Raise the Forest functional level

I am running one Domain Controller on Windows Server 2012 R2 DataCenter.  Right now both the forest functional level and the domain functional level is at Server 2003.  I want to raise both the forest functional level and the domain functional
level to Server 2008 R2.  
Question:  Do I need to update the Schema before I try to Raise the forest functional level or before I try to Raise the domain functional level?
Question: Once I Raise both the forest functional level to Server 2008 R2 it is best to not move past that point to Server 2012 R2. I only have one Domain Controller in the domain?  
Van R. Johnson

Question:  Do I need to update the Schema before I try to Raise the forest functional level
or before I try to Raise the domain functional level?
No, the schema is already updated.
Question: Once I Raise both the forest functional level to Server 2008 R2 it is best to not move
past that point to Server 2012 R2. I only have one Domain Controller in the domain?  
By raising your DFL and FFL to Windows Server 2008 R2, you will no longer be able to have a DC running an OS that is lower than Windows Server 2008 R2 (You can lower that to Windows Server 2008 as long as AD Recycle Bin is not enabled). As this the only
DC within your domain / forest then simply raise the DFL and FFL to Windows Server 2012 R2 (You can lower it later if required) and that way you can take full advantages of what is mentioned here: https://technet.microsoft.com/en-gb/library/understanding-active-directory-functional-levels(v=ws.10).aspx
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

Similar Messages

  • What is the effect if I Raise my domain functional level to Windows Server 2012 R2 ?

    Hi,
    my current servers:
    Domain Controllers= Windows Server 2012 R2 (current domain functional level is windows 2008 R2)
    Mail servers= Exchange 2010 SP3 on Windows 2008 R2
    Lync= Lync 2010 on Windows server 2008 R2
    What is the effect if I Raise my domain functional level to Windows Server 2012 R2 ?
    I am very worried about Exchange & Lync if we do this action
    please advice

    Do not raise the forest functional level higher if you have or will have any domain controllers running
    an earlier version of Windows Server , which is (windows Nt4.0,  Window 2000 or windows 2003)
    but as a matter of fact I dont see any of those in your network so you can easily upgrade the funtional level without any issues
    Listed below link has the table which shows the effects of upgrading the domain functional levels to Windows 2012
    http://technet.microsoft.com/en-us/library/understanding-active-directory-functional-levels
    http://www.arabitpro.com

  • Existing 2003 forest functional level -- 2012 forest functional level in production environment?

    Hello experts!  
    A quick question if it can be one:
    Is it possible to raise a forest functional level from 2003 to 2012 in a production environment (only 2003 DCs with existing roles to only 2012 DCs)?  If so, is there a standard implementation of the upgrade process
    (migration of roles, migration tools, etc.)?
    many thanks!
    David

    hi,
    Thanks for posting. 
    Sorry i don't know if i am understanding your question. Are you talking about upgrading your DC's in your current forest to 2012 then raising the functional level? 
    If so, first of all you can only raise the forest and domain functional levels when all DC's in the forest and domain are at 2012 or higher. 
    To get your domain unto 2012 DC's there are a couple of paths you can adopt, but generally the simplest is:
    1. Introduce your first 2012 / 2012 R2 DC into your existing domain, this will extend the schema with the additional attributes that are required to 2012 - this is an automatic process during promotion of your first 2012 DC.
    2. Go through and start replacing your existing domain controllers. You don't normally do an inlace upgrade, the preferred method would be to use different hardware, built up the new DC to replace your existing one, then demote the existing one - keep going
    through this process until all your DC's are 2012.
    NB: which ever DC(s) currently holds the FSMO roles you will need to transfer these to one of your new 2012 DC's before you decommission that one. 
    if i've got what you were asking wrong, please let me know, otherwise hopefully this helps.
    Regards,
    Denis Cooper
    MCITP EA - MCT
    Help keep the forums tidy, if this has helped please mark it as an answer
    Blog: http://www.windows-support.co.uk 
    Twitter:   LinkedIn:

  • Domain / Forest functional levels

    I've done some research but really need someone to tell me I've got this right in my head...
    I've got 2 domains in the forest, the forest functional level is 2003. Here's the setup:
    domain1.local
    root domain
    2 DCs running W2K8R2
    DFL - 2003
    domain2.local
    1 DC running W2012R2
    1 DC running W2K3 (soon to be retired)
    DFL - 2003
    Can I upgrade the DFL of domain1 to 2008R2?
    Can I upgrade the FFL to 2008R2 while maintaining trust?
    Do the domain and forest functional levels have to match?
    Thanks in advance for any answers!

