Possible route from 2008 r2 to 2012 r2 Essential on different machines?

I have a Windows server 2008 r2 standard on a machine and we bought a new server.
I want to transfer all my users, groups, machines from the 2008 r2 machine to the new 2012 r2 Essential machine.
I've read the Migrate from Previous Versions to Windows Server 2012 R2 Essentials and
Migrate Windows Server 2012 Essentials to New Hardware article but I'm still not sure this can be working with the 2008 r2 standard too.
If it doesn't work, restore a system state backup on 2012 r2 from 2008 r2 is possible? Or Is there a method to transfer my users and computers?
Is it possible that after I demote the original server, I rename the new server to the name of the old server?
I have an SQL server instance in the source server. This and the user profiles are the only things I want to transfer.
Thank you!
Tamas

It is not as simple as that with an Essentials server as it also runs a certificate authority, and the Essentials features are heavily tied into that.
Robert Pearman SBS MVP
itauthority.co.uk |
Title(Required)
Facebook |
Twitter |
Linked in |
Google+

Similar Messages

I did an Unsupported InPlace OS Upgrade from 2008-R2 to 2012-R2

Well, I misunderstood what was supported and upgraded the OS on a SCCM 2012-R2 server from 2008-R2 to 2012-R2. (The one and only SCCM-server in the site)
All seems to work well, my concern now is what can I expect of future problems? Should I do the backup-install-restore procedure now to be sure or let it run until... "maybe something" happens?
Thanks.

"not supported" just means that MS did not test that scenario (and it does not automatically mean that it does not work).
I've done such an OS upgrade in my lab and were running into some smaller issues (MP/DP/SUP = the roles that require IIS) and were able to fix them by removing and re-adding those roles but YMMV.
The supported way would be: recover from backup. But you can also have a close look at all roles and see if they are still working.
Torsten Meringer | http://www.mssccmfaq.de

Certificate errors after upgrade from 2008 r2 to 2012 r2

After upgrading a DC from 2008 R2 to 2012 R2, Outlook will no longer connect to outlook.office365.com. This appears to be a direct result of the upgrade, worked before and failed after.
I get a flurry of message boxes when I launch Outlook, and it will run but not connect. No path through the messages (granting permission to ignore the error, or installing the certificate) makes any difference. Not seeing anything in the event
logs, and have no idea how to fix this.
In addition, IE is now raising cert complaints on every site, doesn't matter which. Firefox seems to be managing okay, for the most part.
Thanks for any guidance.

Hi Michael,
I am so sorry for the delay.
I was trying to find more useful information about this issue, though there are very little information other than installing the trusted root certificate which is provided by the KB
article above.
I would suggest you download a
certificate chain and install it.
If this method still couldn’t help you solve this issue, since you are using third party certificate (VeriSign) for your organization, you can get more efficient support by contacting
third party support services.
More information for you:
Installing a Certificate Chain for Communicator Web Access
http://technet.microsoft.com/en-us/library/dd441378(v=office.13).aspx
Have a nice day!
Amy

Migrated database from 2008 R2 to 2012 getting wrong decimal precisions

Migrated SQL Server database from 2008R2 to 2012 using backup and restore option
When I do aggregate sum on both the databases 2008 and 2012 decimal precision is coming different. Because of this measure value in SSAS cube browser is calculated wrongly compared to 2008 R2 vs 2012
select SUM(rate) from [InfoDB]
2008 R2 Result
3029520.583895
2012 Result
3029520.58389499
Rate column is float data type Length 8, Precision 53, Scale is null
Please suggest if any work around for this.

Hello,
Does changing the underlying data to decimal possible? Instead of using float. Please try that.
Hope this helps.
Regards,
Alberto Morillo
SQLCoffee.com

Migrating a website from 2008 R2 to 2012 ( iis 8.5)

Hi Need help with the following scenario.
I need to move the entire website from 2008 R2 to new 2012 server, please find the details below.
Web site number : 1
Current Server 2008 R2 ( iis 7.5)
Destination : 2012 ( iis 8.5 )
Is there any migration tool available for the same ?

