Share via

Migrating Domain from 2003 to 2008 Procedures

ian wilson 21 Reputation points
2022-07-13T10:57:03+00:00

I have a Domain consisting of two Server 2012R2 Domain controllers with a Domain and Forest Functional level of Windows Server 2003.

I need to replace these Domain Controllers with 2x Server 2016 and some initial research suggests a number of actions required, particularly with regard to moving from FRS replication to DFS Replication.

I believe the actions are these below. Grateful if anyone can confirm these are all the actions ,are they in the correct order and can you help with the questions on each line?:-

1) Move Forest Functional level from 2003 to 2008
2) Migrate to DFSR using powershell/dfsrmig (Do I need to do this on all dcs?)
3) Disable FRS service on all DCs
4) Move Domain Functional Level to 2008
5) Build new 2016 DC servers (will these automatically use DFSR?)
6) Migrate FSMO roles to new server (PDC)
7) Uninstall AD from old server 2012R2 Servers

Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Accepted answer
  1. Mark Taylor 331 Reputation points
    2022-07-13T11:09:41.717+00:00

    Looks good to me.
    you only run dfsrmig on one DC (preferably the PDC emulator) as per dfsrmig tool instructions

    Active Directory replication replicates the global state to other domain controllers in the domain, but because of replication latencies, you can get inconsistencies if you run dfsrmig /getglobalstate on a domain controller other than the PDC emulator.

    1 person found this answer helpful.
    0 comments

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2022-07-13T14:09:10.96+00:00

    The prerequisite before introducing the first 2016 domain controller: domain functional level needs to be 2003 or higher

    I'd use dcdiag / repadmin tools to verify health correcting all errors found before starting any operations. Then stand up the new 2016, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over (optional), transfer pdc emulator role (optional), use dcdiag / repadmin tools to again verify health, when all is good you can decommission / demote old one.

    As to FRS->DFSR you can do this either before or after, just make sure health is 100% before beginning.
    https://techcommunity.microsoft.com/t5/Storage-at-Microsoft/Streamlined-Migration-of-FRS-to-DFSR-SYSVOL/ba-p/425405

    --please don't forget to upvote and Accept as answer if the reply is helpful--

    1 person found this answer helpful.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.