{"id":3071,"date":"2020-12-11T15:09:21","date_gmt":"2020-12-11T21:09:21","guid":{"rendered":"https:\/\/microsoftgeek.com\/?p=3071"},"modified":"2020-12-11T15:09:21","modified_gmt":"2020-12-11T21:09:21","slug":"migrate-active-directory-from-server-2012-r2-to-server-2016","status":"publish","type":"post","link":"https:\/\/microsoftgeek.com\/?p=3071","title":{"rendered":"Migrate Active Directory from Server 2012 R2 to Server 2016"},"content":{"rendered":"\n

This is very straight forward process, but make sure you test it 1st in your Test Environment.<\/p>\n\n\n\n

I\u2019m using 2 Hyper-V Machine,<\/strong> which is my Previous domain Server (Microsoft.lk.com).<\/strong><\/p>\n\n\n\n

1- Login to windows Server 2016 machine with local admin credentials, Open server manager dashboard, click Add Roles and features.<\/strong><\/p>\n\n\n\n

\"3\"<\/figure>\n\n\n\n

2 \u2013 Click Next,<\/strong> Choose \u201cRole-based or feature-based installation\u201d<\/strong> radio button and click Next, Scroll down and choose Active Directory Domain Services from server roles. When a new window appears, click Add Features, Click Next until confirm installation selections page, When an installation has been completed and server prompts you for further configuration, click Promote this server to a domain controller. (refer picture).<\/strong><\/p>\n\n\n\n

\"4\"<\/figure>\n\n\n\n
\"5\"<\/figure>\n\n\n\n
\"6\"<\/figure>\n\n\n\n
\"7\"<\/figure>\n\n\n\n
\"8\"<\/figure>\n\n\n\n
\"9\"<\/figure>\n\n\n\n
\"10\"<\/figure>\n\n\n\n
\"11\"<\/figure>\n\n\n\n
\"12\"<\/figure>\n\n\n\n
\"14\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

3 \u2013 Deployment Configuration interface, click Add a domain controller to an existing domain, then click select button and browse to Microsoft.lk.com,<\/strong> verify that credentials is Administrator, and then click Next. (refer picture).<\/strong><\/p>\n\n\n\n

\"6\"<\/figure>\n\n\n\n
\"3\"<\/figure>\n\n\n\n
\"4\"<\/figure>\n\n\n\n
\"5\"<\/figure>\n\n\n\n

4 \u2013 On the Domain Controller Options interface, verify that Domain Name System (DNS) server and Global Catalog (GC) is selected and fill up the Password for DSRM, and then click Next.<\/p>\n\n\n\n

\"Screenshot<\/figure>\n\n\n\n

5 \u2013 On the DNS Options interface, click Next<\/strong><\/p>\n\n\n\n

\"18\"<\/figure>\n\n\n\n

6 \u2013 on the Additional Options interface, beside the Replicate from : click Dc-Server.Microsoft.lk.com<\/strong> (this is our Server 2012 R2 AD), and then click Next.<\/strong><\/p>\n\n\n\n

\"Screenshot<\/figure>\n\n\n\n
\"Screenshot<\/figure>\n\n\n\n

7 \u2013 On the Paths interface, click Next to proceed.<\/strong><\/p>\n\n\n\n

\"20\"<\/figure>\n\n\n\n

8 \u2013 On the Preparation Options interface, click Next.<\/strong><\/p>\n\n\n\n

\"Screenshot<\/figure>\n\n\n\n

9 \u2013 On the Reviews Options interface, verify all the information and then click Next.<\/strong><\/p>\n\n\n\n

\"Screenshot<\/figure>\n\n\n\n

<\/p>\n\n\n\n

10 \u2013 On the Prerequisites Check interface, verify that All prerequisites checks passed successfully,  and then click Install.<\/strong><\/p>\n\n\n\n

\"Screenshot<\/figure>\n\n\n\n

11 \u2013 Please wait for few minutes<\/strong> for the process to complete.<\/p>\n\n\n\n

\"Screenshot<\/figure>\n\n\n\n

12 \u2013 Once your Server 2016 restart, log in as domain Administrator<\/strong>.<\/p>\n\n\n\n

\"Screenshot<\/figure>\n\n\n\n

<\/p>\n\n\n\n

13 \u2013 Follow this steps must :\u2013 Migrating FSMO<\/strong> (Flexible Single Master Operation) roles to Windows Server 2016.<\/p>\n\n\n\n

Open active directory users and computers console<\/strong>. Right-click your domain and <\/strong>then click Operations Masters .<\/strong><\/p>\n\n\n\n