Hi Joshy,
I agree with Tim. You should post the question in IIS forum. I believe we will get a better assistance there. There is the URL of IIS forum:
http://forums.iis.net/
I also find two simialr threads from IIS forum. It seems that you can use
IIS Easy MIgration Tool to migrate. Please refer to and check if can help you.
IIS 7.5 to 8.5
How to upgrade from IIS 7.5 (Server 2008R2) to IIS 8.5 (server 2012r2)
Best regards,
Justin Gu
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Upgrading domain from 2008 R2 to 2012 R2

I am looking to upgrade my domain from server 2008 R2 to 2012 R2. We have 10 remote sites, each with a single physical ESXi host hosting 2 vms, 1 2008 R2 vm with the ADDS/DHCP/DNS/File Services (user home drives) roles and the second 2008 R2 vm
runs WDS/MDT and a couple applications. At our main site we have a physical 2008 R2 DC which holds all the FSMO roles, a vm with the ADDS/DHCP/DNS/File Services roles, and another vm running WDS/MDT.
I've gathered from my research that Microsoft recommends clean installs when upgrading DCs but since our DCs are also file servers that's not an ideal course of action for us, it'd be a lot of additional steps. My plan at this point
is to bring up a new physical 2012 R2 server, make it a DC, transfer the FSMO roles to it, then demote and retire the current physical 2008 R2 server. For the virtual DCs, since they are also file servers, I'm leaning towards in-place upgrades
on them, unless anyone would advise against.
The other thing I'm considering is creating a 2012 R2 DC at each remote site, then demoting the current 2008 R2 DC, leaving some combination of DHCP/File Services on it, then run an in-place on it to 2012 R2. This would requre another Windows license
though since our physical hosts are not on Hyper-v.
For the virtual servers running WDS/MDT, I personally prefer an in-place so I don't have to move the MDT deployment share, but I'm open to suggestions.
What are your recommendations? Which server should I upgrade first? How much time should I allow between each DC upgrade? I appreciate the help.

As per recommendations, A DC should be solely utilized for AD/DNS/GC & if environment is small for DHCP. The problem in using DC for other purpose arise during upgrade scenario, when you have to demote the DC or performance. Demoting the DC is very simple,
but if its running with additional role, it becomes challenging, if demotion has to be performed forcefully.
Secondly, from the security point, its not a great idea to run DC with other roles esp file servers, if there is any infected file then the whole domain can be compromised or infected.
What is more relevant in upgrade is testing the applications before you perform or upgrade the schema. If there is no issues then you can perform the upgrade based on your convenience. But necessary documentation & testing prior & post has to be
followed.
My personal recommendation would be upgrade the schema(surely test the schema upgrade in lab before you do in production), create a new server either VM or physical, configure it as an DC & transfer all FSMO role & slowly try to segregation between
DC & non DC servers.
Yes, i know it will cost additional licensing burden, but from the environment point of view it will provide you an ease of administration & troubleshooting.
http://blogs.technet.com/b/chrisavis/archive/2013/10/01/performing-an-in-place-upgrade-of-server-2008-r2-to-server-2012-r2.aspx
http://blogs.technet.com/b/canitpro/archive/2013/06/18/step-by-step-active-directory-migration-from-windows-server-2008-r2-to-windows-server-2012.aspx
Awinish Vishwakarma - MVP
My Blog: awinish.wordpress.com
Disclaimer This posting is provided AS-IS with no warranties/guarantees and confers no rights.

How do I migrate a FAX server from 2008 R2 to 2012 R2

Hi- I have two DCs (one 2008 R2, one 2012 R2) I'm going to build a new DC with 2012 R2 and remove the 2008 R2. This server is hosting FAX services. How do I move it to the new server? Can only find articles talking about SBS and using a migration wizard...
You should never, never doubt what nobody is sure about. -Willy Wonka

There are no tools included in Windows for migrating the fax service from one machine to another.
Alan Morris formerly with Windows Printing Team

Domain Controller, DHCP, DNS Migration from 2008 r2 to 2012 Essentials

I would like to migrate Domain Controller, DHCP, and DNS functions to a new 2012 Essentials server in a 2008 r2 domain. I would like the 2008 r2 server to remain as applications server. Is it possible to do this? I've seen in TechNet
a reference to this type of migration, but am concerned about the reference that after 21 days the 2008 will shut down. Is it that the server will shut down or the Domain Controller function on the 2008 will shut down? I will need the 2008 setup as is
for our application server, so I want to be sure that the migration will not interfer with that.

