ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Raising Domain/Forest from 2008 to 2016: What do I need to know?

    Scheduled Pinned Locked Moved IT Discussion
    active directory
    47 Posts 7 Posters 3.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DashrenderD
      Dashrender @scottalanmiller
      last edited by

      @scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

      @dashrender said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

      @scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

      I think Samba will join 2016, but it can only be a DC at 2008 R2 level.

      I suppose, the wiki might just be out of date.

      Or REALLY up to date. Looks like 4.4 will set to 2012 R2 now.

      LOL - which is why I posted about 2012 R2 in my post 😛

      scottalanmillerS 1 Reply Last reply Reply Quote 0
      • scottalanmillerS
        scottalanmiller @Dashrender
        last edited by

        @dashrender said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

        @scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

        @dashrender said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

        @scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

        I think Samba will join 2016, but it can only be a DC at 2008 R2 level.

        I suppose, the wiki might just be out of date.

        Or REALLY up to date. Looks like 4.4 will set to 2012 R2 now.

        LOL - which is why I posted about 2012 R2 in my post 😛

        Yes, but you mentioned it in the joining way, which is not what the limit is about.

        1 Reply Last reply Reply Quote 0
        • scottalanmillerS
          scottalanmiller @Dashrender
          last edited by

          @dashrender said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

          Curious - why do you want/care about upgrading the domain/forest?

          One reason to not do it is the ability to integrate Linux boxes with Samba. Unless Samba released a version I'm unaware of, it only compatible with forest/domain level of 2012 R2.

          https://wiki.samba.org/index.php/Raising_the_Functional_Levels

          If you plan to never do this, then don't worry about it 🙂

          See you mention compatibility. It's compatible with 2016. The limit you are mentioning is not related to compatibility.

          DashrenderD 1 Reply Last reply Reply Quote 0
          • DashrenderD
            Dashrender @scottalanmiller
            last edited by

            @scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

            @dashrender said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

            Curious - why do you want/care about upgrading the domain/forest?

            One reason to not do it is the ability to integrate Linux boxes with Samba. Unless Samba released a version I'm unaware of, it only compatible with forest/domain level of 2012 R2.

            https://wiki.samba.org/index.php/Raising_the_Functional_Levels

            If you plan to never do this, then don't worry about it 🙂

            See you mention compatibility. It's compatible with 2016. The limit you are mentioning is not related to compatibility.

            Again - so true - I specifically was referring to the ability to be a DC, as like you, I assumed that general ability to access 2016 shares for example was likely possible, regardless of forest/domain level.

            1 Reply Last reply Reply Quote 0
            • Mike DavisM
              Mike Davis
              last edited by

              I usually go and enable the AD recycle bin right after that. It's one of those things you don't think about until the day you need it ...

              dbeatoD NerdyDadN 2 Replies Last reply Reply Quote 5
              • dbeatoD
                dbeato @Mike Davis
                last edited by

                @mike-davis said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                I usually go and enable the AD recycle bin right after that. It's one of those things you don't think about until the day you need it ...

                Yes!

                1 Reply Last reply Reply Quote 1
                • ObsolesceO
                  Obsolesce @NerdyDad
                  last edited by

                  @nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                  I am currently in the process of retiring my 2008 AD servers in order to raise our forest and domain levels to 2016. We already have 3 WS 2016 AD servers in our environment (1 at each location). I have about 4 2008 AD servers to retire before I can do that, so I have some time. There is only 1 forest/1 domain to be concerned about here. We're not tied to any other domains or forests. We are tied to O365 through AAD Sync. We currently use SYSVOL batch scripts to map drives.

                  What do I need to consider changing before raising the domain/forest level?

                  It only ever adds functionality, never removes any.
                  In every case you can go ahead and raise it. It's a myth that you need to be concerned about it

                  scottalanmillerS 1 Reply Last reply Reply Quote 1
                  • NerdyDadN
                    NerdyDad @Mike Davis
                    last edited by

                    @mike-davis said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                    I usually go and enable the AD recycle bin right after that. It's one of those things you don't think about until the day you need it ...

                    Done

                    1 Reply Last reply Reply Quote 1
                    • scottalanmillerS
                      scottalanmiller @Obsolesce
                      last edited by

                      @tim_g said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                      @nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                      I am currently in the process of retiring my 2008 AD servers in order to raise our forest and domain levels to 2016. We already have 3 WS 2016 AD servers in our environment (1 at each location). I have about 4 2008 AD servers to retire before I can do that, so I have some time. There is only 1 forest/1 domain to be concerned about here. We're not tied to any other domains or forests. We are tied to O365 through AAD Sync. We currently use SYSVOL batch scripts to map drives.

                      What do I need to consider changing before raising the domain/forest level?

