Incorrect DC version shown in Active directory users and computers

WinTechie 281 Reputation points
2021-08-31T13:36:01.3+00:00

Hi,

I have provisioned a 2 domain controllers on Azure VMs (windows server 2019 marketplace images)
strange part is, when I open active directory user and computers console, and select "change domain controller" by right clicking on Domain name.

I see both my DC with online state, but DC version shows windows server 2016 which seems to be strange to me, as it should be showing windows server 2019.

Windows Server 2019
Windows Server 2019
A Microsoft server operating system that supports enterprise-level management updated to data storage.
3,547 questions
0 comments No comments
{count} votes

5 answers

Sort by: Most helpful
  1. Jean-Valentin 6 Reputation points
    2022-11-28T09:26:32.717+00:00

    Hi All,
    I maybe found myself :)
    On the AD site and services, go on the NTDS Settings properties of one of my server with this strange behaviour, go on attribute editor then the not well updated attribute is msDS-Behaviour-Version
    264665-image.png

    I found this article, at the end they changed manually the attribute
    https://social.technet.microsoft.com/Forums/ie/en-US/91f7e8ab-b96f-4190-a289-801c005873c9/issue-with-msdsbehaviorversion?forum=winserverDS

    In doubt, I also rebooted my 4 RODC and verified the replication went fine.
    Now on Active Directory Domains and trusts, I could now Raise the Domain Functional Level

    I'll force the AD partition replications
    (Get-ADDomainController -Filter *).Name | Foreach-Object {repadmin /syncall $_ (Get-ADDomain).DistinguishedName /e /A | Out-Null}; Start-Sleep 10; Get-ADReplicationPartnerMetadata -Target "$env:userdnsdomain" -Scope Domain | Select-Object Server, LastReplicationSuccess

    Then on the afternoon, I'll raise my Forest Functional Level.

    Hope this resarch could help someone, one day.

    Regards,

    1 person found this answer helpful.
    0 comments No comments

  2. Dave Patrick 426.3K Reputation points MVP
    2021-08-31T13:48:56.977+00:00

    You may be looking at the functional level which is correct for Server 2019 (2016 functional level)
    https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/active-directory-functional-levels#windows-server-2019

    --please don't forget to upvote and Accept as answer if the reply is helpful--


  3. Limitless Technology 39,471 Reputation points
    2021-08-31T15:47:31.723+00:00

    Hello @WinTechie

    Please have a look on below Microsoft article to install AD role in 2019
    and verify its version in AD.

    https://social.technet.microsoft.com/wiki/contents/articles/52765.windows-server-2019-step-by-step-setup-active-directory-environment-using-powershell.aspx

    Thanks,

    0 comments No comments

  4. cthivierge 4,056 Reputation points
    2021-08-31T17:39:26.613+00:00

    I did a quick test in a test environment (on-prem) with a Windows 2008 R2 domain controller (no updates) and after adding the first 2019 DC, i didn't had any issue with the DC version.

    But i remember having this kind of issue several years ago but i think it was with a Windows 2000 or 2003 DC's... long time ago ;)

    0 comments No comments

  5. Jean-Valentin 6 Reputation points
    2022-11-25T09:59:03.37+00:00

    Hello,
    I've quite the same issue. Can you help me please?
    Small summary of the situation:
    I demoted 4 old 2012R2 and 2008 R2 RODC from my domain and replaced them by 2019 RODC,
    We have now any DC under 2016 in our AD. (Shema version 88 Windows 2019)
    I wanted to raise my domain functional level to 2016 but received the message : The server is unwilling to process the request.
    After searchig a lot on the net I fixed the ADSI Default naming context\lost and found folder. Also on System\DFSRGlobalSettings\Domainsystemvolume\topology, i removed old DC's.
    With Dcdiag /e /test:sysvolcheck /test:advertising, i fixed all the advertising errors (Due to a NTP error and Sysvol check was fine)
    Sysvol is replicating fine and AD 5 partition too.
    But I think I can't raise because of this :
    Get-ADDomainController -Filter *| Select Name,OperatingSystem | Sort-Object name show my os in Windows Server 2016 Datacenter or Windows Server 2019 Datacenter.
    But trying to change domain controller from ADUC or ADDT show them as W2K8 R2
    It mean the information is pointing to a different attribute. How can I update this information please?

    264148-image.png

    PS : Curently Forest and Domain functional level is : Windows Server 2008 R2

    0 comments No comments