As long as your existing server is not also an SBS or other Essentials server, it'll be fine. The shutdown after 21 days occurs when multiple SBS or Essentials servers are on the same domain.

Inter-site replication and KCC, when migrating from 2008 SP1 to 2012 R2

Hello,
We have a very simple AD infrastructure, two sites. I have built out a 2012 R2 server, extended the AD schema and promoted it to a domain controller. Reviewing the existing AD replication topology, we currently have a 2008 SP1 server as a DC
designated as the source/destination for inter-site replication, which appears to have been decided by KCC.
I will be decomming this 2008 SP1 server, having migrated off the FSMO roles to a few other DCs.
Will KCC automatically know to adjust the replication topology when the 2008 SP1 DC is offline? Should I demote it after migrating off the FSMO roles?
Thanks,
Matt

Hi,
Thanks for your post.
By default, the KCC reviews and makes modifications to the Active Directory replication topology every 15 minutes to ensure propagation of data, either directly or transitively, by creating and deleting connection objects as needed. The KCC recognizes
changes that occur in the environment and ensures that domain controllers are not orphaned in the replication topology.
For more detail information, you could refer to:
http://technet.microsoft.com/en-us/library/cc961781.aspx
For the migration, you could transfer the Flexible Single Master Operations (FSMO) Role and remove the Windows 2008 R2 domain controller, please refer to:
Step-By-Step: Active Directory Migration from Windows Server 2008 R2 to Windows Server 2012 R2
http://blogs.technet.com/b/canitpro/archive/2014/05/28/step-by-step-active-directory-migration-from-windows-server-2008-r2-to-windows-server-2012.aspx
Regards.
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

File Server Migration from 2008 Standard to 2012 Standard accross different subnet

Hi
Im going to migrate File server from Windows 2008 Standard server to Windows 2012 Standard . Source and Destination Servers are on different subnets . According to this
http://technet.microsoft.com/en-us/library/jj863566.aspx I cannot use Server migrations tool in-built into 2012 . Im not sure if I can use file server migration toolkit 1.2?.
Also my Domain controllers are mixture of Windows 2003, 2008 , 2008 R2 and I've upgraded the schema level to 2012 R2 . Is there anything else I need to be aware of ?
Can anyone please recommended best way to go about doing this migration . Is file server migration toolkit 1.2 is compatible ? .
Only reason I don't want to use Robocopy to this is because If I miss a small setting etc then I will face unwanted downtime.
I presume Migration toolkit will also create all the Quotas etc on the destination server .
Thanks
mumtaz

Hi mumtaz,
We could use file server migration toolkit 1.2 to migrate file server between the two subnets. In order to maintain security settings after the migration, please ensure the security of files and folders after they are migrated to a target file server, the File
Server Migration Wizard applies permissions that are the same as or more restrictive than they were on the source files and folders, depending on the option you select.
In the meantime, quota cannot migrate by this tool but we can export and import the quota using dirquota command. Export the templates as xml and then import to new server:
dirquota template export /file:C:\test.xml
dirquota template import /file:C:\test.xml
For more detailed information, please see:
Template Export and Import Scenarios
http://technet.microsoft.com/en-us/library/cc730873(WS.10).aspx
Regards,
Mandy
If you have any feedback on our support, please click
here
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Update Primary server OS from 2008 R2 to 2012 R2

Anyone had any experience doing an in-place OS upgrade on a ZCM primary server? I have a single primary server currently running Server 2008 R2 and would like to update it to 2012 R2. Would I be better off building a new primary server?
Thanks

Originally Posted by smflood
On 03/02/2015 17:56, reizarf27 wrote:
> Anyone had any experience doing an in-place OS upgrade on a ZCM primary
> server? I have a single primary server currently running Server 2008 R2
> and would like to update it to 2012 R2. Would I be better off building
> a new primary server?
Which version of ZENworks are you running?
Support for Windows 2012 Server R2 was only added with the 11.3.1 Update
for ZENworks 11 SP3 so you would need to at least be running that
version before upgrading the Windows Server OS.
HTH.
Simon
Novell Knowledge Partner
If you find this post helpful and are logged into the web interface,
please show your appreciation and click on the star below. Thanks.
Sorry, should have posted that. We are running 11.3.1 right now.

