Server 2016 ESSENTIALS, bringing into existing SBS 2008 domain

I have a customer with a SBS 2008 server (yes, the one with Exchange 2007) that is transitioning straight to Server 2016 Essentials version.  My questions are these:

1) I believe I found that I cannot migrate from this version of SBS, can anyone confirm?  The end goal is the remove the SBS server (Exchange is going online/cutover migration) and be left with just the 2016 Essentials with the roles and file shares.

2) Am I better off adding the existing pc's to a newly created domain on the Essentials 2016 server?  I have less than 10 client pc's and am fine with that if its the recommended method.

3) The server came preloaded and was already added to the existing domain manually and had the DC role added. If #2 is the way to go,  can I remove it without reinstalling to reset the wizard?

Trish BenningfieldTECHGRLAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Cliff GaliherCommented:
1) you can directly migrate.
2) This path is a significant interruption of end-user productivity. I recommend migrating if possible.
3) See #2.
Asif BacchusI.T. ConsultantCommented:
I agree with Cliff that creating a new domain could be a productivity issue.  However, you do need to realize that you are jumping about a decade up in technology going from SBS2008 to WSS2016.  There are numerous new options and security fixes that have been implemented as well as different ways of doing things.  In addition, you have to look at migration in terms of your AD functional level, IPv6 readiness and security issues surrounding SMBv1/SMBv2, etc.

I mention all this because if you have the time and necessary skills, you could set up the new server separately from your present infrastructure.  You'd have to transition (re-create) group policies, mapped drives, shared folder structures, printer deployments, users and groups, remote access, etc. Then, you can transition all the workstations and users to the new domain with the WSS2016 server during a downtime window (over a weekend/overnight depending on your schedule).  This way, you have a chance to correct any previous bad configurations in your old network and you get to enjoy all the features available to you in your new, clean, WSS2016 environment.

Obviously, this could be A LOT of work depending on your environment and is only possible if you can afford the downtime and if you have a decent understanding of how to setup WSS2016.  If you need an overview, you can check out my blog at 
I'm migrating the guide right now, but it's an overview of common WSS2016 setup tasks starting right from bare metal and including setting up DNS, DHCP, certificate services, IIS, remote access, integrated and offsite backup, etc.

Anyways, just thought I'd offer my two cents.  I think it's at least worth considering moving to a totally new infrastructure instead of migrating your decade old one.
Trish BenningfieldTECHGRLAuthor Commented:
Thank you both!  I did find the Migration Guide.  I have migrated and upgraded several SBS servers, and many more standard Windows Server versions, nothing with Essentials however.  My thought was also along the same lines as yours Asif-- the server is already so old and problematic with only a handful of users and systems, all with the same config and security.  Most of the client devices are Macs and aren't using any of the services short of DHCP and DNS.

The new Essentials 2016 server is added to the SBS domain  (was added through control panel, system, join domain) and reports it is a DC, but running the "Configure windows server essentials" consistently states the server needs to restart.  At this point I am looking for the fastest solution to get it properly functional.


 Acronis Global Cyber Summit 2019 in Miami

The Acronis Global Cyber Summit 2019 will be held at the Fontainebleau Miami Beach Resort on October 13–16, 2019, and it promises to be the must-attend event for IT infrastructure managers, CIOs, service providers, value-added resellers, ISVs, and developers.

Asif BacchusI.T. ConsultantCommented:
Your WSS2016 is joined to the same domain as the SBS2008?  SBS only allows for itself to be the DC, so that's a problem.  Are you looking at setting up a new domain?  If so, can you reinstall WSS2016 and start from scratch or do you have to keep using the existing install?  Let me know the answers to those questions and I'll be happy to give you an opinion on possible next steps.

I'd recommend a clean install with a new domain, especially so you can avoid any .local nonsense, but if you want to go another route, just let me know.
Trish BenningfieldTECHGRLAuthor Commented:
Yes, it was joined as a member server out of the box, and the ADDS role was added manually after; running the post-deployment configuration wizard launches the "Configure Windows Server Essentials" wizard, and it identifies the system is already a DC.  Configure fails with "Please restart the server and then run the configuration wizard again" error.  The system cannot be dropped from the domain either, as it knows its a DC.  No preference at this point, just looking for any light at the end of this tunnel to get out of this mis-step.  TIA very much. :-)
Asif BacchusI.T. ConsultantCommented:
You have two options at this point and really it's up to you depending on your timeline and amount of work you want to put into it :-P  

1)   Continue with the present setup and resolve the WSE wizard issue
The most common errors causing the issue you are describing are either that not all FSMO roles were successfully set up dcpromo was run (it was probably done manually instead of letting the wizard do it) or that the WSE wizard account is not granted the appropriate permissions (event 7000 and/or 7041 will be in your logs).  These are usually pretty easy fixes.  But, if it's something else, you could be looking at a re-install anyways or using your server without the Server Essentials Experience.

2)   Wipe the system and start clean with a new domain and proper setup
I recommend this option.  I've always found that if you start using a server that has errors in the initial installation, you get weird wonky errors down the road that make no sense.  You would also benefit from getting to choose an internal domain that is NOT a .local tld.  All the other benefits (AD functional level, etc.) are probably not very useful to you since your clients are all Mac anyways.  But, it's nice to have everything new and shiny.  Based on what I've heard of your setup, you wouldn't be losing anything by setting up a new domain and following best-practices since it's not like you're managing client systems.  You're probably just providing DHCP, DNS and possibly file shares, right?

A clean setup is really simple on WSE2016.  For what you need, check out my blog at  Part II covers naming your server during setup by using PowerShell to avoid the .local domain.  Part III covers setting up the static IPs for IPv4 and IPv6.  Part IV is setting up DNS.  I'm migrating part V today or tomorrow and that is everything about how to properly setup DHCP.  That's all you'd need, based on what you've described of your environment. It's a brain dump, step-by-step of how I setup fully functional WSE2016 servers for small businesses.

Let me know what you decide and if you need any more help with anything!

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Trish BenningfieldTECHGRLAuthor Commented:
HEAPING THANKS! I just took a look at your awesome docs and will using them to resolve this, have a wonderful day!
Trish BenningfieldTECHGRLAuthor Commented:
Thank you!
Asif BacchusI.T. ConsultantCommented:
Glad I could help.  I'm literally migrating Part V (DHCP) in about an hour.  So It'll be up and ready for you to get cracking on your new server.  Best of luck, contact me on the site or via mail here if you need any more help!
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2016

From novice to tech pro — start learning today.