Windows Server 2012 R2 DC Procedure

Can someone point me to an article, or provide step by step instructions on how to promote a 2012 R2 server to a domain controller when your current DC is Windows Server 2003.  I've tried to raise the domain functional level of the 2012 R2 server, but it tells me I don't have to since the current DC is 2003.  But when I try to promote the 2012 R2 to a domain controller it tells me...

To update the domain functional level, the Active Directory Domain Controllers in the domain must be running the appropriate version of windows.            
            
domain Name            
sollitt.local            
            
Current domain functional level            
Windows Server 2003            
            
The following Active Directory Domain Controllers are running earlier versions of windows:            
domain Name      AD DC      Version of Windows
sollitt.local      srvsol02.sollitt.local      Windows Server 2003 5.2 (3790)
nplanekOffice ManagerAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Casey WeaverManaged Services Windows Engineer IIICommented:
Do both your DC's have all their updates? You need to have at least SP2 on the 2003 Server.
Tim PhillipsWindows Systems AdministratorCommented:
It would probably help to transfer FSMO roles over to the new domain controller.  Especially if you plan to decommission the 2k3 DC.  Check out this article on how to do that:
http://blogs.technet.com/b/canitpro/archive/2015/02/11/step-by-step-migrating-windows-server-2003-fsmo-roles-to-windows-server-2012-r2.aspx
nplanekOffice ManagerAuthor Commented:
Yes, they have SP2 installed.
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

Jeremy WeisingerSenior Network Consultant / EngineerCommented:
Is the domain and forest functional levels set to 2003?
Casey WeaverManaged Services Windows Engineer IIICommented:
Is your forest level 2003? Forest levels tend to get forgotten in upgrades.
nplanekOffice ManagerAuthor Commented:
How do I tell?
Jeremy WeisingerSenior Network Consultant / EngineerCommented:
Open AD Domains and Trusts, right-click on the root object and click Raise Forest Functional Level.
santhoshuCommented:
Do you still have your Windows Server 2003 in your environment?  If yes, you cannot raise your domain level to Windows 2012 unless you decommission your Windows 2003 domain.
nplanekOffice ManagerAuthor Commented:
Jeremy....it tells me the level is 2003 so it can't be raised.
Jeremy WeisingerSenior Network Consultant / EngineerCommented:
OK, let's back up a bit. In AD Users and Computers, when you navigate to the Domain Controllers OU, how many servers do you see?
nplanekOffice ManagerAuthor Commented:
Two
Jeremy WeisingerSenior Network Consultant / EngineerCommented:
OK, are you sure this server you're trying to promote isn't already a domain controller? Is one of the servers in the OU the 2012 server you're trying to promote?
nplanekOffice ManagerAuthor Commented:
No
Jeremy WeisingerSenior Network Consultant / EngineerCommented:
OK so we've established that the domain and forest functional levels are 2003.

Are you by any chance trying to install this as an RODC?

On the two domain controllers and the 2012 server, can you run ver at the command prompt and post the results?
nplanekOffice ManagerAuthor Commented:
Not as a RODC.

Versions 5.2.3790, 6.1.7601 and 6.3.9600
Will SzymkowskiSenior Solution ArchitectCommented:
can you run netdom query dc make sure that all of the DC's that are present are actually working DC's. I have seen issues where 2003 DC's were not properly removed from the environment which casued issues going to a differetn functional level until the old DC was removed using ADSIEdit.msc..


Will.
Jeremy WeisingerSenior Network Consultant / EngineerCommented:
OK, so everything looks good as far as versions go. Looking at the error you're getting, that's not one that I think gets generated when promoting a DC. I would expect that when trying to raise functional levels.

You may have already done this but let's just make sure.
To promote your 2012 server:
- In server Manager, click Manage and select Add Roles and Features
- Choose your server and select the Active Directory Domain Services to install.
- After the wizard finishes, click the notifications area in server manager and click Promote this server to a domain controller
- Follow the prompts
nplanekOffice ManagerAuthor Commented:
Active Directory Domain Services is already installed.

Will...would I run netdom query dc from a command prompt on any machine?
Jeremy WeisingerSenior Network Consultant / EngineerCommented:
Active Directory Domain Services is already installed.
Good, but did you run the domain controller promotion wizard?

What exactly do you do to promote the 2012 server?

- After the wizard finishes, click the notifications area in server manager and click Promote this server to a domain controller
- Follow the prompts
nplanekOffice ManagerAuthor Commented:
That's were it won't let me..

Verification of replica failed.  The forest functional level is Windows 2000.  To install ...........
Jeremy WeisingerSenior Network Consultant / EngineerCommented:
OK, so that's new info.

On the 2008 R2 DC, run these commands and post the results.

In Powershell:
Get-ADDomain | select DomainMode
Get-ADForest | select ForestMode
netdom query dc

Open in new window

nplanekOffice ManagerAuthor Commented:
See attached
Results.pdf
Jeremy WeisingerSenior Network Consultant / EngineerCommented:
Sorry I wasn't more specific. You need to have the AD module loaded.

Run this:
Import-Module activedirectory
Get-ADDomain | select DomainMode
Get-ADForest | select ForestMode

Open in new window

The netdom command gave us what we need there. It's just showing the two current DCs.
nplanekOffice ManagerAuthor Commented:
See attached....Forest shows 2000
Results.pdf
Jeremy WeisingerSenior Network Consultant / EngineerCommented:
OK, you need to raise the forest functional level.

$Forest = Get-ADForest
 Set-ADForestMode -Identity $Forest -Server $Forest.SchemaMaster -ForestMode 2

Open in new window

nplanekOffice ManagerAuthor Commented:
See attached....AD Web Services is running.  I stopped it and restarted and tried again.
Results.pdf
Jeremy WeisingerSenior Network Consultant / EngineerCommented:
OK, so the infrastructure master is on the 2003 server then.

Let's try Active Directory Domains and Trusts again. This time I posting a picture:
1. Open AD Domains and Trusts
2. Right-click on the root object (all the way at the top)
3. Click Raise Forest Functional Level.
ForestFunctionalLevel.png
nplanekOffice ManagerAuthor Commented:
See attached
Results.pdf
Jeremy WeisingerSenior Network Consultant / EngineerCommented:
You're not right-clicking on the correct object. Click where the green arrow is, not the red one.
ForestFunctionalLevel2.png
nplanekOffice ManagerAuthor Commented:
I'm so sorry....that worked.  See attached for new problem.  Should I make sure that all the DNS settings/info are the same as on the current DC server?
DNS-Results.pdf
Jeremy WeisingerSenior Network Consultant / EngineerCommented:
You can ignore that warning. Just make sure your 2012 server is pointed to a valid DNS server that hosts the domain zone(s) (usually your DCs). And if you're making the 2012 server a DNS server too, then point it to itself after it is fully replicated with the other DCs.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
nplanekOffice ManagerAuthor Commented:
All Jeremy's directions were clear and his knowledge is outstanding!
Jeremy WeisingerSenior Network Consultant / EngineerCommented:
Glad to help!
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.