Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat. The purpose of this eBook is to educate the reader about ransomware attacks.
Course Of The Month
1 day, 20 hours left to enrollBecome a Premium Member and unlock a new, free course in leading technologies each month.
Solved
Child Domain, Forest and Domain Functional Levels
Posted on 2014-11-21
Hi,
We have 7 domain controllers with 2008 domain functional level and 2003 forest functional level. I like to change the forest functional level to 2008. Also I want to add a child domain with a 2012 R2 domain controller
q1. Do I have to raise the forest functional level in all domain controllers or if I change it in the primary one will it replicate to others?
q2. When I add the 2012 R2 domain controller how do I tell it you work with 2008 domain functional level?
I don't have test system so I'm bit nervous doing this on the production before I get the correct knowledge.
Thank you.
We have 7 domain controllers with 2008 domain functional level and 2003 forest functional level. I like to change the forest functional level to 2008. Also I want to add a child domain with a 2012 R2 domain controller
q1. Do I have to raise the forest functional level in all domain controllers or if I change it in the primary one will it replicate to others?
q2. When I add the 2012 R2 domain controller how do I tell it you work with 2008 domain functional level?
I don't have test system so I'm bit nervous doing this on the production before I get the correct knowledge.
Thank you.
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
2
3 Comments
Active today
q1: you just have to raise the functional level on a single DC, that change will propagate throughout the domain.
reference links:
- http://blogs.technet.com/b/askpfeplat/archive/2012/09/03/introducing-the-first-windows-server-2012-domain-controller.aspx
- http://kpytko.pl/2012/09/07/adding-first-windows-server-2012-domain-controller-within-windows-200320082008r2-network/
- http://support.microsoft.com/kb/322692
- http://msdn.microsoft.com/en-us/library/cc753104.aspx
q2: when dcpromo'ing the 2012R2 server, it will assume the functional level that is currently in operation.
I recommend that you make a full backup (BMR with system state) of the server(s) that hold the FSMOs before you raise the functional level. This way, if there are complications, you could just do a Bare Metal Restore on the original hardware.
Raising the functional levels is somewhat uneventful process. Preparation is more involved than the actual execution of the task. Which amounts to selecting the new level and pressing a button.
Dan
reference links:
- http://blogs.technet.com/b/askpfeplat/archive/2012/09/03/introducing-the-first-windows-server-2012-domain-controller.aspx
- http://kpytko.pl/2012/09/07/adding-first-windows-server-2012-domain-controller-within-windows-200320082008r2-network/
- http://support.microsoft.com/kb/322692
- http://msdn.microsoft.com/en-us/library/cc753104.aspx
q2: when dcpromo'ing the 2012R2 server, it will assume the functional level that is currently in operation.
I recommend that you make a full backup (BMR with system state) of the server(s) that hold the FSMOs before you raise the functional level. This way, if there are complications, you could just do a Bare Metal Restore on the original hardware.
Raising the functional levels is somewhat uneventful process. Preparation is more involved than the actual execution of the task. Which amounts to selecting the new level and pressing a button.
Dan
Active 3 days ago
Thanks mate. this is very useful.
the new DC with 2012 is going to be a child domain. I will follow the same steps as creating a new 2012 domain right?
the new DC with 2012 is going to be a child domain. I will follow the same steps as creating a new 2012 domain right?
Active today
The functional level relationship between the forest and child domains is that the child domains cannot be lower than the forest domain\s functional level. But child domain could be at a higher functional level.
Reference link: https://social.technet.microsoft.com/Forums/windowsserver/en-US/7d0ab7d2-ec29-4e87-8a41-474c0dcba16e/raising-domain-functional-level-on-child-domain?forum=winserverDS
So the process of creating a child domain is the same. It will initially assume the functional level of the forest during creation. If you want to raise the child domain's functional level, then do so after verifying that the new domain functions as expected.
Dan
Reference link: https://social.technet.microsoft.com/Forums/windowsserver/en-US/7d0ab7d2-ec29-4e87-8a41-474c0dcba16e/raising-domain-functional-level-on-child-domain?forum=winserverDS
So the process of creating a child domain is the same. It will initially assume the functional level of the forest during creation. If you want to raise the child domain's functional level, then do so after verifying that the new domain functions as expected.
Dan
Featured Post
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
Did you know that more than 4 billion data records have been recorded as lost or stolen since 2013? It was a staggering number brought to our attention during last week’s
ManageEngine
webinar, where attendees received a comprehensive look at the ma…
A hard and fast method for reducing Active Directory Administrators members.
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten.
The USB drive must be s…
Are you ready to implement Active Directory best practices without reading 300+ pages?
You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
Suggested Courses
Course of the Month1 day, 20 hours left to enroll
717 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.