Raising Domain/Forest from 2008 to 2016: What do I need to know?
-
I am currently in the process of retiring my 2008 AD servers in order to raise our forest and domain levels to 2016. We already have 3 WS 2016 AD servers in our environment (1 at each location). I have about 4 2008 AD servers to retire before I can do that, so I have some time. There is only 1 forest/1 domain to be concerned about here. We're not tied to any other domains or forests. We are tied to O365 through AAD Sync. We currently use SYSVOL batch scripts to map drives.
What do I need to consider changing before raising the domain/forest level?
-
@nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
I am currently in the process of retiring my 2008 AD servers in order to raise our forest and domain levels to 2016. We already have 3 WS 2016 AD servers in our environment (1 at each location). I have about 4 2008 AD servers to retire before I can do that, so I have some time. There is only 1 forest/1 domain to be concerned about here. We're not tied to any other domains or forests. We are tied to O365 through AAD Sync. We currently use SYSVOL batch scripts to map drives.
What do I need to consider changing before raising the domain/forest level?
The DCs, that's all. I assume you don't have any Server 2012 or 2012 R2 servers.
-
@dbeato said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
@nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
I am currently in the process of retiring my 2008 AD servers in order to raise our forest and domain levels to 2016. We already have 3 WS 2016 AD servers in our environment (1 at each location). I have about 4 2008 AD servers to retire before I can do that, so I have some time. There is only 1 forest/1 domain to be concerned about here. We're not tied to any other domains or forests. We are tied to O365 through AAD Sync. We currently use SYSVOL batch scripts to map drives.
What do I need to consider changing before raising the domain/forest level?
The DCs, that's all. I assume you don't have any Server 2012 or 2012 R2 servers.
Servers? Yes. DCs? No.
-
@nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
@dbeato said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
@nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
I am currently in the process of retiring my 2008 AD servers in order to raise our forest and domain levels to 2016. We already have 3 WS 2016 AD servers in our environment (1 at each location). I have about 4 2008 AD servers to retire before I can do that, so I have some time. There is only 1 forest/1 domain to be concerned about here. We're not tied to any other domains or forests. We are tied to O365 through AAD Sync. We currently use SYSVOL batch scripts to map drives.
What do I need to consider changing before raising the domain/forest level?
The DCs, that's all. I assume you don't have any Server 2012 or 2012 R2 servers.
Servers? Yes. DCs? No.
So then, I don't see anything to be worried about. See though this:
http://thiagomarcel.com/index.php/2016/08/08/elevate-domain-level/ -
@dbeato said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
@nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
@dbeato said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
@nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
I am currently in the process of retiring my 2008 AD servers in order to raise our forest and domain levels to 2016. We already have 3 WS 2016 AD servers in our environment (1 at each location). I have about 4 2008 AD servers to retire before I can do that, so I have some time. There is only 1 forest/1 domain to be concerned about here. We're not tied to any other domains or forests. We are tied to O365 through AAD Sync. We currently use SYSVOL batch scripts to map drives.
What do I need to consider changing before raising the domain/forest level?
The DCs, that's all. I assume you don't have any Server 2012 or 2012 R2 servers.
Servers? Yes. DCs? No.
So then, I don't see anything to be worried about. See though this:
http://thiagomarcel.com/index.php/2016/08/08/elevate-domain-level/I keep hearing @Texkonc saying something about SYSVOL & 2016 Domain/Forest levels. I hoping to get more information in that regard as well as just generally. Thanks for that info @dbeato.
-
@nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
omain/Forest levels. I hoping to get more information in that regard as well as just generally. Tha
Are you using DFS for SYSVOL Sync now? If so, then that should not be a worry.
-
@dbeato said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
DFS for SYSVOL Sync
Yes we are. Good to know. I just wanted to make for sure before I continued down this path and find myself in a pickle.
-
@nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
@dbeato said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
DFS for SYSVOL Sync
Yes we are. Good to know. I just wanted to make for sure before I continued down this path and find myself in a pickle.
