FSMO role transfer from Windows Server 2008R2 DC to Windows Server 2016.

Question

We are in the process of upgrading our domain controller environment from Windows Server 2008R2 to Windows Server 2016. Our domain DFL/FFL level is 2008. We now plan to transfer FSMO role from WindowsServer2008R2DC node to WindowsServer2016. Needed checklist on what are the things we need to check and validate before transferring the FSMO role.

Also can we re-transfer the role back to Windows Server 2008R2 in case we identify any issue?

Answer 1

Hi,

Of course you can move fsmo roles temporarily to another domain controller without any impact.

Before moving fsmo roles check the domain controller and replication health.

For the PDC role , you should move it to a domain controller able to communicate with all other DCs in same domain to ensure time synchronization and password reset.

please don’t forget to accept correct answer to close your thread

Answer 2

Transferring roles to / from is not a problem.

I'd use dcdiag / repadmin tools to verify health correcting all errors found before starting any operations. Then stand up the new 2016, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over (optional), transfer pdc emulator role (optional), use dcdiag / repadmin tools to again verify health, when all is good you can decommission / demote old one.

Also at some point either before or after (if not already done) I'd recommend migrating sysvol replication from older FRS technology to DFSR

--please don't forget to upvote and Accept as answer if the reply is helpful--