SOLVED

Virtual Windows Server 2008 R2 Additional Domain Controller Upgrade Help

%3CLINGO-SUB%20id%3D%22lingo-sub-1170086%22%20slang%3D%22en-US%22%3EVirtual%20Windows%20Server%202008%20R2%20Additional%20Domain%20Controller%20Upgrade%20Help%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1170086%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20All%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20having%20confusion%20about%20upgrading%20our%20company%20domain%20controller.%20I've%20researched%20from%20the%20internet%20everything%20I%20could%20gather%20even%20read%20all%20the%20docs%20from%20Microsoft%20about%20the%20guides%2Foverviews%20about%20the%20upgrade%20on%20the%20said%20OS.%20still%2C%20I'm%20not%20100%25%20sure%20if%20all%20the%20research%20I%20gather%20will%20help%20me%20through%20the%20process%2Fsteps%20to%20upgrade%20the%20server%20from%20the%20latest%2Favailable%20new%20version.%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3EOur%20company%20has%204%20domain%20controllers%2C%203%20of%20them%20are%20the%20additional%2Fbackup%20DC.%20I'm%20trying%20to%20install%20to%201%20of%20the%20additional%20DC.%20is%20it%20possible%20to%20upgrade%20if%20that%20additional%20is%20on%20a%20virtual%20machine%3F%20I'm%20new%20to%20virtualization%20and%20I%20don't%20know%20if%20either%20I%20will%20upgrade%20our%20primary%20DC%20or%20the%20additional%20DC.%20just%20because%20the%20additionals%20are%20still%20running%20windows%202008%20R2%20Standard%2C%20I%20somehow%20want%20to%20upgrade%20one%20by%20one%20of%20them%20if%20I%20get%20successfully%20upgrade%20from%201%20of%20the%20additional.%20the%20primary%20is%20now%20running%202012%20R2.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1170086%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EActive%20Directory%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%20Server%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1170603%22%20slang%3D%22en-US%22%3ERe%3A%20Virtual%20Windows%20Server%202008%20R2%20Additional%20Domain%20Controller%20Upgrade%20Help%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1170603%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F547465%22%20target%3D%22_blank%22%3E%40spacegabx%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIt%20is%20possible%20to%20do%20an%20in-place%20upgrade%20for%20a%20virtual%20machine.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1170647%22%20slang%3D%22en-US%22%3ERe%3A%20Virtual%20Windows%20Server%202008%20R2%20Additional%20Domain%20Controller%20Upgrade%20Help%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1170647%22%20slang%3D%22en-US%22%3E%3CP%3EDo%20not%20in-place%20upgrade%20them.%20The%20much%20simpler%20%2F%20clean%20method%20is%20to%20%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3Euse%20dcdiag%20%2F%20repadmin%20tools%20to%20verify%20health%20%3CU%3Ecorrecting%20all%20errors%20found%3C%2FU%3E%20before%20starting.%20Then%20stand%20up%20the%20new%20guest%2C%20patch%20it%20fully%2C%20license%20it%2C%20join%20existing%20domain%2C%20add%20active%20directory%20domain%20services%2C%20promote%20it%20also%20making%20it%20a%20GC%20(recommended)%2C%20transfer%20FSMO%20roles%20over%20(optional)%2C%20transfer%20pdc%20emulator%20role%20(optional)%2C%20use%20dcdiag%20%2F%20repadmin%20tools%20to%20again%20verify%20health%2C%20when%20all%20is%20good%20you%20can%20decommission%20%2F%20demote%20old%20one.%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIf%202019%20were%20the%20target%20OS%2C%20then%20t%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3Ehe%20two%20prerequisites%20to%20introducing%20the%20first%202019%20domain%20controller%20are%20that%20domain%20functional%20level%20needs%20to%20be%202008%20or%20higher%20and%20older%20sysvol%20FRS%20replication%20needs%20to%20have%20been%20migrated%20to%20DFSR%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FStorage-at-Microsoft%2FStreamlined-Migration-of-FRS-to-DFSR-SYSVOL%2Fba-p%2F425405%22%20target%3D%22_blank%22%20rel%3D%22noopener%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FStorage-at-Microsoft%2FStreamlined-Migration-of-FRS-to-DFSR-SYSVOL%2Fba-p%2F425405%3C%2FA%3E%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1170706%22%20slang%3D%22en-US%22%3ERe%3A%20Virtual%20Windows%20Server%202008%20R2%20Additional%20Domain%20Controller%20Upgrade%20Help%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1170706%22%20slang%3D%22en-US%22%3EHello%20Dave.%3CBR%20%2F%3E%3CBR%20%2F%3EI%20also%20want%20this%20kind%20of%20method%20of%20migrating%20path%20because%20it%20is%20convenient.%20but%20honestly%2C%20I%20don't%20know%20how%20to%20setup.%20like%20running%20the%20new%20guest%20on%20our%20server.%20I%20have%20some%20ideas%20in%20my%20mind%20on%20how%20to%20deploy%20the%20new%20guest%20on%20the%20server%20and%20somehow%20join%20in%20the%20domain.%20but%20firstly%2C%20will%20I%20need%20to%20go%20to%20our%20console%20or%20physical%20server%20to%20deploy%20there%20the%20new%20guest%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1170736%22%20slang%3D%22en-US%22%3ERe%3A%20Virtual%20Windows%20Server%202008%20R2%20Additional%20Domain%20Controller%20Upgrade%20Help%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1170736%22%20slang%3D%22en-US%22%3E%3CP%3EThese%20may%20help%20you%20get%20started.%20If%20you've%20never%20done%20this%20then%20I'd%20suggest%20starting%20with%20a%20test%20environment%20or%20find%20someone%20to%20help%20you%20with%20it.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows-server%2Fvirtualization%2Fhyper-v%2Fget-started%2Finstall-the-hyper-v-role-on-windows-server%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows-server%2Fvirtualization%2Fhyper-v%2Fget-started%2Finstall-the-hyper-v-role-on-windows-server%3C%2FFONT%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows-server%2Fvirtualization%2Fhyper-v%2Fget-started%2Fcreate-a-virtual-machine-in-hyper-v%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows-server%2Fvirtualization%2Fhyper-v%2Fget-started%2Fcreate-a-virtual-machine-in-hyper-v%3C%2FA%3E%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1171991%22%20slang%3D%22en-US%22%3ERe%3A%20Virtual%20Windows%20Server%202008%20R2%20Additional%20Domain%20Controller%20Upgrade%20Help%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1171991%22%20slang%3D%22en-US%22%3EHello%20Dave%2C%3CBR%20%2F%3E%3CBR%20%2F%3EI%20already%20found%20out%20that%20our%20domain%20controller%20is%20installed%20in%20ESXi.%20I%20logged%20in%20using%20vSphere%20Client.%20can%20I%20tell%20that%20using%20this%20will%20be%20my%20test%20environment%3F%3CBR%20%2F%3E%3CBR%20%2F%3Ereference%3A%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fimgur.com%2F8bSJEzn%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fimgur.com%2F8bSJEzn%3C%2FA%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1172050%22%20slang%3D%22en-US%22%3ERe%3A%20Virtual%20Windows%20Server%202008%20R2%20Additional%20Domain%20Controller%20Upgrade%20Help%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1172050%22%20slang%3D%22en-US%22%3E%3CP%3EYes%2C%20you%20absolutely%20could%20setup%20an%20isolated%20test%20environment%20on%20VMWare%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1172186%22%20slang%3D%22en-US%22%3ERe%3A%20Virtual%20Windows%20Server%202008%20R2%20Additional%20Domain%20Controller%20Upgrade%20Help%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1172186%22%20slang%3D%22en-US%22%3EThank%20you%20so%20much%2C%20Dave%2C%20for%20your%20help!%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Hi All,

