This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(176, 34%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EB%3C/text%3E%3C/svg%3E)
Hi,
I have issue with one old server (Win SBS 2008) I want to migrate. It is only one DC in this environment. I wanted to raise functional level from 2003 to 2008. In some articles was written that raising "Forest functional level" will also raise "Domain Functional Level" but that did not happen. Now FFL is on 2008 and DFL still on 2003. Also DFL wont raise at now. How big this problem is? Do I have to restore server from backup to state before raise?
Thank you.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
The two prerequisites to introducing the first 2019 domain controller are that domain functional level needs to be 2008 or higher and older sysvol FRS replication needs to have been migrated to DFSR
https://techcommunity.microsoft.com/t5/Storage-at-Microsoft/Streamlined-Migration-of-FRS-to-DFSR-SYSVOL/ba-p/425405
--please don't forget to upvote and Accept as answer if the reply is helpful--
Yes, I red that too. Thats why Im asking. Because until we raise 2003 to at lease 2008 all other operations are unachievable. So, isnt it safer to migrate it fully to at least 2012 R2 and get rid of old server and after that prepare 2019?
I may need a little guidance because this is not common scenario for me.
My qusetion is. When I add new DC (2012 R2) shoud I try to raise DFL again (still with old server or without it)?
You can introduce up to a 2016 domain controller in a 2003 DFL
The prerequisite before introducing the first 2016 domain controller: domain functional level needs to be 2003 or higher
I'd use dcdiag / repadmin tools to verify health correcting all errors found before starting any operations. Then stand up the new 2019, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over (optional), transfer pdc emulator role (optional), use dcdiag / repadmin tools to again verify health, when all is good you can decommission / demote old one.
--please don't forget to upvote and Accept as answer if the reply is helpful--
Ok.
So at first I can add new DC 2012 R2 or 2016 (we have license for 2012 R2) and it should work . Second, use "dcdiag / repadmin tools" (I may need further explanation) on that newly added DC to correct errors. Third try to raise DFL again (because 2019 needs at least 2008) and after that prepare 2019 DC.
Is that right?
I have issue with one old server (Win SBS 2008) I want to migrate. It is only one DC in this environment
What are you migrating to?
At first to WIn srv 2012 R2 and after that to win srv 2019.
What happens if you try?
Well I would to ask you because I dont know what this can cause when I try to add another DC to environment in this state.
I just tried to install Exch 2013 (on another new VM) for migration of mailboxes but instalation failed on "Preparing Organization".
Sorry, no clue on the exchange issue.
Please run;
Dcdiag /v /c /d /e /s:%computername% >C:\dcdiag.log
repadmin /showrepl >C:\repl.txt
ipconfig /all > C:\dc1.txt
then put unzipped text files up on OneDrive and share a link.
There it is: https://1drv.ms/u/s!AkyGi6cLOIMMa2RJ47vDrks3FWE?e=O6arBQ
A have performed all commands.
I was hoping for something that jumps out problematic but nothing here really. What happens when you try?
When I try to raise DFL it says "The Domain functional level cannot be raised: An operations error occurred".
You may be left with doing the restore.
Just checking if there's any progress or updates?
--please don't forget to upvote and Accept as answer if the reply is helpful--
I have found some errors in EventViewer:
NTDS (776) NTDSA: Database C:\Windows\ntds\ntds.dit: Index INDEX_00020078 of table datatable is corrupted (0).
NTDS (776) NTDSA: Database C:\Windows\ntds\ntds.dit: Index DRA_USN_index of table datatable is corrupted (0).
Should this be connected to the issue?
Not much to go on (event id and event source?) but doesn't sound good.
Source: NTDS ISAM
event ID: 467
Well I hope this can be resolved somehow.
A repair might be possible.
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/hh875504(v=ws.11)
--please don't forget to upvote and Accept as answer if the reply is helpful--
I have found these errors even before raising.
Everything seems working but I assume that there are some hidden issues.
If I go to restore will this be safe? I started another discussion about restore (https://learn.microsoft.com/en-us/answers/questions/634154/windows-server-with-exchange-restore.html) because Im afraid of issues with Exchange.
When I run repair should be the raising issue also solved?
When I run repair should be the raising issue also solved?
Doubtful
Something is definitely broken because normally you cannot raise the forest functional level before raising all domain functional levels. What's the results of (PowerShell)
Get-ADForest
Get-ADDomain
--please don't forget to upvote and Accept as answer if the reply is helpful--
This is result for both commands.
The term 'Get-ADForest' is not recognized as the name of a cmdlet, function, script file, or operable program. Check th
e spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:13
Did I miss anything?
Another method is from the Administrative Tools menu, select Active Directory Domains and Trusts
Right-click the root domain, then select Properties.
Under the General tab, the Domain functional level and Forest functional level is displayed on the screen.
It shows "DFL 2003" and "FFL 2008". Server is still running.
Do I have to restore it from backup? I have prepared (restored) VHDs (1. system, 2. data) from previous day, which it was both 2003 but there is also Exchange and WSUS on this server. So I would like to avoid big data loss.
