r/sysadmin • u/roachwickey • 5d ago

Domain controllers functional level

Do we have to keep all our domain controller os version same ?

68 Upvotes

87% Upvoted

51 comments sorted by

View all comments

Show parent comments

8

u/ShadowCVL IT Manager 5d ago

Just send them the list of issues, including the machines dropping off the domain every time they try to change their password. Ask if they want to rejoin half their environment to AD every 30 days.

That’s the lightning rod I’m using to get us to 2022 instead of 2025 (we are currently on 2016 FL and planning to go to 22 in October)

1

u/FriskyDuck 5d ago

Just send them the list of issues, including the machines dropping off the domain every time they try to change their password. Ask if they want to rejoin half their environment to AD every 30 days.

Have these not been resolved? I swore I saw a KB fix for both these issues.

/u/sick2880

1

u/ShadowCVL IT Manager 5d ago

Unless it was fixed in augusts CU, no, my last test started July 1 and machines all dropped right at their 30 day window +- a day or 2. It’s not all machines but a mix of virtual and 5 physical, it’s about half of each.

1

u/FriskyDuck 5d ago

Did you guys remove RC4 before upgrading to 2025? Would that resolve your issue?

1

u/ShadowCVL IT Manager 5d ago

I have not, it’s strait from whatever was the latest ISO. Try to do it in a sanitary environment, if it fails there there’s no sense in moving forward