Make a 2012 server a domain conmtroller in 2003 domain

I want to make a 2012 member server a domain controller.  

Current set up is two Server 2003 domain controllers.  One of them is having issues so I want to demote it and promote a 2012 member server to a domain controller.  Can this be done if the FSMO domain controller is running Server 2003?  

Thanks,
cja
cja-tech-guyAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Cliff GaliherCommented:
Currently yes. But 2003 is officially out of support, so a security patch to 2012 could technically change this at any time.  Please please PLEASE plan on retiring both 2003 domain controllers, not just one. There is no good reason to keep running 2003 for infrastructure roles.
Jose Gabriel Ortega CastroCEO Faru Bonon IT - EE Solution ExpertCommented:
1. You need to make sure that FSMO are with the domain controller that is in good shape.
2. Remove the problematic 2003.
3. Make sure that your domain and forest functional levels are native 2003
    http://searchwindowsserver.techtarget.com/tip/Windows-Server-2003-functional-levels-What-they-mean-to-Active-Directory

4. deploy your server 2012.
5. Move FSMOs to the new 2012 DC.
6. Remove 2003 domains they have like 3 years out of support (taking Cliff considerations).
https://www.us-cert.gov/ncas/alerts/TA14-310A  (july 14,2015)
Tom CieslikIT EngineerCommented:
I think that steps should be like this:

1. Make sure your 2012 is a member of 2003 domain (you've said it is)
2. Install DC role on new 2012 server
3. Make it as secondary DC
4. Raise functionality level of your DC to 2008 or 2012
5. Transfer FSMO
6. Transfer DNS, DHCP... etc to new server
7. If you have Exchange, make sure is connecting to new 2012 DC, to test this, just shot down your old 2003 DC and make sure all authentications works
8. Demote your old 2003 server

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Jose Gabriel Ortega CastroCEO Faru Bonon IT - EE Solution ExpertCommented:
Tom the step 1 is incorrect, you don't need the server 2012 to be part of the domain since that's what you're doing when you promote it to a domain controller.
Life1430Commented:
Yes, this can be done
cja-tech-guyAuthor Commented:
The domain and forest levels are currently version 2000.  Should I raise the domain and forest functional levels to native 2003 before I promo the 2012 server to a domain controller?

When I move the FSMO roles to the 2012 domain controller will the 2003 domain controller become a back up domain controller?

I don't want to have just one DC and I'm not sure the old DC's, which are Dell PE 2950's can run Server 2012, so I may have to keep one of them running Server 2003 until we purchase a new server to replace them.

Thanks,
cja
Tom CieslikIT EngineerCommented:
You should rise domain functionality level to maximum level available for your controller and after you move FSMO to 2012 you should rise it again.
It's always good to have secondary DC in domain, so if you can just create another one, but if this is too expensive upgrade 2003 to 2008.
2003 is really too old to be safe.

According to Dell community forum it is possible to install Windows 2012 on PE2950

In addition to our newer 12th Generation & 11th Generation servers, This Microsoft RTM release of Windows Server 2012 has been installed successfully on 9th Generation PowerEdge Servers (i.e. PE1950, PE2900, PE2950, etc.)

As always, Dell will provide updated Windows Server 2012 drivers on support.dell.com as they become available, usually after our launch.

Below is a summary of the device drivers available in Windows Server 2012 RTM:

Network: Network Controller Cards Supported on Dell Platforms.

Broadcom NetXtreme I & II Gigabit Family on Dell platforms
Broadcom NetXtreme Gigabit Fiber & Ethernet Family on Dell platforms
Broadcom BCM570xx NetXtreme II GigE (NDIS) Family on Dell platforms
Broadcom BCM577xx NetXtreme II 10 GigE (NDIS) Family on Dell platforms
Broadcom BCM578xx NetXtreme I & II 10 GigE SFP+ Family on Dell platforms
Broadcom NetXtreme II 10 Gigabit Ethernet
Intel LOM & Network Daughter Cards on 12G platforms
Intel Gigabit Family of Server Adapters on Dell platforms
Intel 10GbE Ethernet Family of Server Adapters on Dell platforms
Brocade 10GbE Ethernet Adapter on Dell platforms
 

Storage:

Dell™ PowerEdge™ RAID Controller (PERC) 5, 6, 7, 8
Dell™ SAS RAID 5 and 6 family
Dell Internal tape adapters
 

Storage/HBA:

QLogic 246x and 256x Fiber Channel series Dell adapters and 82xx CNA adapters (NDIS only)
Emulex LightPulse 8GB (PCIe 2.0) /4GB (PCIe 1.0a) /2GB (PCIe 1.0) Dell adapters
Brocade 4G/ 8G/ 10G/ 16G Fiber Channel/FCoE series Dell adapters


http://en.community.dell.com/techcenter/os-applications/w/wiki/3492.windows-server-2012-inbox-driver-support-on-dell-poweredge-servers
cja-tech-guyAuthor Commented:
Will I be able to make the 2012 server a domain controller if domain functionality level is set to version 2000?
Tom CieslikIT EngineerCommented:
No, you must first rise functionality level to 2003

https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/upgrade-domain-controllers-to-windows-server-2012-r2-and-windows-server-2012#BKMK_UpgradeWorkflow


Install or use domain controllers that run Windows Server 2003 or later (Windows 2000DC is not supported and must be demoted prior installation).
Raise the forest functional level to Windows Server 2003 or higher.
Install domain controllers that run Windows Server 2012.
Remove or upgrade domain controllers that run earlier versions of Windows Server.

When you will promote W2012 as DC wizard will ask you automatically to rise Domain functional Level

Windows Server 2003
Supported Domain Controller Operating System:

Windows Server 2012 R2
Windows Server 2012
Windows Server 2008 R2
Windows Server 2008
Windows Server 2003

The Windows Server 2003 domain functional level is deprecated. When you create a new domain on a server that runs Windows Server 2012 R2, the domain functional level must be Windows Server 2008 or newer. For more details about supported domain functional levels in Windows Server 2012 R2, see Understanding Active Directory Domain Services (AD DS) Functional Levels and Upgrade Domain Controllers to Windows Server 2012 R2 and Windows Server 2012.
Jose Gabriel Ortega CastroCEO Faru Bonon IT - EE Solution ExpertCommented:
Nope must be 2003 as my answer says
cja-tech-guyAuthor Commented:
Thanks
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.