\"22<\/figure>\n\n\n\n

Open RID tab and click Change.<\/strong><\/p>\n\n\n\n

\"22<\/figure>\n\n\n\n

When you are asked for confirmation, click Yes.<\/strong><\/p>\n\n\n\n

\"22<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Click OK.<\/strong><\/p>\n\n\n\n

\"22<\/figure>\n\n\n\n

Open PDC<\/strong> tab and click Change.<\/strong><\/p>\n\n\n\n

\"22<\/figure>\n\n\n\n

When you are asked for confirmation, click Yes.<\/strong><\/p>\n\n\n\n

\"22<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Click OK.<\/strong><\/p>\n\n\n\n

\"22<\/figure>\n\n\n\n

Open Infrastructure <\/strong>tab and click Change.<\/strong><\/p>\n\n\n\n

\"22<\/figure>\n\n\n\n

When you are asked for confirmation, click Yes.<\/strong><\/p>\n\n\n\n

\"22<\/figure>\n\n\n\n

Click OK.<\/strong><\/p>\n\n\n\n

\"22<\/figure>\n\n\n\n

14 \u2013 Still on our Dc-Server.Microsoft.lk.com<\/strong> server, open Active Directory Domain and Trusts console<\/strong>, right click Active Directory Domain and Trusts and then click Change Active Directory Domain Controller.<\/strong><\/p>\n\n\n\n

\"15\"<\/figure>\n\n\n\n

15 \u2013 On the Change Directory Server interface, click This Domain Controller or AD LDS instance and then choose your new Windows Server 2016 which is DC-CLOUD.Microsoft.lk.com<\/strong>, and then click OK.<\/strong><\/p>\n\n\n\n

\"16\"<\/figure>\n\n\n\n

16 \u2013 On the Active Directory Domains and Trusts interface, hover over the Active Directory Domains and Trusts and verify<\/strong> that the server now reflects your new Windows server 2016 which is DC-CLOUD.Microsoft.lk.com.<\/strong><\/p>\n\n\n\n

\"17\"<\/figure>\n\n\n\n

17 \u2013 On the Active Directory Domains and Trusts interface, right click Active Directory Domains and Trusts<\/strong> found in the folder tree and select Operations Manager<\/strong>.<\/p>\n\n\n\n

\"18\"<\/figure>\n\n\n\n

18 \u2013 In the Operations Master interface<\/strong>, click Change<\/strong> to transfer the domain naming master role to the Windows Server 2016.<\/p>\n\n\n\n

\"19\"<\/figure>\n\n\n\n

19 \u2013 Click Yes<\/strong> when the wizard asked if you are sure you wish to transfer the operations master role to a different computer.<\/p>\n\n\n\n

\"20\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

20 \u2013 Once the Operations Master is successfully transferred, click OK<\/strong><\/p>\n\n\n\n

\"21\"<\/figure>\n\n\n\n

21 \u2013 On the Operation Master interface, verify that Domain naming operations master<\/strong> is now transferred to DC-CLOUD.Microsoft.lk.com<\/strong> server.<\/p>\n\n\n\n

\"22\"<\/figure>\n\n\n\n

22 \u2013 On the DC-CLOUD.Microsoft.lk.com<\/strong> server, open Command Prompt<\/strong> and then type regsvr32 schmmgmt.dll<\/strong> to change the Schema Master.<\/strong><\/p>\n\n\n\n

\"23\"<\/figure>\n\n\n\n
\"24\"<\/figure>\n\n\n\n

23 \u2013 Next we need to change Schema Master, on the DC-CLOUD.Microsoft.lk.com<\/strong> server, open Run Type MMC<\/strong>, click File and then click Add\/Remove Snap-in.<\/strong><\/p>\n\n\n\n

\"25\"<\/figure>\n\n\n\n
\"26\"<\/figure>\n\n\n\n

24 \u2013 On the Add or Remove Snap-ins interface<\/strong>, click Active Directory Schema,<\/strong> click Add<\/strong> and then click OK.<\/strong><\/p>\n\n\n\n

\"27\"<\/figure>\n\n\n\n
\"28\"<\/figure>\n\n\n\n

25 \u2013 On the Console, right click Active Directory Schema<\/strong> and then click Change Active Directory Domain Controller.<\/strong><\/p>\n\n\n\n

\"29.png\"<\/figure>\n\n\n\n

26 \u2013 On the Change Directory Server interface<\/strong>, click This Domain Controller or AD LDS instance<\/strong>, click DC-CLOUD.Microsoft.lk.com<\/strong> server and then click OK.<\/strong><\/p>\n\n\n\n

\"30\"<\/figure>\n\n\n\n

27 \u2013 On the Active Directory Schema box just click OK<\/strong> to proceed.<\/p>\n\n\n\n

