I have a domain with fully functioning replication and all domain controllers running 2016 or higher, but the domain and forest functional levels are still set to 2008 R2. I'm planning to raise both to either 2012 R2 or 2016 during a maintenance window. I assume this process will be simple and non-disruptive, just a matter of clicking 'raise,' right? Also, I don't think I need to worry about the KRBTGT password since it would have been updated when I moved to 2008 R2. However, I know I should be changing the KRBTGT password every six months, which hasn't been consistent. My main concern is whether running the KRBTGT password script just once will have any negative impacts, especially since I heard making two changes close together isn't recommended.
1 Answer
Yes, raising the domain and forest functional levels should be straightforward and not cause any issues. If there’s a problem, you'll be notified. You can jump straight to 2016 without any hassle!

Thanks! Now I'm wondering if I should just go straight to 2016 since I need to upgrade from 2012 R2 anyway. Is there much benefit in going higher at this point?