Using WinSrv 2012r2 in Forest Function Level 2016

Question

Using WinSrv 2012r2 in Forest Function Level 2016

MMS Technology Service 20

Simple enough question. I have a Windows Server 2012r2 that is currently receiving security updates. This server holds no roles inside of my domain, and my DC's are Server 2022.

These DC's were created and roles migrated from older 2012r2 servers, but I have not elevated the DC FFL to 2016 due to not knowing if the Windows Server 2012 will still be functional in regards to user authentication.

This 2012r2 server currently hosts a SQL server for Dynamics GP, which we are moving towards a new ERP by 2026. It can not be updated past 2016 due to VB customizations that will not work in later versions of Server, so it's in it to win it.

If I elevate the forest function level of my DC, will this 2012r2 server still function appropriately since it does not have any active roles in my domain but does authenticate against domain for Dynamics GP access? I see no reason why they wouldn't, but if there is something I should do first to ensure auth issues do not occur that I may have missed I would be curious of those who've worked in similar situation/environment.

Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
MMS Technology Service 20 Reputation points

2024-01-21T22:49:29.51+00:00

I appreciate your response and candor.
Marius Ene 345 Reputation points

2024-01-22T12:31:34.1433333+00:00

Hi. Thank you for understanding. I am glad you aren't taking this the wrong way, I didn't mean come across as unpolite, if I did I apologize for that. But I just say the truth as I see it and while it can be harsh at time, I believe it's necessary to say it, for everyone's benefit, including yours. Now you have some feedback that can help you to improve. And maybe others as well.
MMS Technology Service 20 Reputation points

2024-01-22T12:51:24.61+00:00

Initially I had, only because there was a lot of assumption in the response that I hadn't gone through those routes first and first stop came here. However, I realized after you comment that I hadn't really added nuance to my question related to my concern and it came off the way you described. While I had read the documentation related to the utilization of OS's inside a heightened forest level, my greatest concern pertained specifically to the authorization between the SQL server and the raised forest while the SQL server sat on an older WinSrv version. I have seen WinSrv 2012r2 versions functioning inside 2016 forest levels function, but not ones that were hosting a SQL instance. Considering how much relied on this to continue functioning, and a little hesitation after searching and using ChatGPT, I wanted to come here for a human experienced approach to the question to possibly determine challenges I may come across.
So no harm, no foul. We are not all thin on the outer layers, and I am self critical enough to consider what you said and reevaluate (also having two responses that said similar things boosted my confidence a bit). Since you brought up GPT, here is the response it provided for any that might not have access. I copy/pasted the question as I wrote it here, and this is the response;

"Elevating the Forest Functional Level (FFL) in your Active Directory domain to a higher version, like Windows Server 2016, primarily affects the domain controllers and the features they can leverage. It doesn't directly impact member servers or their operating systems, as long as those servers meet the minimum operating system requirements for being part of the domain, which Windows Server 2012 R2 does in this case. However, it's important to understand the implications and considerations: Backward Compatibility: Windows Server 2012 R2 is compatible with a Windows Server 2016 Forest Functional Level. This means that the server should continue to authenticate normally and function as expected in the domain. No Downgrading: Once you elevate the FFL, you cannot revert it to a lower level. Ensure that all your domain controllers are running Windows Server 2016 or later before proceeding. Impact on Services: Since the 2012 R2 server is hosting a SQL server for Dynamics GP, its interaction with the domain is primarily for authentication and authorization. Elevating the FFL shouldn't directly impact these services, but it's always wise to verify compatibility with application vendors if possible. Testing: If feasible, test the FFL elevation in a controlled environment that mirrors your production setup. This can help identify any unforeseen issues. Backup and Documentation: Before making changes, ensure you have a complete backup of your domain controllers and critical servers. Also, document the current state of your environment for reference. Monitor After Changes: After making changes, monitor the server and the applications closely to ensure everything is functioning as expected. Consult Vendor Documentation: Check Microsoft's documentation and any relevant guidance from the vendors of your ERP system to ensure there are no known issues with this type of configuration. Security Considerations: Upgrading the FFL can bring enhanced security features, which is beneficial, but be aware of any new settings or features that might need configuration.

