forest and domain functional level 2003 to 2012r2

[chazzy2501]

I'm still rocking the 2003 forest and domain functionality. I was thinking of just raising them, do I go Forest then domain.. Does it matter? All 2012r2 DCs and a few 2008r2 members and 1 2008 server.

 

Any troubles I should check for first?

[FN-GM]

Never had any problem at all. Did it last week on a large network with over 20 domain controllers.

 

I would raise the domain function level first. Wait a few hours then do forest.

 

The biggest benefit of rasing it is the ability to use the Active Directory recycle bin.

[timbo343]

Whilst you are at it, i would look at moving to DFSR too rather than FRS. There is a process to follow https://www.mowasay.com/2017/06/guide-to-migrate-frs-to-dfsr/ and it will make sure when you upgrade to 2019 you wont have to do then.

 

Just make sure you take your time with it. I rushed mine and spent hours on it.

Edited August 21, 2019 by timbo343

[Domino]

Also ensure your replication between DCs is working first...

[chazzy2501]

I assume it does but how would I check

[Domino]

Repadmin is your best friend, as well as checking the sysvol is syncing (if you're using FRS this might be your pain point ;-) )

 

https://www.manageengine.com/products/active-directory-audit/kb/how-to/how-to-check-if-domain-controllers-are-in-sync-with-each-other.html

[browolf]

Whilst you are at it, i would look at moving to DFSR too rather than FRS. There is a process to follow https://www.mowasay.com/2017/06/guide-to-migrate-frs-to-dfsr/ and it will make sure when you upgrade to 2019 you wont have to do then.

 

Just make sure you take your time with it. I rushed mine and spent hours on it.

 

 

Looking into this just discovered our domain is still 2003 functional level with 2016 servers.