> > > a) upgrade DC with FSMO roles, then wait 1-2 day to spot troubles > > I would NOT do this. If this DC goes down (with the FSMO roles), then you'd have more troubles. Instead, I would upgrade a NON-FSMO DC, let it replicate for a while, and then transfer the roles to that one.