I'm managing a domain where all the domain controllers (DCs) are running 2016 or higher, but the domain and forest functional levels are still stuck on 2008 R2. I'm planning to raise both levels to 2012 R2 or 2016 during a maintenance window. I wanted to confirm if this process is as simple as clicking "raise," and whether it's non-disruptive? Also, I don't think I need to worry about the KRBTGT password since it would have been updated when the domain was moved to 2008 R2, but I know it's best practice to rotate it regularly. If I run a script to reset the KRBTGT password once, will there be any significant impact, especially considering it's risky to make two changes in quick succession?
1 Answer
Absolutely, raising the Domain and Forest Functional Levels (DFL/FFL) to 2012 R2 or 2016 should be smooth sailing if your replication is good. It's a simple process, and if it can't be done, you'll be notified. You can even jump straight to 2016 if needed!
Thanks! I guess now I’m wondering which level makes the most sense to go to, especially since I need to be on 2012 R2 at minimum.