Upgrading Domain to Windows 2012 R2

Posted on 2016-10-15
Last Modified: 2016-12-09
My domain at work is very large 8 Windows 2008 R2 DC and 1 RODC in the DMZ. We are looking to upgrade our domain to Windows 2012 R2. Would like to go to Windows 2016 but way to new since it just went GA this week. I need to keep the same DC names and was planning on take one DC demoting it: doing a fresh install of Windows 2012 R2 then promoting it.

1) Should I do the DC hold all of our FSMO roles first or last for the upgrade?
2) Would it be better to add a small temp WInodws 2012 R2 DC just to introduce a Widows 2012 R2 DC to the environment first or not need and just take an existing DC and demoting it
Question by:compdigit44
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2

Expert Comment

by:Niten Kumar
ID: 41845302
1.  Transfer the FSMO roles right at the end
2.  Good idea to introduce a temp domain controller to test see if all goes AD replication, sysvol etc
LVL 20

Author Comment

ID: 41845694
I usually do not like adding more server but adding one temp one first would allow use to test integration with our existing 2008 R2 servers without taking an existing server offline. Also our DL and FL is already at Windows 2008 R2.. Anything else I am missing here. I always like to talk something like this through multiple times. The AD promotion Wizard will automatically kick off a domain and schema update correct?
LVL 30

Expert Comment

by:Rich Weissler
ID: 41845806
> The AD promotion Wizard will automatically kick off a domain and schema update correct?

Yes, in Server 2012 R2, when you perform the configuration on the first server after installing the Active Directory Domain Services, the process will perform the necessary schema updates (which had been a separate process in the 'old days',) so make certain you're performing that configuration as a Schema Admin.

I'm more on the fence concerning introducing a temp domain controller, which you'll need to make certain gets cleaned up at the end of the process.  I suppose it would come down to asking how redundant the domain controller services are in each site.

In the past, I've have the new computer built and available... and after the old DC is demoted, rename it and give it a new IP address... then rename the new computer to the old DC name and give it the old IP address name.   Only then do I promote the new computer to be a DC.  Your mileage may vary.

[paranoid]  And I'm certain it's in your plan already, but just to talk things thru and spell out assumptions... as you demote each domain controller, you'll be moving the FSMO off the 'soon to be retiring server' first, and giving any transfers time to propagate before demotion...   (I.e. there shouldn't ever be a case where a domain controller being demoted has one of those roles.)
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

LVL 20

Author Comment

ID: 41845846
Our AD environment is very health and we have 8 DC's... I do not know if it is best to spin up a new VM as 2012 R2 or demote and existing server and do a fresh install?? All DC need to have the same name and ip
LVL 30

Accepted Solution

Rich Weissler earned 250 total points
ID: 41846021
There are a couple factors that would drive me towards a decision between building a new VM vs reusing the old hardware.
How old is the hardware?  How much warranty is left on the old server hardware?
How much experience do you have with your virtualization environment and is it at least reasonably up to date?  (Really old virtualization environments shouldn't actually support virtual domain controllers... but I assume you're running relatively current...)

For my $0.02, all else being equal, I'd lean towards spinning up a new VM.

Assisted Solution

by:Niten Kumar
Niten Kumar earned 250 total points
ID: 41846252
Also note that if you have multiple sites and dc's at sites are not redundant then login issues can occur if you choose to demote and reinstall. If you have multiple dc's at sites then there shouldnt be any problem. The login issue will depend on how many users you have in the sites and how good is your site to site link.
LVL 20

Author Comment

ID: 41846954
Are hardware is underwarrnty until 2019, we have a very large VMware environment with 80 host and 900 VM's

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
Compliance and data security require steps be taken to prevent unauthorized users from copying data.  Here's one method to prevent data theft via USB drives (and writable optical media).
In this Micro Tutorial viewers will learn how to restore their server from Bare Metal Backup image created with Windows Server Backup feature. As an example Windows 2012R2 is used.
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

630 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question