Migrating objects from 2008 to 2012 is better or migrating to 2016 is better. Are there any specific requirements? and best approach

Question

AD Migrating objects from FFL/DFL functional level forest 2008 to 2012 is better or migrating to FFL/DFL functional 2016 is better. Are there any specific requirements? and best approach .

Answer 1

The best overall approach is to migrate directly to a Windows Server 2016 functional level—but only if you can ensure that every domain controller in your environment is or will soon be running Windows Server 2016 (or later) and that all integrated applications are compatible with the newer features.

There's not specific requirements but in my experience is better go to 2016

Step by Step;

1. Deploy New Domain Controllers Running Server 2016: Introduce new DCs into your environment that run Windows Server 2016. This ensures you’re starting to build the infrastructure with the latest OS capabilities.
2. Ensure AD Health and Replication: Use tools like dcdiag and repadmin to verify that new and existing domain controllers are replicating correctly. Clean replication is critical for a smooth transition.
3. Transfer FSMO Roles: Once the Server 2016 DCs are stable, transfer all Flexible Single Master Operation roles from your older controllers to the new ones.
4. Demote and Remove Legacy Domain Controllers: Gradually demote and remove any Windows Server 2008 (or 2008 R2/2012, if present) domain controllers. This step is mandatory to raise the functional level to 2016.
5. Raise the Domain and Forest Functional Level to 2016: After ensuring every DC is running Server 2016, raise both the Domain Functional Level and the Forest Functional Level to 2016.

😊 If my answer helped you resolve your issue, please consider marking it as the correct answer. This helps others in the community find solutions more easily. Thanks!

Answer 2

Hi,

Migrating objects from a forest with a Domain Functional Level (DFL) and Forest Functional Level (FFL) of 2008 to 2012 or 2016 has different benefits.

Upgrading to Windows Server 2012 DFL/FFL enables features like Dynamic Access Control (DAC), Group Managed Service Accounts (gMSA), and the Active Directory Recycle Bin. Upgrading to Windows Server 2016 DFL/FFL provides additional features such as Privileged Access Management (PAM) and improvements in time synchronization.

Best Approach:

1. Plan and Prepare: Assess the current environment, identify any legacy systems, and plan the upgrade path.
2. Test: Perform the upgrade in a test environment to identify potential issues.
3. Backup: Ensure you have a full backup of the Active Directory environment.
4. Upgrade: Upgrade domain controllers to the required Windows Server version.
5. Raise Functional Levels: Use the Active Directory Administrative Center or PowerShell to raise the DFL and FFL.
6. Verify: Check the functionality and replication status after the upgrade.

https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/active-directory-functional-levels

Best Regards,

Ian Xue

---

If the Answer is helpful, please click "Accept Answer" and upvote it.