    > Can I upgrade the DFL of domain1 to 2008R2?
    Yes.
    > Can I upgrade the FFL to 2008R2 while maintaining trust?
    Yes.
    > Do the domain and forest functional levels have to match?
    No.
    Martin
    Mal ein
    GUTES Buch über GPOs lesen?
    NO THEY ARE NOT EVIL, if you know what you are doing:
    Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))

  • Raising Domain Functional / Forest Functional Levels

    Hi guys,
    I've upgraded my AD servers to Windows 2012 and have removed all the Windows 2003 servers in my network.
    However, I wish to implement fine grained password policy. However, my Forest and Domain Functional levels are still at 2003. The minimum requirement for fine grained password policy states that the domain functional level must be set to
    Windows Server 2008 or higher.
    How do I go about raising the Forest / Domain functional level? Which functional level should I raise first (the forest or domain)? Will there be any downtime and implications if I were to perform the raise?
    Thanks guys!!

    Hi guys,
    I've upgraded my AD servers to Windows 2012 and have removed all the Windows 2003 servers in my network.
    However, I wish to implement fine grained password policy. However, my Forest and Domain Functional levels are still at 2003. The minimum requirement for fine grained password policy states that the domain functional level must be set to
    Windows Server 2008 or higher.
    How do I go about raising the Forest / Domain functional level? Which functional level should I raise first (the forest or domain)? Will there be any downtime and implications if I were to perform the raise?
    Thanks guys!!
    There will be no downtime when raising your Domain Functional Level or Forest Functional Level.
    All you need to know is that by raising your DFL to Windows Server 2008 or higher, you will not be able to set it back to Windows Server 2003 without a recovery from backup (This is not a reversible operation without restore). Also, you will need to have
    DCs that are running OSs with the same level as your DFL or higher.
    If you are not planning to add DCs that are running OSs lower than Windows Server 2012 then simply raise your DFL and FFL to Windows Server 2012. FYI, as long as you have not enabled AD recycle Bin, you can downgrade the DFL and FFL to Windows Server 2008.
    More about the benefits you can take by raising your DFL and FFL here: https://technet.microsoft.com/en-gb/library/understanding-active-directory-functional-levels(v=ws.10).aspx
    This posting is provided AS IS with no warranties or guarantees , and confers no rights.
    Ahmed MALEK
    My Website Link
    My Linkedin Profile
    My MVP Profile

  • The specified forest functional level is invalid. "Lync Server" requires forests running in Windows 2003 mode or higher.

    Dear Support Team,
    i am having the error ''The specified forest functional level is invalid. "Lync Server" requires forests running in Windows 2003 mode or higher'' from lync 2013 during the schema master prepare on windows server 2008r2 and my forest functional
    level are 2008r2.. so can you help me please...?

    Dear Support Team,
    in my network there are one forest and two domain controller (primary and secondary).. my domain functional
    level is windows server 2008r2.. but i am still receiving error.. when i hit the run button for schema prepare its says:
    ServerSchemaPrepareTask execution failed on an unrecoverable error.
    and when i open log it sasys: 
    Error: The specified forest functional level is invalid. "Lync Server" requires forests running in Windows 2003 mode or higher.
    kindly help me

  • Which domain and forest functional level is supportted for the "Active Directory Resource Pool Synchronization"?

    Hi all,
    I'd like to confirm which Domain/Forest functional levels of Active Directory is supported for "Active Directory Resource Pool Synchronization" in Project Server 2013.
    I guess that 2003 or later is supported, but my customer required reliable sources.
    I googled and searched article at TechNet, but I couldn't find.
    Could anyone inform me the article about that?
    Thank you in advance.
    Kaori.