In conclusion, elevating the FFL to Windows Server 2016 should not adversely affect your Windows Server 2012 R2 server, especially since it's not a domain controller and is only using domain services for authentication. However, it's always prudent to proceed with caution, ensure backups, and test if possible."

I want to point out that "shouldn't" impact SQL function is more than enough word use for me to want to talk to someone more knowledgeable or possibly had been involved in a similar situation, which is why I came here and asked the question. Many of the other relevant parts of the warnings are already heeded. I don't have the best testing environment, but backups are handled appropriately if something does go awry. Ultimately, no harm no foul from my perspective. Keep on keepin' on.
Marius Ene 345 Reputation points

2024-01-22T13:20:57.5266667+00:00

Thanks for sharing that. Indeed, my reply would have sounded different had you started your question with something like "I've checked online and I need extra confirmation..." Regarding the GPT reply, it's quite useful honestly and it would easily speed up time for admins (like you and me) vs asking on forums waiting for answers, clarifications and so on. I use chatGPT all the time and its very useful to me. Where it lacks, and its understandable, is when asking complex scenarios for which there is no available information online, specific situations. In that case, asking on forums would be indicated and could help. Regarding the frequency of the word "shouldn't", this is because nobody can guarantee that it will work. I can't guarantee it, Microsoft can't guarantee and even less chatGPT. That is because there might be some customizations in your environment that nobody is aware of. To be sure, and as a best practice, create a test environment, create a test SQL instance and restore a backup the databases. Then you can upgrade the FFL and see if something breaks. Only then you can be confident there will be no issue with your upgrade. And yes, I know, testing environments are sometimes not ideal, but the assurance and value you gain by testing it, will be much better than any answer you get on forums. Also a comment about your backups, make sure you have tried at least once to restore them. Until you have tested those backups and ensured that you actually can restore your service, you are only assuming that it will work, you don't actually know that it will work. Cheers!

Accepted answer

0 additional answers

Your answer

Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
MMS Technology Service 20 Reputation points

2024-01-21T22:49:29.51+00:00

I appreciate your response and candor.
Marius Ene 345 Reputation points

2024-01-22T12:31:34.1433333+00:00

Hi. Thank you for understanding. I am glad you aren't taking this the wrong way, I didn't mean come across as unpolite, if I did I apologize for that. But I just say the truth as I see it and while it can be harsh at time, I believe it's necessary to say it, for everyone's benefit, including yours. Now you have some feedback that can help you to improve. And maybe others as well.
Marius Ene 345 Reputation points

2024-01-22T13:20:57.5266667+00:00

Thanks for sharing that. Indeed, my reply would have sounded different had you started your question with something like "I've checked online and I need extra confirmation..." Regarding the GPT reply, it's quite useful honestly and it would easily speed up time for admins (like you and me) vs asking on forums waiting for answers, clarifications and so on. I use chatGPT all the time and its very useful to me. Where it lacks, and its understandable, is when asking complex scenarios for which there is no available information online, specific situations. In that case, asking on forums would be indicated and could help. Regarding the frequency of the word "shouldn't", this is because nobody can guarantee that it will work. I can't guarantee it, Microsoft can't guarantee and even less chatGPT. That is because there might be some customizations in your environment that nobody is aware of. To be sure, and as a best practice, create a test environment, create a test SQL instance and restore a backup the databases. Then you can upgrade the FFL and see if something breaks. Only then you can be confident there will be no issue with your upgrade. And yes, I know, testing environments are sometimes not ideal, but the assurance and value you gain by testing it, will be much better than any answer you get on forums. Also a comment about your backups, make sure you have tried at least once to restore them. Until you have tested those backups and ensured that you actually can restore your service, you are only assuming that it will work, you don't actually know that it will work. Cheers!

Answer 1

Hi @MMS Technology Service •

The functional level defines the minimum version of the OS can be used to install domain controllers. This means that a member machine can be installed by an OS version lower than the functional level. So ,when the functional level is Windows 2016, you can have domain member machines with the Windows 2012 R2 version.

Regarding your question ,my answer is Yes , your SQL server under Windows 2012 R2 will still working after functional level upgrade to Windows 2016.

Please don't forget to accept helpful answer

Share via

Using WinSrv 2012r2 in Forest Function Level 2016

0 additional answers

Your answer