Planning to upgrade AD 2008 R2 to AD 2016

[Arkom]

Hi Microsoft Support 

I planning to upgrade AD 2008 R2 to AD 2016. The current environment information as below:

1. Active Directory Windows 2008 R2

2. Domain function level is Windows server 2003

3. Forest function level is Windows server 2003

4. Exchange 2010 SP3 RU19 running on Windows 2008 R2

I have some business application server running on windows server 2003 R2 ( No planning upgrade now). 

My question is:

1.  Can I upgrade the active directory to Windows server 2016 (if I do not need to up Domain function level )?  

2. What any affect to Exchange server 2010 ? 

3. What any concern about this upgrade?

Thank you

Arkom

[terrylee]

Hello, @Arkom, it is quite a complex procedure that includes setting up the new servers, migrating the FSMO roles, DNS and DHCP servers operations, migrating the Certificate Authority and the NPS roles, and decommissioning the old servers as a final result.

Check this helpful step-by-step guide to see all the details. Don't forget to backup your MO365 accounts, it is vital in our times when data is the life and money of your organization and any day can bring the risks of cyberattacks or ransomware issues.

[pedramxp]

Hi,

you have to install at least Exchange 2010 SP3 RU22. otherwise Exchange 2010 doesn't support ADC2016  schema

Cheers

[DSPatrick]

As long as the 2003 domain controllers are gone 2003 DFL/FFL is supported.

https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/active-directory-functional-levels

See the support matrix here.

https://technet.microsoft.com/en-us/library/ff728623%28v=exchg.150%29.aspx?f=255&MSPPError=-2147217396

https://blogs.technet.microsoft.com/rmilne/2018/06/21/exchange-2010-support-for-windows-server-2016-domain-controllers/

 As to concerns; I would not do an in-place upgrade. Always much safer to clean install. 

 I'd use dcdiag / repadmin tools to verify health correcting all errors found before starting. Then I'd stand up the new 2016, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over (optional), transfer pdc emulator role (optional), use dcdiag / repadmin tools to verify health, when all is good you can decommission / demote old one.

[Arkom]

Hi DSPatrick

Thank you for your reply information. 

Arkom

[DSPatrick]

You're welcome.