We are in the process of upgrading AD from Windows 2003 R2 to Windows 2012 R2. Are there any good articles on this?

Also, how the forest trust to be taken care of during the upgrade? we have applications that use NTLM, what is the recommended option is the application do not support NTLM v2 ?

Are there any good utilities that I can run on AD to let me know what are the applications authenticating with AD?

1. Use migration guides that has been publihed in Technet:

http://technet.microsoft.com/en-us/windowsserver/jj554790.aspx

2. Upgrade applications to comply with Windows Server 2012 R2. Application vendor should provide relevant information (You have not specifies both application name and vendor name.)

Rgds

Milos

• Proposed as answer by Vivian_WangMicrosoft community contributor, Moderator Wednesday, November 26, 2014 7:43 AM

As a side note, if you want to identify apps using LM or NTLMv1, you can follow this article:

• Purging Old NT Security Protocols http://blogs.technet.com/b/askds/archive/2012/02/02/purging-old-nt-security-protocols.aspx

If you are concerned of potential hardcoded application using your Windows Server 2003 domain controllers, you can have a look here:

• How to detect applications using "hardcoded" DC name or IP? http://blogs.technet.com/b/pie/archive/2014/07/13/how-to-detect-applications-using-hardcoded-dc-name-or-ip.aspx

This article presents a way to smoothly introduce new DCs in your environement without disturbing your apps:

• Minimizing Risk During AD Upgrades http://blogs.technet.com/b/glennl/archive/2010/08/13/minimizing-risk-during-ad-upgrades.aspx

If you still have member servers running Windows Server 2003 (or Windows XP clients) make sure you are aware of this:

• Shared folder in Windows Server 2012 R2 or Windows 8.1 cannot be accessed by using SMB version 1 protocol http://support.microsoft.com/kb/2976994

Beside the above suggestions, you can also go through this well explained technet blog that would be a good start-up to understand all the required aspect and accomplish this task in more easier way : http://blogs.technet.com/b/canitpro/archive/2014/04/02/step-by-step-active-directory-migration-from-windows-server-2003-to-windows-server-2012.aspx

Hello!

Try this one.

http://ricardo.szyfer.com/blog/2013/04/17/ws2k3tows2012/

Regards

Hi,

I just want to confirm what is the current situation.

Please feel free to let us know if you need further assistance.

Regards.

Vivian, Thanks for your note. We are still in the planning phase and wanted to be sure noting fall apart during the migration :)

Do you know how the external truest can be taken care during the migration ?

Many Thanks again!

Pierre, Many thanks!, this is a wonderful article. I'm bit concerned about the external trust we have and how to proceed while migrations...?

Appreciate your inputs!

Thanks again!

Hi,

Sorry for the delay reply.

When you use the ADMT to do the ad migration, you should create the external trust.

http://blog.thesysadmins.co.uk/admt-series-1-preparing-active-directory.html

Regards.

Vivian, we plan to upgrade and not migrate the AD, is that case is there any specific steps to be followed to maintain the existing trust relationship ?

Rg

Any suggections or recommendations from anyone ?

Greetings,

We extensed the Schema in 2003 R2 long back to accomodate UNIX attributes, now that we are in the process of upgrade from Windows 2003 R2 to Windows 2012 R2 Domain, has anyone come across any issues with UNIX attributes after the upgrade or Kerb 5 and UNIX ?

Thank you

Raj

Greetings,

We extensed the Schema in 2003 R2 long back to accomodate UNIX attributes, now that we are in the process of upgrade from Windows 2003 R2 to Windows 2012 R2 Domain, has anyone come across any issues with UNIX attributes after the upgrade or Kerb 5 and UNIX ?

Thank you

Raj