AD/DC/DNS From 2008 R2 to 2012

Hello
I have a Domain Controller (2008 R2), a secondary DC (2008 R2).
My new server is a Proliant Gen8 380p.
My new server I would like to put 2012 server on it ... it will be replacing the main domain controller (2008 R2).
It currently seconds as a DNS Server, File Server.
My concern is that if I add the 2012 server, that it may have issues converting 2008 R2 Accounts and settings to the new 2012 Server.
I am virtualizing this server. I installed 2008 R2 on it, but ran into issues with trying to use it as a file server. Hyper-v on 2008 R2 will only allow a 2TB volume; I have 5TB to use, which 2012 will allow me to allocate.
My vitural HD C: will be 400GB but my virtual D drive needs to be 5TB.
1. Will there be any issues with installing 2012 as my host machine, then 2008 R2 as the virutal machine, or should I have 2012 as my host and virtual?
2. If I put 2012 on my virtual instance, what considerations/issues will I have when windows tries to make it a DC in my domain?
Thank you

Hi,
If I understand your meaning correctly, you want to add a new Windows Server 2012 and make it a DC essentially,
here is an MS article talking about upgrade DCs to Windows Server 2012, see:
Upgrade Domain Controllers to Windows Server 2012
http://technet.microsoft.com/en-us/library/hh994618.aspx
And by now you have two DCs and a Windows server 2008 r2 with Hyper-v installed, right? Regarding the detailed information assiociated with Hyper-v, I think we'd better seek help in Hyper-v forum.
For the Virtual Machines and Guest Operating Systems, please see:
About Virtual Machines and Guest Operating Systems
http://technet.microsoft.com/en-us/library/cc794868(v=ws.10).aspx
Hope this may help
Best regards
Michael
If you have any feedback on our support, please click
here.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Migrating from 2008 SP2 To 2012 R2

