Solved

Do we need to patch  all our 2008 and 2003 DCs if we are going to upgrade them to 2012?

Posted on 2014-11-26
4
80 Views
Last Modified: 2014-11-28
Hello,
Do we need to patch  all our 2008 and 2003 DCs if we are going to upgrade them to 2012?

Thank you very much.
0
Comment
Question by:claudiamcse
4 Comments
 
LVL 56

Expert Comment

by:Cliff Galiher
ID: 40468096
It is always a good idea to be fully patched before migrating. There are several patches that specifically fix issues that can cause a migration to fail.
0
 
LVL 92

Expert Comment

by:John Hurst
ID: 40468137
That and the Schannel vulnerability needs to be patched. This is a large security issue.
0
 
LVL 53

Accepted Solution

by:
McKnife earned 500 total points
ID: 40469733
You mean, your DCs are not patched? You are a courageous person.
What are you trying to do, doing an inplace upgrade installation or adding another DC to this domain?

If you are adding another new DC, the AD will be imported and file replication/DNS zone transfers will be setup. Normally, this will not require patches but of course, there might be bugs in this process that won't be present, when the downlevel systems are patched.

So without a doubt, fully patch those.
0
 

Author Closing Comment

by:claudiamcse
ID: 40470887
Thank you.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Resolve DNS query failed errors for Exchange
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

26 Experts available now in Live!

Get 1:1 Help Now