                      It only ever adds functionality, never removes any.
                      In every case you can go ahead and raise it. It's a myth that you need to be concerned about it

                      Other than raising it to a level where you block your choice to move off of Windows. That's the only thing.

                      NerdyDadN 2 Replies Last reply Reply Quote 1
                      • NerdyDadN
                        NerdyDad @scottalanmiller
                        last edited by

                        @scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                        @tim_g said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                        @nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                        I am currently in the process of retiring my 2008 AD servers in order to raise our forest and domain levels to 2016. We already have 3 WS 2016 AD servers in our environment (1 at each location). I have about 4 2008 AD servers to retire before I can do that, so I have some time. There is only 1 forest/1 domain to be concerned about here. We're not tied to any other domains or forests. We are tied to O365 through AAD Sync. We currently use SYSVOL batch scripts to map drives.

                        What do I need to consider changing before raising the domain/forest level?

                        It only ever adds functionality, never removes any.
                        In every case you can go ahead and raise it. It's a myth that you need to be concerned about it

                        Other than raising it to a level where you block your choice to move off of Windows. That's the only thing.

                        That's not going to be a decision management will support unless we can come up with an entirely new environment that will support all of our functions.

                        • ERP System
                        • Email (easy)
                        • Integration with FedEx
                        • Integration with other parties/customers for order management

                        I am sure there is more here that I am missing. Just can't think of what it was.

                        scottalanmillerS 2 Replies Last reply Reply Quote 0
                        • scottalanmillerS
                          scottalanmiller @NerdyDad
                          last edited by

                          @nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                          @scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                          @tim_g said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                          @nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                          I am currently in the process of retiring my 2008 AD servers in order to raise our forest and domain levels to 2016. We already have 3 WS 2016 AD servers in our environment (1 at each location). I have about 4 2008 AD servers to retire before I can do that, so I have some time. There is only 1 forest/1 domain to be concerned about here. We're not tied to any other domains or forests. We are tied to O365 through AAD Sync. We currently use SYSVOL batch scripts to map drives.

                          What do I need to consider changing before raising the domain/forest level?

                          It only ever adds functionality, never removes any.
                          In every case you can go ahead and raise it. It's a myth that you need to be concerned about it

                          Other than raising it to a level where you block your choice to move off of Windows. That's the only thing.

                          That's not going to be a decision management will support unless we can come up with an entirely new environment that will support all of our functions.

                          • ERP System
                          • Email (easy)
                          • Integration with FedEx
                          • Integration with other parties/customers for order management

                          I am sure there is more here that I am missing. Just can't think of what it was.

                          What do any of those things have to do with your AD level?

                          NerdyDadN dbeatoD ObsolesceO 3 Replies Last reply Reply Quote 2
                          • NerdyDadN
                            NerdyDad @scottalanmiller
                            last edited by

                            @scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                            @nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                            @scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                            @tim_g said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                            @nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                            I am currently in the process of retiring my 2008 AD servers in order to raise our forest and domain levels to 2016. We already have 3 WS 2016 AD servers in our environment (1 at each location). I have about 4 2008 AD servers to retire before I can do that, so I have some time. There is only 1 forest/1 domain to be concerned about here. We're not tied to any other domains or forests. We are tied to O365 through AAD Sync. We currently use SYSVOL batch scripts to map drives.

                            What do I need to consider changing before raising the domain/forest level?

                            It only ever adds functionality, never removes any.
                            In every case you can go ahead and raise it. It's a myth that you need to be concerned about it

                            Other than raising it to a level where you block your choice to move off of Windows. That's the only thing.

                            That's not going to be a decision management will support unless we can come up with an entirely new environment that will support all of our functions.

                            • ERP System
                            • Email (easy)
                            • Integration with FedEx
                            • Integration with other parties/customers for order management

                            I am sure there is more here that I am missing. Just can't think of what it was.

                            What do any of those things have to do with your AD level?

                            Nothing about AD level. About going from a Windows environment to a Linux environment. I am sure this will save us a ton of money by freeing up licenses, but I am also looking at support of the business.

                            scottalanmillerS 1 Reply Last reply Reply Quote 0
                            • dbeatoD
                              dbeato @scottalanmiller
                              last edited by

                              @scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                              @nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                              @scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                              @tim_g said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                              @nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                              I am currently in the process of retiring my 2008 AD servers in order to raise our forest and domain levels to 2016. We already have 3 WS 2016 AD servers in our environment (1 at each location). I have about 4 2008 AD servers to retire before I can do that, so I have some time. There is only 1 forest/1 domain to be concerned about here. We're not tied to any other domains or forests. We are tied to O365 through AAD Sync. We currently use SYSVOL batch scripts to map drives.

                              What do I need to consider changing before raising the domain/forest level?

