Avatar of GGHC
GGHC
 asked on

AD Schema Upgrade

I am currently in Windows 2008 AD Mode. I recently introduced 2 Windows 2012 R2 Domain Controller in 1 of our 4 sites.
I am looking to use gMSA feature. However it seems I have to extend the schema.
Is it possible to extend it with only 2 of 8 Domain Controllers being 2012R2?
If so, can on use gMSA on sites that only have 2008 DCs?
Windows OSWindows Server 2012* gMSAActive Directory

Avatar of undefined
Last Comment
GGHC

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
Lee W, MVP

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
GGHC

ASKER
Great! Thanks! Would the gMSA account have admin rights even on Domain Controllers?
For Example I have a task that needs to delete a file from the \System32\ on all Computers in domain. Can the gMSA account be able to do that? Anything special needed for that?
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes