Raising Forest and Function levels

[mlc9]

I have recently introduced two new Win 2008 R2 domain controllers to our network, and demoted our only two other DCs running Win 2003. So the only two DCs we now have are on Win 2008 R2

I do not plan to ever introduce anything other than Win 2008 R2. Having said that, I know I need to raise my domain functional level to Win 2008 R2, but is there any reason I should not raise my forest level as well? The forest level appears to be on default Win 2000 level. We only have one domain by the way

Finally, if I do end up raising both, I assume I raise the forest first? And are any users affected, so that I can just feel comfortable doing it in the middle of a business day?

 

[kmcferrin]

If you are raising both, yuo raise the domain functional level first, then once that has been accomplished for all domains in the forest you can raise theh forest functional level. You mention that you are currently at Windows 2000 functional levels, is that Native or Mixed? If it is Mixed then you will have to go to Windows 2000 Native before you can upgraded to higher functional levels.

As far as any reasons NOT to raise the FL, keep in mind that functional levels control ONLY how DCs communicate with each other and replicate. As long as you will never need to add a DC from a previous version of Windows then you should be OK. Just keep in mind that upgrading the FL is not reversible (except in the case of going from 2008 to 2008 R2, and then only if you haven't enabled AD Recycle Bin).

As an FYI, once you have upgraded to 2008 R2 functional level you may want to look at changing the SYSVOL replication scheme from the NTFRS to the more efficient DFS-R model, and of course enabling AD Recycle Bin.

________________________________________
CompTIA A+, Network+, Server+, Security+
MCTS:Windows 7
MCSE:Security 2003
MCITP:Server Administrator
MCITP:Enterprise Administrator
MCITP:Virtualization Administrator 2008 R2
Certified Quest vWorkspace Administrator

 

[58sniper]

You might want to look at the impact of any applications that utilize AD. There may be some complications. Generally not, but better to be safe as you can't revert your FL or DL after they've been raised.

Stop by the new Tek-Tips group at LinkedIn. Come say hi, look for a job, have some fun.

http://www.linkedin.com/groups/Networking-TekTipscom-forums-members-3952395

Pat Richard MVP

http://www.exchangeblogs.com/