I'm considering an upgrade from Windows Server 2016 to 2022 for my domain controller, but I've heard mixed opinions about doing an in-place upgrade. My previous boss warned that it could cause serious issues like tombstoning our entire Active Directory. Has anyone had a smooth experience with this type of upgrade? What are the best practices to follow?
5 Answers
Many experienced administrators recommend against in-place upgrades for DCs. If you stick to the recommended method (setting up a new DC and transferring roles), you'll avoid most problems. There’s just too much that could go wrong during an upgrade. Plus, doing it this way keeps everything cleaner.
My team has encountered various issues with in-place upgrades, including replication errors. It's usually simpler and safer to set up a new DC. The risks simply aren't worth it, especially since AD is a critical application in any organization.
Right?! It's better to follow the path that’s recommended by Microsoft. You just can't be too careful.
I've done my share of in-place upgrades on simpler setups and it worked fine, but I wouldn’t risk it with a critical server like a DC. Set up a fresh server, migrate over, and ensure you're backed up before making any major changes.
It's a smart call to prioritize less risk when it comes to critical systems like DCs.
In-place upgrades on domain controllers can be risky. It's best to avoid them if you can. Instead, create a new server for the domain controller, promote it, then transfer the FSMO roles from the old one. This method minimizes the chance of issues and makes sure you don't tombstone your AD.
That sounds like the safer route. I’ve heard that even though some have done IPUs without problems, building a new one helps avoid a lot of potential headaches.
While some have had success with in-place upgrades, I second the idea of building new DCs. Handling the FSMO roles properly and ensuring replication works for both old and new setups is crucial.
Exactly. Minimizing downtime and ensuring stability should always come first.
Totally agree, moving roles and keeping old DCs for a while can help catch any issues early.