hello guys,
i am trying to migrate my old domain controller (2008 sp2) to a new one (2012r2) on new hardware, i did an acronis restore of my dc to make all in lab test.
I have some problem of replication . here is the DCDIAG :
Command Line: "dcdiag.exe
/v /c /d /e /s:DC2008"
Doing initial required tests
Testing server: Default-First-Site-Name\DC2008
Starting test: Connectivity
* Active Directory LDAP Services Check
Determining IP4 connectivity
Determining IP6 connectivity
Failure Analysis: DC2008 ... OK.
* Active Directory RPC Services Check
......................... DC2008 passed test Connectivity
Testing server: Default-First-Site-Name\DC2012R2
Starting test: Connectivity
* Active Directory LDAP Services Check
DC2012R2.currentTime = 20141021145035.0Z
DC2012R2.highestCommittedUSN = 29216
DC2012R2.isSynchronized = 1
DC2012R2.isGlobalCatalogReady = 1
Determining IP4 connectivity
Determining IP6 connectivity
Failure Analysis: DC2012R2 ... OK.
* Active Directory RPC Services Check
......................... DC2012R2 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\DC2008
Starting test: Advertising
The DC DC2008 is advertising itself as a DC and having a DS.
The DC DC2008 is advertising as an LDAP server
The DC DC2008 is advertising as having a writeable directory
The DC DC2008 is advertising as a Key Distribution Center
The DC DC2008 is advertising as a time server
......................... DC2008 passed test Advertising
Starting test: CheckSecurityError
* Dr Auth: Beginning security errors check!
Found KDC DC2008 for domain hq.test.ch in site Default-First-Site-Name
Checking machine account for DC DC2008 on DC DC2008.
* SPN found :LDAP/DC2008.hq.test.ch/hq.test.ch
* SPN found :LDAP/DC2008.hq.test.ch
* SPN found :LDAP/DC2008
* SPN found :LDAP/DC2008.hq.test.ch/HQ
* SPN found :LDAP/46ea5837-cfce-4605-a61d-e20ed1003388._msdcs.hq.test.ch
* SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/46ea5837-cfce-4605-a61d-e20ed1003388/hq.test.ch
* SPN found :HOST/DC2008.hq.test.ch/hq.test.ch
* SPN found :HOST/DC2008.hq.test.ch
* SPN found :HOST/DC2008
* SPN found :HOST/DC2008.hq.test.ch/HQ
* SPN found :GC/DC2008.hq.test.ch/hq.test.ch
[DC2008] No security related replication errors were found on this DC!
To target the connection to a specific source DC use
/ReplSource:<DC>.
......................... DC2008 passed test CheckSecurityError
Starting test: CutoffServers
* Configuration Topology Aliveness Check
* Analyzing the alive system replication topology for DC=ForestDnsZones,DC=hq,DC=test,DC=com.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for DC=DomainDnsZones,DC=hq,DC=test,DC=com.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for CN=Schema,CN=Configuration,DC=hq,DC=test,DC=com.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for CN=Configuration,DC=hq,DC=test,DC=com.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
* Analyzing the alive system replication topology for DC=hq,DC=test,DC=com.
* Performing upstream (of target) analysis.
* Performing downstream (of target) analysis.
......................... DC2008 passed test CutoffServers
Starting test: FrsEvent
* The File Replication Service Event log test
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
An Warning Event occurred. EventID: 0x800034C8
Time Generated: 10/21/2014 13:52:16
EvtFormatMessage failed, error 15100 Win32 Error 15100.
(Event String (event log = File Replication Service) could not be
retrieved, error 0x3afc)
An Warning Event occurred. EventID: 0x800034C8
Time Generated: 10/21/2014 14:37:32
EvtFormatMessage failed, error 15100 Win32 Error 15100.
(Event String (event log = File Replication Service) could not be
retrieved, error 0x3afc)
An Warning Event occurred. EventID: 0x800034C8
Time Generated: 10/21/2014 15:28:55
EvtFormatMessage failed, error 15100 Win32 Error 15100.
(Event String (event log = File Replication Service) could not be
retrieved, error 0x3afc)
......................... DC2008 passed test FrsEvent
Starting test: DFSREvent
The DFS Replication Event Log.
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
An Error Event occurred. EventID: 0xC0000838
Time Generated: 10/21/2014 12:24:08
EvtFormatMessage failed, error 15100 Win32 Error 15100.
(Event String (event log = DFS Replication) could not be retrieved,
error 0x3afc)
An Error Event occurred. EventID: 0xC00007D4
Time Generated: 10/21/2014 12:24:08
EvtFormatMessage failed, error 15100 Win32 Error 15100.
(Event String (event log = DFS Replication) could not be retrieved,
error 0x3afc)
Starting test: DNS
Starting test: DNS
DNS Tests are running and not hung. Please wait a few
minutes...
See DNS test in enterprise tests section for results
......................... DC2012R2 passed test DNS
See DNS test in enterprise tests section for results
......................... DC2008 passed test DNS
Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation
Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation
Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Running partition tests on : hq
Starting test: CheckSDRefDom
......................... hq passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... hq passed test CrossRefValidation
Summary of DNS test results:
Auth Basc Forw Del Dyn RReg Ext
Domain: hq.test.ch
DC2012R2 PASS WARN PASS PASS PASS WARN n/a
DC2008 PASS WARN FAIL PASS PASS WARN n/a
Total Time taken to test all the DCs:4 min. 54 sec.
......................... hq.test.ch failed test DNS
Starting test: LocatorCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error 1355
A Global Catalog Server could not be located - All GC's are down.
PDC Name: \\DC2012R2.hq.test.ch
Locator Flags: 0xe000f1fd
Time Server Name: \\DC2008.hq.test.ch
Locator Flags: 0xe00013f8
Preferred Time Server Name: \\DC2008.hq.test.ch
Locator Flags: 0xe00013f8
KDC Name: \\DC2008.hq.test.ch
Locator Flags: 0xe00013f8
......................... hq.test.ch failed test LocatorCheck
Starting test: FsmoCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error 1355
A Global Catalog Server could not be located - All GC's are down.
PDC Name: \\DC2012R2.hq.test.ch
Locator Flags: 0xe000f1fd
Time Server Name: \\DC2008.hq.test.ch
Locator Flags: 0xe00013f8
Preferred Time Server Name: \\DC2008.hq.test.ch
Locator Flags: 0xe00013f8
KDC Name: \\DC2008.hq.test.ch
Locator Flags: 0xe00013f8
......................... hq.test.ch failed test FsmoCheck
Starting test: Intersite
Skipping site Default-First-Site-Name, this site is outside the scope
provided by the command line arguments provided.
......................... hq.test.ch passed test Intersite
Can you help me ?

