If you are a systems administrator for an older company (like me), you probably have a few servers running Microsoft’s Windows Server 2003 operating system on your network. Most sysadmins are aware that support for Windows Server 2003 will end on July 14, 2015 (6 days from writing this post), which means no more software and security updates from the folks over in Redmond. Luckily our company has a big enough IT budget to have purchased Server 2008 licenses a long time ago but migrating servers is a slow and daunting task. One of the last 2003 servers we have on our network is a 2003 domain controller. Replacing this DC are two 2008 R2 AD servers but we need to demote the 2003 server and raise the functionality level of our domain so we can use new features like the AD recycle bin which lets admins restore deleted objects from active directory. Older AD functionality is still supported so any applications or services that used those functions will continue to work as before.
First we need to run demote the 2003 server.
Note: you need to have at least another domain controller in your network, otherwise you will lose your entire AD.
- On your 2003 domain controller, log in using a domain admins account.
- Click Start, and then click Run.
- In Open, type dcpromo to open the Active Directory Installation Wizard, and then click Next.
- On the Remove Active Directory page, click Next, and then continue to follow the wizard.
After your server is demoted, we need to raise the functionality of our domain.
To check the functionality level of your domain, open up powershell and type these commands
# Get the Forest functional level
(Get-ADForest).ForestMode
# Get the Domain functional level
(Get-ADDomain).DomainMode
And you should get results like mine.
Now, lets raise the functional level….
On your 2008 domain controller, open up Active Directory Domains and Trusts, right click your domain and click Raise Domain Functional Level…
On the Raise domain functional level page, choose Windows Server 2008 if you AD is running Server 2008 or Windows Server 2008 R2 if you are running Server 2008 R2. Click Raise.
That is it for the domain.
To raise the forest functional level, on the same Active Directory Domains and Trusts page, right click Active Directory Domains and Trusts and click Raise Forest Functional Level…
Pick the appropriate forest functional level from before and click Raise.
Check to see if the levels were raised using the same powershell commands from before.
# Get the Forest functional level
(Get-ADForest).ForestMode
# Get the Domain functional level
(Get-ADDomain).DomainMode
You should see your updated results.
And that is it. Good luck with the rest of you migration!