                              It only ever adds functionality, never removes any.
                              In every case you can go ahead and raise it. It's a myth that you need to be concerned about it

                              Other than raising it to a level where you block your choice to move off of Windows. That's the only thing.

                              That's not going to be a decision management will support unless we can come up with an entirely new environment that will support all of our functions.

                              • ERP System
                              • Email (easy)
                              • Integration with FedEx
                              • Integration with other parties/customers for order management

                              I am sure there is more here that I am missing. Just can't think of what it was.

                              What do any of those things have to do with your AD level?

                              It has more to do with Linux implementation.

                              scottalanmillerS 1 Reply Last reply Reply Quote 0
                              • scottalanmillerS
                                scottalanmiller @NerdyDad
                                last edited by

                                @nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                @scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                @nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                @scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                @tim_g said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                @nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                I am currently in the process of retiring my 2008 AD servers in order to raise our forest and domain levels to 2016. We already have 3 WS 2016 AD servers in our environment (1 at each location). I have about 4 2008 AD servers to retire before I can do that, so I have some time. There is only 1 forest/1 domain to be concerned about here. We're not tied to any other domains or forests. We are tied to O365 through AAD Sync. We currently use SYSVOL batch scripts to map drives.

                                What do I need to consider changing before raising the domain/forest level?

                                It only ever adds functionality, never removes any.
                                In every case you can go ahead and raise it. It's a myth that you need to be concerned about it

                                Other than raising it to a level where you block your choice to move off of Windows. That's the only thing.

                                That's not going to be a decision management will support unless we can come up with an entirely new environment that will support all of our functions.

                                • ERP System
                                • Email (easy)
                                • Integration with FedEx
                                • Integration with other parties/customers for order management

                                I am sure there is more here that I am missing. Just can't think of what it was.

                                What do any of those things have to do with your AD level?

                                Nothing about AD level. About going from a Windows environment to a Linux environment. I am sure this will save us a ton of money by freeing up licenses, but I am also looking at support of the business.

                                Oh, but what does THAT have to do with it, either? Just as disconnected as the AD level.

                                1 Reply Last reply Reply Quote 0
                                • scottalanmillerS
                                  scottalanmiller @dbeato
                                  last edited by

                                  @dbeato said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                  @scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                  @nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                  @scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                  @tim_g said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                  @nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                  I am currently in the process of retiring my 2008 AD servers in order to raise our forest and domain levels to 2016. We already have 3 WS 2016 AD servers in our environment (1 at each location). I have about 4 2008 AD servers to retire before I can do that, so I have some time. There is only 1 forest/1 domain to be concerned about here. We're not tied to any other domains or forests. We are tied to O365 through AAD Sync. We currently use SYSVOL batch scripts to map drives.

                                  What do I need to consider changing before raising the domain/forest level?

                                  It only ever adds functionality, never removes any.
                                  In every case you can go ahead and raise it. It's a myth that you need to be concerned about it

                                  Other than raising it to a level where you block your choice to move off of Windows. That's the only thing.

                                  That's not going to be a decision management will support unless we can come up with an entirely new environment that will support all of our functions.

                                  • ERP System
                                  • Email (easy)
                                  • Integration with FedEx
                                  • Integration with other parties/customers for order management

                                  I am sure there is more here that I am missing. Just can't think of what it was.

                                  What do any of those things have to do with your AD level?

                                  It has more to do with Linux implementation.

                                  But how? What's the association?

                                  1 Reply Last reply Reply Quote 0
                                  • scottalanmillerS
                                    scottalanmiller @NerdyDad
                                    last edited by

                                    @nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                    @scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                    @tim_g said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                    @nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                    I am currently in the process of retiring my 2008 AD servers in order to raise our forest and domain levels to 2016. We already have 3 WS 2016 AD servers in our environment (1 at each location). I have about 4 2008 AD servers to retire before I can do that, so I have some time. There is only 1 forest/1 domain to be concerned about here. We're not tied to any other domains or forests. We are tied to O365 through AAD Sync. We currently use SYSVOL batch scripts to map drives.

                                    What do I need to consider changing before raising the domain/forest level?

                                    It only ever adds functionality, never removes any.
                                    In every case you can go ahead and raise it. It's a myth that you need to be concerned about it

                                    Other than raising it to a level where you block your choice to move off of Windows. That's the only thing.

                                    That's not going to be a decision management will support unless we can come up with an entirely new environment that will support all of our functions.

                                    This doesn't make any sense . Linux is a drop in replacement here. So all of this is already supported. Windows and Linux aren't relevant to the discussion. The discussion is AD.