Hi,
share out the Sysvol directory. However, it is recommended that you enable the system to share this directory.
For additional information about enabling the system to share this directory out on its own: (http://support.microsoft.com/kb/257338/EN-US/)
To verify that the Sysvol directory is shared out, you can either open Windows Explorer, or type
net share at a command prompt to see if the Sysvol share is showing. By default, the Sysvol share is located in the following folder: %SystemRoot%\Sysvol\Sysvol.
It is also recommended that you check the File Replication Service log. When replication has completed (with a domain with just one domain controller) the File Replication Service log reports the following event:
Event 13516: The File Replication Service has stopped preventing the computer from becoming a domain controller.
The system volume can take some time to initialize depending on the network.
Regards, Koustov Choudhury

Server Upgraded from 2008 R2 to 2012 any potiential problems?

Our Corporate 2008 R2 image as some applied image settings built in it. They have not gotten around to building a 2012 image with the settings so an 2008 R2 base image with the applied image settings was updated to 2012 and then saved as a template.
Are there any potential downfalls to this mentality. I will be putting a 2013 SharePoint farm and SQL 2012 on this image and just want to get some other input.

Hi
I always prefered a clean install, but if you can't get to know all setting then you have not much choice. They can't list all policy and settings applied to that image ? What you will do when another upgrade will be neccesary ?
Don't forget to sysprep the image before installing anything on it. Some hypervisor does not do it automaticly when you clone/ use a template and you should be ok.
Regards, Philippe

NPS Authentication Fails (Reason 16) After Migration to 2012 R2 from 2008 R2

I'm using NPS for wired dot1x authentication and I just migrated my NPS server from 2008 R2 to 2012 R2. When I point the network switch to start using the new 2012 R2 NPS as the RADIUS server, I get authentication failures - event 6273, reason code
16. When I switch it back to the 2008 R2 server, it works fine. The two servers are configured EXACTLY the same as far as I can tell - same RADIUS client config, same connection request policies, same network policies - and it should be since I
used the MS prescribed migration process. The only thing that differs is the server's certificate name used in the PEAP setup screen.
I'm using computer authentication only, so everything is based on computer accounts and I've selected to NOT validate server credentials on the group policy.
I've verified the shared secrets multiple times. Both servers are domain controllers.
Here is an example of the errors logged on the 2012 R2 server.
========================================
Network Policy Server denied access to a user.
Contact the Network Policy Server administrator for more information.
User:
   Security ID:           FAITHCHURCH\youthroom$
   Account Name:           host/YOUTHROOM.faithchurch.net
   Account Domain:           FAITHCHURCH
   Fully Qualified Account Name:   FAITHCHURCH\youthroom$
Client Machine:
   Security ID:           NULL SID
   Account Name:           -
   Fully Qualified Account Name:   -
   OS-Version:           -
   Called Station Identifier:       -
   Calling Station Identifier:       44-37-E6-C0-32-CA
NAS:
   NAS IPv4 Address:       192.168.1.1
   NAS IPv6 Address:       -
   NAS Identifier:           -
   NAS Port-Type:           Ethernet
   NAS Port:           1010
RADIUS Client:
   Client Friendly Name:       Extreme X440
   Client IP Address:           192.168.1.1
Authentication Details:
   Connection Request Policy Name:   Secure Wired (Ethernet) Connections 2
   Network Policy Name:       Secure Wired (Ethernet) Connections 2
   Authentication Provider:       Windows
   Authentication Server:       Sigma.faithchurch.net
   Authentication Type:       PEAP
   EAP Type:           -
   Account Session Identifier:       -
   Logging Results:           Accounting information was written to the local log file.
   Reason Code:           16
   Reason:               Authentication failed due to a user credentials mismatch. Either the user name provided does not map to an existing user account or the password was incorrect.
========================================

Hi,
Have you added the NPS server to the RAS and IAS Servers
security group in AD DS?
The NPS server needs permission to read the dial-in properties of user accounts during the authorization process.
Try to add a loal user on the NPS server, then test with the local user. If it works, it means that there is something wrong between NPS and DC.
If the issue persists, it means that the configuration between NPS and NAS is wrong.
Steven Lee
TechNet Community Support

Possible route from 2008 r2 to 2012 r2 Essential on different machines?

Similar Messages

Maybe you are looking for