Anybody done inplace upgrade on their Dcs?

[Jaan]

Just thought i'd ask before i start doing backups

 

Currently 2016

 

cheers

[howartp]

@stgoodyeara makes a habit of it, usually over lunchtime.

[EddyAllen]

Yeah, done this quite a few times. No problems at all with the process. Just upgrade your non-primary DC's, transfer across the FSMO roles from your PDC to an upgraded secondary, upgrade your PDC and then transfer the roles back. Edited January 18, 2019 by EddyAllen

[CHiLL]

I've upgraded my non-PDC DC from 2012 R2 to 2019 via an in-place upgrade, as well as some other non-DC servers. The process went smoothly at the time, but I later found some issues with permissions. Specifically my domain admin accounts could not access a lot of resources. I had to enable the following GPO for all of the servers:

Computer Configuration > Policies > Windows Settings > Security Settings > Local Policies > Security Options > User Account Control: Use Admin Approval Mode for the built-in Administrator account: Enabled

 

Other than that, I've upgraded our students file server, SCCM, Print, RDS/GW servers without an issue.

 

I still have our PDC, SIMS, staff file server and a couple of other less essential servers to do.

Edited March 18, 2019 by CHiLL

[Jaan]

I've upgraded my non-PDC DC from 2012 R2 to 2019 via an in-place upgrade, as well as some other non-DC servers. The process went smoothly at the time, but I later found some issues with permissions. Specifically my domain admin accounts could not access a lot of resources. I had to enable the following GPO for all of the servers:

Computer Configuration > Policies > Windows Settings > Security Settings > Local Policies > Security Options > User Account Control: Use Admin Approval Mode for the built-in Administrator account: Enabled

 

Other than that, I've upgraded our students file server, SCCM, Print, RDS/GW servers without an issue.

 

I still have our PDC, SIMS, staff file server and a couple of other less essential servers to do.

 

Yeah we did inplace updates also, no issues as far as im aware. What permission did you have issues with so i can check mine!

[CHiLL]

Yeah we did inplace updates also, no issues as far as im aware. What permission did you have issues with so i can check mine!

I was having issues accessing a lot of Windows resources, such as msiexec, control panel, etc. It seemed to be specifically when File Explorer or the Settings applet was calling them that it had issues. For example, if I loaded Apps & Features - I couldn't uninstall applications because it said I don't have permissions to run msiexec. I couldn't even uninstall an application manually using msiexec from an elevated command line or Powershell. Or if I'm in the Settings applet and search for Control Panel and select it, I would also get an Access Denied error. If I browse to C:\Windows\System32 and launched control.exe, it would launch fine. It was very bizzare. There were also no entries in the Event Log about it either.

 

As soon as I enabled that GPO setting and rebooted the server - the issue resolved.

[Jaan]

I was having issues accessing a lot of Windows resources, such as msiexec, control panel, etc. It seemed to be specifically when File Explorer or the Settings applet was calling them that it had issues. For example, if I loaded Apps & Features - I couldn't uninstall applications because it said I don't have permissions to run msiexec. I couldn't even uninstall an application manually using msiexec from an elevated command line or Powershell. Or if I'm in the Settings applet and search for Control Panel and select it, I would also get an Access Denied error. If I browse to C:\Windows\System32 and launched control.exe, it would launch fine. It was very bizzare. There were also no entries in the Event Log about it either.

 

As soon as I enabled that GPO setting and rebooted the server - the issue resolved.

 

ah yes!

 

i've had this, but used the legacy "control panel" to uninstall it! thanks for the heads up