Upgrade Windows 2008 - 2012 domain

andreas bright 581 Reputation points
2023-10-05T18:02:46.19+00:00

Hi,

We have taken over a new customer, and this customer has the following configuration.

DC1 - Windows Server 2008 Standard (ADDS, DNS, NPS)

DC2 - Windows Server 2012 R2 Datacenter (FSMO roles) (ADDS, DNS, CA, DHCP)

DC3 - Windows Server 2008 R2 Datacenter (ADDS, DNS)

ForestMode : Windows2008Forest

DomainMode : Windows2008Domain

It is running on old VMware environment.


There are several steps here to bring this customer up and running on a safe platform :)

As of today they have bought a new physical server that is going to act like a domain controller, they have also purchased a new VMware environment, but this is not delivered yet, where there will be one virtual DC.

If I install a new domain controller with Windows Server 2022, will that work with a Domain and Forrest level on 2008 ?

What steps would you go ahead with to have this system up and running :) What would be the right starting point...

Thanks for any replys

/R

Andreas

Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Windows for business | Windows Server | Devices and deployment | Set up, install, or upgrade
Windows for business | Windows Server | User experience | Other
Windows for business | Windows Client for IT Pros | User experience | Other
0 comments No comments
{count} votes

Accepted answer
  1. Anonymous
    2023-10-05T18:07:54.4166667+00:00

    The two prerequisites to introducing the first 2019 or 2022 domain controller are that domain functional level needs to be 2008 or higher and older sysvol FRS replication needs to have been migrated to DFSR

    I'd use dcdiag / repadmin tools to verify health correcting all errors found before starting any operations. Then stand up the new 2019 or 2022, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over (optional), transfer pdc emulator role (optional), use dcdiag / repadmin tools to again verify health, when all is good you can decommission / demote old one.

    --please don't forget to close up the thread here by marking answer if the reply is helpful--

    1 person found this answer helpful.
    0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.