[Samba] New domain with 2008 R2 member server

[Raymond van der Poel]

Greetings all,

I would like to receive recommendations on upgrading a domain for a small
business. The current domain has 2 servers: an active directory domain
controller (samba 4.3.11) running on ubuntu 14.04 and a domain member
server running on microsoft server 2008 R2. The latter provides file, print
and application services and is business critical. All clients use MS
Windows.

Since we have had issues in the past trying to join a samba member server
to this domain and that almost all pc's will be replaced by new units
running
windows10 pro and reading
https://lists.samba.org/archive/samba/2021-November/238788.html
our plan is as follows:

1) setup a new domain on a vm running ubuntu 20.04.3. This will run dhcp,
ntp and samba as a new domain controller and will function on the same
subnet as the old domain
2) setup a new samba member server on another vm also running ubuntu
20.04.3 and join it to the new domain. This will provide print and file
services.
3) add cnames for the 2 servers to the dns and create an ou tree using
samba-tool
4) prepare all new pc's, join them to the new domain and configure them
using rsat and gpo's
5) join the server running 2008 R2 to the new domain
6) retire the old domain
7) replace the member server running 2008 R2

So my questions are:
- Do you have any issues or recommendations regarding this plan?
- While reading the release notes I noticed that several SMB2 parameters in
the smb.conf have been deprecated in 4.13. What is the newest version of
samba known to work with a member server running microsoft server 2008 R2?
- Which function-level should i choose while provisioning the new domain in
order to be compatible with the microsoft member server?
- Which base-schema should i choose while provisioning the new domain in
order to be compatible with the microsoft member server?

Regards,

Raymond van der Poel