Monitor Domain Controller for Authentication Requests

Question

Hi,

I ned to migrate some 2008 R2 DCs. I'm going to stand up some 2016 DCs and migrate FSMO, DHCP etc., but what's the best way to force clients to never use the 2008 DCs and/or monitor them to see what ongoing clients/applications are using them?

I know of LDAP Server Weight and Priority reg keys but never had a reason to use them. This is a specific scenario where it could seem appropriate?

Thanks

Answer 1

Should just happen automatically unless you have somehow hard coded clients. Just check your DHCP server is handing out the addresses for the new domain controllers Also something here may also help.
https://support.microsoft.com/en-us/help/556015

--please don't forget to Accept as answer if the reply is helpful--

Answer 2

I'm concerned some legacy apps will be hard-coded

Still should work, just setup the logging.

--please don't forget to Accept as answer if the reply is helpful--