer version of Windows Server:

Verify the target server meets system requirements.

Verify Application compatibility.

Verify security settings. For more information, see Deprecated features and behavior changes related to AD DS in Windows Server 2012 and Secure default settings in Windows Server 2008 and Windows Server 2008 R2.

Check connectivity to the target server from the computer where you plan to run the installation.

Check for availability of necessary operation master roles:

To install the first DC that runs Windows Server 2012 in an existing domain and forest, the machine where you run the installation needs connectivity to the schema master in order to run adprep /forestprep and the infrastructure master in order to run adprep /domainprep.
To install the first DC in a domain where the forest schema is already extended, you only need connectivity to infrastructure master.
To install or remove a domain in an existing forest, you need connectivity to the domain naming master.
Any domain controller installation also requires connectivity to the RID master.
If you are installing the first read-only domain controller in an existing forest, you need connectivity to the infrastructure master for each application directory partition, also known as a non-domain naming context or NDNC.

reference:https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/upgrade-domain-controllers-to-windows-server-2012-r2-and-windows-server-2012

Answer 3

》》》If the you will use account in root/parent domain , you have to add it member of enterprise admins to be able to upgrade the domain functional level of each child domain.

I agree with this method

Hope this information can help you

Best wishes

Vicky

Answer 4

Hi,
 
Just checking in to see if the information provided was helpful. Please let us know if you would like further assistance.
 
Best Regards,
Vicky

Answer 5

Hi,
 
Just want to confirm the current situations.
 
Please feel free to let us know if you need further assistance.
 
Best Regards,
Vicky