Raising domain functional level from 2008r2 to 2012 r2

Hi have 3 domain controllers

2 2012r2 and 1 2008r2

Can I get the procedure to raise functional level to 2012R2?

Any pitfalls involved in this?

I'm assuming this would be out of hours work suggestions appreciated 👍👍
LVL 1
Indie101Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

RoninCommented:
Like this:
https://msdn.microsoft.com/en-us/library/cc753104(v=ws.11).aspx
You have to make sure that if you have any applications that depend and rely on the AD schema will continue to work. Probably the most common example is Exchange.
Usually the vendor of such application would know.
0
Lee W, MVPTechnology and Business Process AdvisorCommented:
You CAN'T raise it to 2012 - you have a 2008 R2 domain controller.  The functional level CANNOT be newer than the DCs running in the domain.
3
Tom CieslikIT EngineerCommented:
It looks like your 2008 DC is primary DC and is holding FSMO function
All you need to do is transfer FSMO to 2012R2 DC controller, this process will automatically rise domain function to 2012R2 schema.

Here you can find very useful step-by-step manual how to rise DC2012 and transfer FSMO

https://blogs.technet.microsoft.com/canitpro/2015/02/10/step-by-step-migrating-windows-server-2003-fsmo-roles-to-windows-server-2012-r2/
0
Acronis Data Cloud 7.8 Enhances Cyber Protection

A closer look at five essential enhancements that benefit end-users and help MSPs take their cloud data protection business further.

lruiz52Commented:
If you are going to raise functional levels to 2012 r2, all your domain controller must be running Windows 2012 r2. Since it looks like you still have a 2008 domain controller you must either upgrade it to 2012 r2, decommission it, or stay at 2008r2 functional level.

Take a look at the article below for more info.
http://thiagomarcel.com/index.php/2016/08/08/elevate-domain-level/
1
Jose Gabriel Ortega CastroCEOCommented:
1st, Check the Active directory roles:
Open a command window and run: netdom query fsmo
With this, you will get whos holding the Active directory roles.

2nd There are 2 Functional Levels (1 for Domain and 1 for Forest).

The Domain functional level MUST BE equal to the old OS in your Domain controllers ( As Lee says it's 2008R2) so you can't raise it.
The Forest Functional Level MUST BE equal to the Older Windows Server within your whole infrastructure which is 2008R2.

First, you need to understand what you're doing because you can break your AD infrastructure by doing such of changes without the required knowledge and possibly without backups.
1
Sekar ChinnakannuStaff EngineerCommented:
Yes you can perform off hours and its straight forward. Before you raise take backup...If you face an issue and then you can downgrade the same. For steps https://social.technet.microsoft.com/wiki/contents/articles/26377.downgrade-domain-functional-level-from-2012-r22012-to-2008r22008.aspx
0
Indie101Author Commented:
Thanks guys the 2012R2 DC has all the FSMO roles at present will have to sit down and plan this out thanks for the advice
0
Tom CieslikIT EngineerCommented:
If DC2012 has FSMO then all you have to do is go to DC Users and Computers, right click on your domain name / Operatiom Master and czeck if all function are pointing to CD 2012R2 , if does, then right click on domain name again and 5th option -> Raise domain functional level
0
Indie101Author Commented:
Thanks Tom, when i right click on the domain

All 3 three tabs, RID,PDC and Infrastrcuture show Operations master as 2012R2 with the 2008R2 option below this as the change option

I will wait until out of work before raising it, if its something you recommend?

 I should look at  an authoritative restore and making sure DSRM password is available first I guess :)
0
Tom CieslikIT EngineerCommented:
Rising Domain functionality doesn't harm users it's only replacing template in Active directory schema,
You can do it anytime, but if you want to wait to end of the day that's fine.

Full DC backup is always recommended. !!! :)
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Lee W, MVPTechnology and Business Process AdvisorCommented:
It seems like we need to repeat - you haven't said you're getting rid of the 2008 DC - until you do that, YOU CANNOT RAISE THE FUNCTIONAL LEVEL.  You also don't need to unless you want to use some of the features that require it or have some other need to.  By raising the level you won't be able to add back older DCs at some point if the need arises.
3
Indie101Author Commented:
Thanks Lee :) No I am not upgrading the 2008DC yet you're correct
0
Jose Gabriel Ortega CastroCEOCommented:
Then you don't need to make up things with your infrastructure because you are going to break something. 99% certain of it.
0
Indie101Author Commented:
Thanks for the info we have a gold partner consultancy firm who monitor environment I won't be changing anything unless 100% sure
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Server OS

From novice to tech pro — start learning today.