\"31\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

28 \u2013 on the Console, right click Active Directory Schema<\/strong> and select Operations Master.<\/strong><\/p>\n\n\n\n

\"33\"<\/figure>\n\n\n\n

29 \u2013 On the Change Schema Master interface, click Change <\/strong>to transfer the schema master role to the Windows Server 2016 (DC-CLOUD.Microsoft.lk.com).<\/strong><\/p>\n\n\n\n

\"36\"<\/figure>\n\n\n\n

30 \u2013 When asked if you are sure you wish to transfer the schema master role to a different computer, just click Yes.<\/strong><\/p>\n\n\n\n

\"34\"<\/figure>\n\n\n\n

Once the schema master is successfully transferred, click OK<\/strong> to proceed.<\/p>\n\n\n\n

\"35\"<\/figure>\n\n\n\n

31 \u2013 Verify the current schema master (online)<\/strong> is now DC-CLOUD.Microsoft.lk.com<\/strong>, and then click Close.<\/p>\n\n\n\n

\"36\"<\/figure>\n\n\n\n

32 \u2013 Open PowerShell with elevated privileges and execute \u201cnetdom query fsmo\u201d command. Check if all the five FSMO roles have been transferred to Active Directory Domain Controller Windows Server 2016.<\/p>\n\n\n\n

\"37\"<\/figure>\n\n\n\n

33 \u2013 Uninstalling Active Directory Domain Services from Windows Server 2012 R2.<\/strong><\/p>\n\n\n\n

Login to Windows Server 2012 R2 machine with domain administrator credentials.<\/p>\n\n\n\n

Open PowerShell<\/strong> with elevated privileges and execute command:<\/p>\n\n\n\n

Uninstall-ADDSDomainController -DemoteOperationMasterRole \u2013RemoveApplicationPartition<\/p>\n\n\n\n

\"38\"<\/figure>\n\n\n\n

Provide the local administrator password and press enter.<\/p>\n\n\n\n

\"40\"<\/figure>\n\n\n\n
\"41\"<\/figure>\n\n\n\n

Be patient. The operation will be completed in few minutes and server will be rebooted automatically.<\/p>\n\n\n\n

\"43.png\"<\/figure>\n\n\n\n

34 \u2013 Upgrading Forest and Domain Functional Levels to Windows Server 2016.<\/strong><\/p>\n\n\n\n

Login to Windows Server 2016 domain controller<\/strong>, Open PowerShell with elevated privileges Execute command to change domain functional level,<\/strong><\/p>\n\n\n\n

Set-ADDomainMode \u2013identity yourdomain.com \u2013DomainMode Windows2016Domain<\/strong><\/p>\n\n\n\n

\"44\"<\/figure>\n\n\n\n
\"45\"<\/figure>\n\n\n\n
\"46\"<\/figure>\n\n\n\n

Login to Windows Server 2016 domain controller<\/strong>, Open PowerShell with elevated privileges Execute command to forest functional local,<\/strong><\/p>\n\n\n\n

Set-ADForestMode \u2013identity yourdomain.com \u2013ForestMode Windows2016Forest <\/strong><\/p>\n\n\n\n

\"47\"<\/figure>\n\n\n\n
\"48\"<\/figure>\n\n\n\n
\"49\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

35 \u2013 Last step,<\/strong> confirm if domain and forest functional levels<\/strong> have really been changed. Execute command,<\/p>\n\n\n\n

Get-ADDomain | fl Name, DomainMode<\/strong><\/p>\n\n\n\n

Get-ADForest | fl Name, ForestMode<\/strong><\/p>\n\n\n\n

\"53\"<\/figure>\n\n\n\n

Thank you!<\/p>\n","protected":false},"excerpt":{"rendered":"

This is very straight forward process, but make sure you test it 1st in your Test Environment. I\u2019m using 2 Hyper-V Machine, which is my Previous domain Server (Microsoft.lk.com). 1- Login to windows Server 2016 machine with local admin credentials, Open server manager dashboard, click Add Roles and features. 2 \u2013 Click Next, Choose \u201cRole-based or feature-based installation\u201d radio button and click Next, Scroll […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[42,48,63],"tags":[],"class_list":["post-3071","post","type-post","status-publish","format-standard","hentry","category-ad","category-microsoft-windows-server-2012","category-server-2016-2016"],"_links":{"self":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/3071","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3071"}],"version-history":[{"count":1,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/3071\/revisions"}],"predecessor-version":[{"id":3072,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/3071\/revisions\/3072"}],"wp:attachment":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3071"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3071"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3071"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}