Hero Banner

Products Discussions

Share best practices and get the latest Microsoft product info

Level 1 Contributor

Planning to upgrade AD 2008 R2 to AD 2016

Hi Microsoft Support 

I planning to upgrade AD 2008 R2 to AD 2016. The current environment information as below:

1. Active Directory Windows 2008 R2

2. Domain function level is Windows server 2003

3. Forest function level is Windows server 2003

4. Exchange 2010 SP3 RU19 running on Windows 2008 R2

I have some business application server running on windows server 2003 R2 ( No planning upgrade now). 

My question is:

1.  Can I upgrade the active directory to Windows server 2016 (if I do not need to up Domain function level )?  

2. What any affect to Exchange server 2010 ? 

3. What any concern about this upgrade?

Thank you




Level 4 Contributor

Hello, @Arkom, it is quite a complex procedure that includes setting up the new servers, migrating the FSMO roles, DNS and DHCP servers operations, migrating the Certificate Authority and the NPS roles, and decommissioning the old servers as a final result.


Check this helpful step-by-step guide to see all the details. Don't forget to backup your MO365 accounts, it is vital in our times when data is the life and money of your organization and any day can bring the risks of cyberattacks or ransomware issues.

Visitor 1


you have to install at least Exchange 2010 SP3 RU22. otherwise Exchange 2010 doesn't support ADC2016  schema


Level 6 Contributor

As long as the 2003 domain controllers are gone 2003 DFL/FFL is supported.


See the support matrix here.



 As to concerns; I would not do an in-place upgrade. Always much safer to clean install. 

 I'd use dcdiag / repadmin tools to verify health correcting all errors found before starting. Then I'd stand up the new 2016, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over (optional), transfer pdc emulator role (optional), use dcdiag / repadmin tools to verify health, when all is good you can decommission / demote old one.




Level 1 Contributor

Hi DSPatrick

Thank you for your reply information. 


Level 6 Contributor

You're welcome.