Your network contains an Active Directory forest named adatum.com. All domain controllers
run Windows Server 2008 R2. The functional level of the domain and the forest is Windows
Server 2008.
You deploy a new Active Directory forest named contoso.com. All domain controllers run
Windows Server 2012 R2. The functional level of the domain and the forest is Windows
Server 2012 R2.
You establish a two-way, forest trust between the forests. Both networks contain member
servers that run either Windows Server 2012 R2, Windows Server 2012, Windows Server
2008 R2 or Windows Server 2008.
You plan to use the Active Directory Migration Tool 3.2 (ADMT 3.2) to migrate user accounts
from adatum.com to contoso.com. SID history will be used in contoso.com and passwords
will be migrated by using a Password Export Server (PES).
You need to recommend which changes must be implemented to support the planned
migration.
Which two changes should you recommend? Each correct answer presents part of the
solution.
A.
In the contoso.com forest, deploy a domain controller that runs Windows Server 2008 R2.
B.
In the adatum.com forest, upgrade the functional level of the forest and the domain.
C.
In the contoso.com forest, downgrade the functional level of the forest and the domain.
D.
In the adatum.com forest, deploy a domain controller that runs Windows Server 2012 R2.
Correct: AC
When you migrate to a Windows Server 2012 domain, install ADMT 3.2 on a Windows Server 2008 R2 server that can operate as the migration computer. You have to have a Windows Server 2008 R2 domain controller in the target environment.
Source: https://support.microsoft.com/en-us/kb/2753560
https://technet.microsoft.com/en-us/library/understanding-active-directory-functional-levels(v=ws.10).aspx
And if you are using Dynamic Access Control in contoso.com you can’t. It’s this stuff that is bullshit on the testing side of things.
There are also 3rd party extensions to the Schema that make this a non-starter.
I didn’t think it was possible to downgrade the forest or domain functional level.
https://blogs.technet.microsoft.com/aman/2012/12/28/step-by-step-guide-to-lower-active-directory-functional-level/
A and C are correct
2008r2 DC has to be in the target environment and if you need to downgrade the function levels then see below:
Note If you already specified a Windows Server 2012 domain functional level, and you want the ADMT server to be a domain controller, you can lower the forest and domain functional level by using Windows PowerShell commands. For example, you can use commands that resemble the following:
Set-AdForestMode -identity contoso.com -forestmode Windows2008R2Forest
Set-AdDomainMode -identity contoso.com -domainmode Windows2008R2Domain
as per
https://technet.microsoft.com/en-us/library/active-directory-migration-tool-versions-and-supported-environments(v=ws.10).aspx
June 13, 2014
ADMT v3.2 was re-released. All operating system checks were removed, previous versions of ADMT were deprecated, and the guide was updated accordingly
ADMT supports 2012 r2