    Hi Michael and all,
    Anyway I solved this issue.
    I couldn't find article that I desired, so I asked advice to my colleagues and they told that the functional level 2003 or later are supported in their experience.
    In addition, I found these articles about SharePoint sync limitations.
    Members of the domain local group cannot view a Microsoft Office SharePoint Server 2007 Web site
    http://support.microsoft.com/kb/932378/en-us
    SharePoint supportability of Read only Domain controllers
    http://support.microsoft.com/kb/970612

  • Things to be considered before AD - domain and forest functional level upgrade (win 2003 to 2008 R2)

    Hi
    Recently we introduced Windows 2008 R2 DCs and decommissioned old Windows 2003 domain controllers. Since we are not sure about the application compatibility (both MS and 3rd party) many times we postponed the plan to upgrade the DFL and FFLs. We found Jonathan's
    blog (http://blogs.technet.com/b/askds/archive/2011/06/14/what-is-the-impact-of-upgrading-the-domain-or-forest-functional-level.aspx),
    whcih clearly says the upgrade won't affect any applications. But just to confirm this with the experts we are posting this concern once again. We have Exchange 2010 / Shrepoint / SQL / SAP etc..(also 2 X windows 2000 servers)
    Please let us know from your real experiance - in production environment how a upgrade from 2003 to 2008 R2 (belive we can able to upgarde both FFL and DFLs from Win 2003 to Win 2008 R2) affects existing applications.
    Thanks in advance
    LMS

    I might be able to help with Exchange. What service pack?
    Most likely, there should be no problem. The Exchange compability matrix shows that (with SP2 and SP3) it is compatible with Windows 2008 R2 domain controllers and 2008 R2 domain and forest functional levels.
    I'm *working on* an Exchange 2010 migration but if you want someone who *has* such a combination (2008 R2 DFL/FFL and Exchange 2010), you could ask in the Exchange forum.
    I'm sure, though, that such a combination is actually quite common.
    Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.

  • Windows 8.1 Clients cant register record in DNS in forest functional level 2008 environment (DNS Client Events 8018)

    Hello,
    I have two DC,:
    first Windows Server 2008, second Windows Server 2012 R2,
    AD works in forest functional level 2008
    Workstations working in Windows 8.1 OS cant register to DNS with warning:
    The system failed to register host (A or AAAA) resource records (RRs) for network adapter
    with settings:
               Adapter Name : ...................................................
               Host Name : ...................................
               Primary Domain Suffix : ....................................
               DNS server list :
               Sent update to server : <?>
               IP Address(es) :
    The reason the system could not register these RRs was because the DNS server contacted refused the update request. The reasons for this might be (a) you are not allowed to update the specified DNS domain name, or (b) because the DNS server authoritative for
    this name does not support the DNS dynamic update protocol.
    To register the DNS host (A or AAAA) resource records using the specific DNS domain name and IP addresses for this adapter, contact your DNS server or network systems administrator.

    Hi,
    Functional levels determine the available Active Directory Domain Services (AD DS) domain or forest capabilities. They also determine which Windows Server operating systems you can run on domain controllers in the domain or forest. However, functional levels
    do not affect which operating systems you can run on workstations and member servers that are joined to the domain or forest. Set the domain and forest functional levels to the highest value that the environment can support, in order to use as many AD DS features
    as possible.
    You may reference SenneVL’s suggestion, and use ipconfig /registerdns
    on the workstation to confirm that if the DNS record can be registered.
    Best Regards,
    Eve Wang
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Windows 2008 R2 domain controllers with Windows 2003 forest functional level Supported after Windows 2003 support ends in July 2015

    Hi
    Anyone knows whether Windows 2008 R2 domain controllers with Windows 2003 forest functional level will still be Supported after Windows 2003 support ends in July 2015 ?
    Thanks

    When Windows Server 2003 support ends, you should not have a Windows Server 2003 Domain Controller running if you would like to be supported by Microsoft. This means that there will be no reason to have a DFL or FFL that is lower than Windows Server 2008.
    So, if you are keeping Windows Server 2003 FFL to keep DCs running Windows Server 2003 then this is not supported.
    This posting is provided AS IS with no warranties or guarantees , and confers no rights.
    Ahmed MALEK
    My Website Link
    My Linkedin Profile
    My MVP Profile

  • Windows Server Functional Level

    If we change the functional level of one domain controller. replication will happen in all the domain under single forest or
    we have to do manually in all domain under single forest. same question for forest too if we change in one forest it will happen with all forest and under its domain.

