How to Add windows 2016 std as an additional domain controller to 2008 r2 server

Question

Dear friends,
I am using a domain controller with 2008 r2 currently planning to install an additional domain controller 2016 standard in remote location. I don't want to remove the existing domain controller.. Plz guide me how to setup an additional domain controller with out removing the existing domain. Site to site VPN every thing is working fine..

Answer 1

The prerequisite before introducing the first 2016 domain controller: domain functional level needs to be 2003 or higher

I'd use dcdiag / repadmin tools to verify health correcting all errors found before starting any operations. Then stand up the new 2016, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over (optional), transfer pdc emulator role (optional), use dcdiag / repadmin tools to again verify health, when all is good you can decommission / demote old one.

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

Hi,

1, Before adding the new dc or any other important changes, we should also make sure everything is working well, following command for your reference:
Dcdiag /v >c:\dcdiag1.log
Repadmin /showrepl >C:\repl.txt
Repadmin /showrepl *
2, To add the 2016 server as a DC, make sure the domain functional level is 2003 or higher.

3, (Optional) If the current domain and forest level is 2003, it is suggested to upgrade the domain and forest functional level to 2008R2,and use the DFSR to replicate the SYSVOL.It is necessary to add a 2019 server as DC in the future.
To check if the DFSR is used for the Sysvol replication, the following command can be used:
dfsrmig.exe /getglobalstate
If the Result: 3 (ELIMINATED) the DFSR is used for the replication.
If not, FRS should be migrated to DFSR:
https://learn.microsoft.com/en-us/windows-server/storage/dfs-replication/migrate-sysvol-to-dfsr

4, The new DC can be added, following for your reference:
https://www.petenetlive.com/KB/Article/0001262(third-party link)

Note:
It is suggested having at least 2 DCs in one single domain.
Before any critical changes for the DCs, remember to do a full backup of the DCs

This response contains a third-party link. We provide this link for easy reference.

Best Regards,

Answer 3

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--