Before performing the removal of the last dc, it seems to me to stop the Domain Controller 2003 to validate the Kerberos tickets negotiated by a dc 2012 does not cause dynsfonctionnement with an application