Yes, if you had FRS you would have need to migrate SYSVOL to DFSR even after though. Server 2016 is supported for FRS up to Server 2016 RS3.
https://blogs.technet.microsoft.com/filecab/2014/06/25/streamlined-migration-of-frs-to-dfsr-sysvol/
-
Curious - why do you want/care about upgrading the domain/forest?
One reason to not do it is the ability to integrate Linux boxes with Samba. Unless Samba released a version I'm unaware of, it only compatible with forest/domain level of 2012 R2.
https://wiki.samba.org/index.php/Raising_the_Functional_Levels
If you plan to never do this, then don't worry about it
-
I think Samba will join 2016, but it can only be a DC at 2008 R2 level.
-
@scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
I think Samba will join 2016, but it can only be a DC at 2008 R2 level.
I suppose, the wiki might just be out of date.
-
@dashrender said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
@scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
I think Samba will join 2016, but it can only be a DC at 2008 R2 level.
I suppose, the wiki might just be out of date.
Or REALLY up to date. Looks like 4.4 will set to 2012 R2 now.
-
@scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
@dashrender said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
@scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
I think Samba will join 2016, but it can only be a DC at 2008 R2 level.
I suppose, the wiki might just be out of date.
Or REALLY up to date. Looks like 4.4 will set to 2012 R2 now.
LOL - which is why I posted about 2012 R2 in my post
-
@dashrender said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
@scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
@dashrender said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
@scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
I think Samba will join 2016, but it can only be a DC at 2008 R2 level.
I suppose, the wiki might just be out of date.
Or REALLY up to date. Looks like 4.4 will set to 2012 R2 now.
LOL - which is why I posted about 2012 R2 in my post
Yes, but you mentioned it in the joining way, which is not what the limit is about.
-
@dashrender said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
Curious - why do you want/care about upgrading the domain/forest?
One reason to not do it is the ability to integrate Linux boxes with Samba. Unless Samba released a version I'm unaware of, it only compatible with forest/domain level of 2012 R2.
https://wiki.samba.org/index.php/Raising_the_Functional_Levels
If you plan to never do this, then don't worry about it
See you mention compatibility. It's compatible with 2016. The limit you are mentioning is not related to compatibility.
-
@scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
@dashrender said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
Curious - why do you want/care about upgrading the domain/forest?
One reason to not do it is the ability to integrate Linux boxes with Samba. Unless Samba released a version I'm unaware of, it only compatible with forest/domain level of 2012 R2.
https://wiki.samba.org/index.php/Raising_the_Functional_Levels
If you plan to never do this, then don't worry about it
See you mention compatibility. It's compatible with 2016. The limit you are mentioning is not related to compatibility.
Again - so true - I specifically was referring to the ability to be a DC, as like you, I assumed that general ability to access 2016 shares for example was likely possible, regardless of forest/domain level.
-
I usually go and enable the AD recycle bin right after that. It's one of those things you don't think about until the day you need it ...
-
@mike-davis said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
I usually go and enable the AD recycle bin right after that. It's one of those things you don't think about until the day you need it ...
Yes!
-
@nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
I am currently in the process of retiring my 2008 AD servers in order to raise our forest and domain levels to 2016. We already have 3 WS 2016 AD servers in our environment (1 at each location). I have about 4 2008 AD servers to retire before I can do that, so I have some time. There is only 1 forest/1 domain to be concerned about here. We're not tied to any other domains or forests. We are tied to O365 through AAD Sync. We currently use SYSVOL batch scripts to map drives.
What do I need to consider changing before raising the domain/forest level?
It only ever adds functionality, never removes any.
In every case you can go ahead and raise it. It's a myth that you need to be concerned about it -
@mike-davis said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:
I usually go and enable the AD recycle bin right after that. It's one of those things you don't think about until the day you need it ...
Done