    Hi prm22mis,
    Domain functionality enables features that will affect the entire domain and that domain only.
    You can raise the domain functional level on the primary domain controller (PDC) emulator operations master only. The AD DS administrative tools that you use to raise the domain functional
    level automatically target the PDC emulator when you arise the domain functional level.
    Forest functionality enables features across all the domains within your forest.
    You can raise the forest functional level on the schema operations master only. Active Directory Domains and Trusts automatically targets the schema operations master when you raise
    the forest functional level.
    For more details, please refer to the technet articles below,
    http://technet.microsoft.com/en-us/library/understanding-active-directory-functional-levels(v=ws.10).aspx
    What Are Active Directory Functional Levels?
    http://technet.microsoft.com/en-us/library/cc787290(WS.10).aspx
    Best Regards,
    Tina
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • Raise domain functional level

    Hi All,
      What all that need to be considered before raising domain / forest functional level.

    Hi channavera,
    Some items that you want to consider are what OS are you running for all your DC's in the domain/forest. This is important, since you have to have a certain level for the functional level. For example, if you want to raise up to functional level of 2012,
     you will need to make sure any DC's running 2008 or lower are upgraded before you do so. Raising the functional level will change up the schema for the domain, making it incompatible with the lower OS's.  If you are going to continue to run 2008
    server in the domain/forest, you will want to only raise the functional level to 2008.  Also, keep in mind, you cannot go to a lower functional level (i.e. if you go to 2012, you cannot go back to 2008) except under very specific circumstances.  
    I know what I brought up is not the only consideration, but a big one, as it basically determines what functional level you want to use for the domain/forest.
    Also, this technet site goes over what changes for each level. Understanding AD Functional levels

  • Unable to Raise domain functional level

    I am installing a Server 2012 std.  in a single domain. The current DC is Server 2008 std. When I try to raise the domain functional level to at least 2003 it gives me an error.
    I did the save as and viewed the error message.  Apparently some time in the past they had a Server 2000 and active directory still has the entries that is preventing the domain from being raised.  I removed the old server from AD CU and restarted
    the server.  Still will not let me raise the level, same error.  Do I need to use ADSI edit and remove all the entries also?  What about DNS entries?
    Thank you for a rapid answer.
    Wade Harris

    Hi Wade,
    Please refer to following KB and check if can help you. (Please back up before all operations. That will help us to avoid unexpected issues.)
    How to remove data in Active Directory after an unsuccessful domain controller demotion
    In addition, please also use dcdiag
    command-line tool to verify domain controller health.
    If any update, please feel free to let me know.
    Hope this helps.
    Best regards,
    Justin Gu
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Cannot Raise Functional Level in 2003 server

    Replacing 2003 server to 2008 R2 and inorder to migrate ADDS tried to raise the domain functional level to "Windows 2003" but the raise button has been disable for to click on it.

    After executing this command i found: :
    \netdom query fsmo
    Schema Owner          DC1.domain2.net
    Domain Role Owner     DC1.domain2.net
    PDC Role              DC1.domain2.net
    RID Pool Manager      DC1.domain2.net
    Infrastructure Owner  Dc1.domain2.net
    :\\repadmin \options
    Current DC options: (none)

  • Domain functional level upgraded to 2008 r2 native mode but query states 2003

    Nothing :(

    I raised the domain functional level last night to 2008 r2 native mode and after allowing everything to sync i ran the command get-addomain .domainmode and it came back ast windows2003forest. 
    I dont understand why it is showing up this way, we removed all of the 2003 domain controllers and server from our network before doing this...Any suggestions?
    This topic first appeared in the Spiceworks Community

Maybe you are looking for