Adding Server 2008 r2 DC to a Server 2008 domain

[PrimaryTech]

Hi All,

 

I've got 2 Server 2008 machines running as Domain Controllers and I'm looking to add a third Server 2008 r2 DC as cover while I service one of the Server 2008 DCs. I've read that I'll need to run Adprep/Forestprep and Adprep/Domain prep on the FSMO role holder, is there anything else I need to do? I'll be running Adprep32 on the FSMO holder as it's a 32 bit machine.

Thanks in advance

[Michael]

The Domain and Forest Functional levels should be set to 2003 (if they're not already).

 

After that, you can run adprep and once complete you can then promote a 2008 R2 Server to a DC.

 

Despite running a 2008 R2 Server, I'd still recommend you download the latest 2012 R2 ADMX templates

 

Copy the PolicyDefinitions folder from:

 

C:\Program Files (x86)\Microsoft Group Policy\Windows 8.1-Windows Server 2012 R2

 

Into:

 

C:\Windows\SYSVOL\sysvol\Your-Domain-Name\Policies

 

This should then replicate to all your DCs, however 2008 Server won't read all 2012 R2 policies, whereas 2008 R2 will.

[PrimaryTech]

Cheers Michael, I'll give it a bash. Can an adprep be done during a normal day or is it best to be done out-of-hours? Will the DC need a reboot?

[Michael]

Yes during the day is fine and no reboot is required. Takes minutes to complete.

[PrimaryTech]

I checked the Domain and Forest functional levels and they're running at Windows 2000 Native and Windows 2000 respectively. Can I bump them straight to 2008 as there are no 2003 servers on the network?

[pete]

Yes.

 

You may want to enable the AD recycle bin feature too:

 

https://technet.microsoft.com/en-us/library/dd379481%28v=ws.10%29.aspx

 

Using it:

 

https://technet.microsoft.com/en-us/library/dd379509%28v=ws.10%29.aspx

[Michael]

As above, yes you can set to 2008 in both instances. You couldn't increase to 2008 R2 native until all DCs were 2008 R2 or later.

[Firefox]

I'm assuming you already have a plan in mind, but you will want to consider moving to 64bit soon as well at future adpreps won't have a 32bit version (so you couldn't go to Windows Server 2012 R2 for example)

[PrimaryTech]

Yeah both current 2008 DC's are being retired in the summer and we'll hopefully be migrating to Virtualised 2012 r2's.