                                    NerdyDadN 1 Reply Last reply Reply Quote 0
                                    • NerdyDadN
                                      NerdyDad @scottalanmiller
                                      last edited by

                                      @scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                      @tim_g said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                      @nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                      I am currently in the process of retiring my 2008 AD servers in order to raise our forest and domain levels to 2016. We already have 3 WS 2016 AD servers in our environment (1 at each location). I have about 4 2008 AD servers to retire before I can do that, so I have some time. There is only 1 forest/1 domain to be concerned about here. We're not tied to any other domains or forests. We are tied to O365 through AAD Sync. We currently use SYSVOL batch scripts to map drives.

                                      What do I need to consider changing before raising the domain/forest level?

                                      It only ever adds functionality, never removes any.
                                      In every case you can go ahead and raise it. It's a myth that you need to be concerned about it

                                      Other than raising it to a level where you block your choice to move off of Windows. That's the only thing.

                                      Let me back up and ask for clarification on the statement above.

                                      coliverC scottalanmillerS 2 Replies Last reply Reply Quote 0
                                      • coliverC
                                        coliver @NerdyDad
                                        last edited by

                                        @nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                        @scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                        @tim_g said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                        @nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                        I am currently in the process of retiring my 2008 AD servers in order to raise our forest and domain levels to 2016. We already have 3 WS 2016 AD servers in our environment (1 at each location). I have about 4 2008 AD servers to retire before I can do that, so I have some time. There is only 1 forest/1 domain to be concerned about here. We're not tied to any other domains or forests. We are tied to O365 through AAD Sync. We currently use SYSVOL batch scripts to map drives.

                                        What do I need to consider changing before raising the domain/forest level?

                                        It only ever adds functionality, never removes any.
                                        In every case you can go ahead and raise it. It's a myth that you need to be concerned about it

                                        Other than raising it to a level where you block your choice to move off of Windows. That's the only thing.

                                        Let me back up and ask for clarification on the statement above.

                                        What does AD have to do with the listed applications? They run on Windows correct? Then moving to a Linux based SAMBA server probably wouldn't be an issue.

                                        1 Reply Last reply Reply Quote 1
                                        • NerdyDadN
                                          NerdyDad @scottalanmiller
                                          last edited by

                                          @scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                          @nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                          @scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                          @tim_g said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                          @nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                          I am currently in the process of retiring my 2008 AD servers in order to raise our forest and domain levels to 2016. We already have 3 WS 2016 AD servers in our environment (1 at each location). I have about 4 2008 AD servers to retire before I can do that, so I have some time. There is only 1 forest/1 domain to be concerned about here. We're not tied to any other domains or forests. We are tied to O365 through AAD Sync. We currently use SYSVOL batch scripts to map drives.

                                          What do I need to consider changing before raising the domain/forest level?

                                          It only ever adds functionality, never removes any.
                                          In every case you can go ahead and raise it. It's a myth that you need to be concerned about it

                                          Other than raising it to a level where you block your choice to move off of Windows. That's the only thing.

                                          That's not going to be a decision management will support unless we can come up with an entirely new environment that will support all of our functions.

                                          This doesn't make any sense . Linux is a drop in replacement here. So all of this is already supported. Windows and Linux aren't relevant to the discussion. The discussion is AD.

                                          Totally understand that this discussion was about AD. I thought you were trying to turn the subject somewhere else.

                                          scottalanmillerS 1 Reply Last reply Reply Quote 0
                                          • scottalanmillerS
                                            scottalanmiller @NerdyDad
                                            last edited by

                                            @nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                            @scottalanmiller said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                            @tim_g said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                            @nerdydad said in Raising Domain/Forest from 2008 to 2016: What do I need to know?:

                                            I am currently in the process of retiring my 2008 AD servers in order to raise our forest and domain levels to 2016. We already have 3 WS 2016 AD servers in our environment (1 at each location). I have about 4 2008 AD servers to retire before I can do that, so I have some time. There is only 1 forest/1 domain to be concerned about here. We're not tied to any other domains or forests. We are tied to O365 through AAD Sync. We currently use SYSVOL batch scripts to map drives.

                                            What do I need to consider changing before raising the domain/forest level?

                                            It only ever adds functionality, never removes any.
                                            In every case you can go ahead and raise it. It's a myth that you need to be concerned about it

                                            Other than raising it to a level where you block your choice to move off of Windows. That's the only thing.

                                            Let me back up and ask for clarification on the statement above.

                                            If you raise the AD level to 2012 R2, you can still optionally use Windows or Linux for your AD servers. If you go to 2016, Linux is no longer an option until Samba brings out an update to allow it to be a 2016 level server. As long as you don't go all of the way to 2016, you have no Windows based AD dependency here.

                                            1 Reply Last reply Reply Quote 2
                                            • 1
                                            • 2
                                            • 3
                                            • 2 / 3
                                            • First post
                                              Last post