 

I'm having confusion about upgrading our company domain controller. I've researched from the internet everything I could gather even read all the docs from Microsoft about the guides/overviews about the upgrade on the said OS. still, I'm not 100% sure if all the research I gather will help me through the process/steps to upgrade the server from the latest/available new version. 

Our company has 4 domain controllers, 3 of them are the additional/backup DC. I'm trying to install to 1 of the additional DC. is it possible to upgrade if that additional is on a virtual machine? I'm new to virtualization and I don't know if either I will upgrade our primary DC or the additional DC. just because the additionals are still running windows 2008 R2 Standard, I somehow want to upgrade one by one of them if I get successfully upgrade from 1 of the additional. the primary is now running 2012 R2.  

 

 

7 Replies
Highlighted

Hi @spacegabx 

 

It is possible to do an in-place upgrade for a virtual machine.

 

Highlighted
Best Response confirmed by spacegabx (Occasional Contributor)
Solution

Do not in-place upgrade them. The much simpler / clean method is to use dcdiag / repadmin tools to verify health correcting all errors found before starting. Then stand up the new guest, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over (optional), transfer pdc emulator role (optional), use dcdiag / repadmin tools to again verify health, when all is good you can decommission / demote old one.

 

If 2019 were the target OS, then the two prerequisites to introducing the first 2019 domain controller are that domain functional level needs to be 2008 or higher and older sysvol FRS replication needs to have been migrated to DFSR
https://techcommunity.microsoft.com/t5/Storage-at-Microsoft/Streamlined-Migration-of-FRS-to-DFSR-SYS...

 

 

 

Highlighted
Hello Dave.

I also want this kind of method of migrating path because it is convenient. but honestly, I don't know how to setup. like running the new guest on our server. I have some ideas in my mind on how to deploy the new guest on the server and somehow join in the domain. but firstly, will I need to go to our console or physical server to deploy there the new guest?
Highlighted
Highlighted
Hello Dave,

I already found out that our domain controller is installed in ESXi. I logged in using vSphere Client. can I tell that using this will be my test environment?

reference:
https://imgur.com/8bSJEzn
Highlighted

Yes, you absolutely could setup an isolated test environment on VMWare

 

 

Highlighted
Thank you so much, Dave, for your help!