locked
2008 Enterprise & 2008 R2 as domain controllers RRS feed

  • Question

  • I have to domain controllers in our domain , one is 2008 Enterprise 23-bit, the second is 2008 64-bit R2..

    i need to upgrade the domain level in our domain to either 2008 R2, or 2008.... which should i go with?... does it matter?

    thanks

    rob davis
    Tuesday, March 2, 2010 6:13 PM

Answers

  • The operation will be carried out on the one that hosts the PDC Emulator role, but as long as you are using standard AD tools, the location from which you will invoke the change does not matter...
    Note that you will not be able to raise the functional level to 2008 R2 though as long as you have a Windows Server 2008 DC - so at this point, you will need to go with Windows Server 2008 functional level...

    hth
    Marcin
    • Proposed as answer by Meinolf Weber Thursday, March 4, 2010 11:32 AM
    • Marked as answer by Bruce-Liu Tuesday, March 9, 2010 6:21 AM
    Tuesday, March 2, 2010 6:17 PM
  • Have you tested either in a test environment prior to the upgrade?  R2 provides a new feature that 2008 doesn't and that is the AD recycle bin.  In order to go to a specific domain/forest level all dc's have to be at that o/s.  In your scenario, you have 2008 and 2008 R2, so the only level you can go to is 2008 (R2 is not an option).


    --
    Paul Bergson
    MVP - Directory Services
    MCTS, MCT, MCSE, MCSA, Security+, BS CSci
    2008, 2003, 2000 (Early Achiever), NT4
    Microsoft's Thrive IT Pro of the Month - June 2009

    http://www.pbbergs.com

    Please no e-mails, any questions should be posted in the NewsGroup This
    posting is provided "AS IS" with no warranties, and confers no rights.

    • Proposed as answer by Meinolf Weber Thursday, March 4, 2010 11:33 AM
    • Marked as answer by Bruce-Liu Tuesday, March 9, 2010 6:21 AM
    Tuesday, March 2, 2010 7:06 PM

All replies

  • The operation will be carried out on the one that hosts the PDC Emulator role, but as long as you are using standard AD tools, the location from which you will invoke the change does not matter...
    Note that you will not be able to raise the functional level to 2008 R2 though as long as you have a Windows Server 2008 DC - so at this point, you will need to go with Windows Server 2008 functional level...

    hth
    Marcin
    • Proposed as answer by Meinolf Weber Thursday, March 4, 2010 11:32 AM
    • Marked as answer by Bruce-Liu Tuesday, March 9, 2010 6:21 AM
    Tuesday, March 2, 2010 6:17 PM
  • Have you tested either in a test environment prior to the upgrade?  R2 provides a new feature that 2008 doesn't and that is the AD recycle bin.  In order to go to a specific domain/forest level all dc's have to be at that o/s.  In your scenario, you have 2008 and 2008 R2, so the only level you can go to is 2008 (R2 is not an option).


    --
    Paul Bergson
    MVP - Directory Services
    MCTS, MCT, MCSE, MCSA, Security+, BS CSci
    2008, 2003, 2000 (Early Achiever), NT4
    Microsoft's Thrive IT Pro of the Month - June 2009

    http://www.pbbergs.com

    Please no e-mails, any questions should be posted in the NewsGroup This
    posting is provided "AS IS" with no warranties, and confers no rights.

    • Proposed as answer by Meinolf Weber Thursday, March 4, 2010 11:33 AM
    • Marked as answer by Bruce-Liu Tuesday, March 9, 2010 6:21 AM
    Tuesday, March 2, 2010 7:06 PM
  • I did look at changing the domain level, and i had 2 choices either 2008, or 2008 R2...... but, after reading your replies, i willl make it so both servers are R2 ......

    (I had to re-add a 2003 domain controller back into our environment today cause when i upgraded the 2nd domain controller to 2008, it messed up my Blackberry Enterprise Server... ( Our bes server is version 5.0 latest),  the logon to the bes server uses AD to authenticate. for some reason, server 2008 talks differently with the BES server than did server 2003  the issue has to do with LDAP. once i put a 2003 server back online, i was able to log onto the BES server which in turn i created an account from with BES, so i dont have to authenticate with AD anymore....


    I just had to vent....   :)

    r davis
    Friday, March 5, 2010 2:54 AM