Domain and Forest Functional Levels – domain or forest functionality

13.7.2009    |    komentáře   komentářů: 0

Domain and forest functional levels determine which AD features are available for a particular domain or forest. We distinguish the functional level of each domain from that of the entire forest: Domain Functional Levels and Forest Functional Levels.

!! If you install the first Windows Server 2008 server into an existing Windows 2000/2003 server infrastructure, you must prepare it using adprep!!

Domain Functional Levels – domain features

Domain features are limited and determined by the domain functional level (Domain Functional Levels). The following levels are available:

Domain functional level

Enabled features

Supported domain controller operating systems

The Windows® 2000 operating system

  • Universal groups are enabled for both distribution groups and security groups

  • Group nesting

  • Windows 2000 Server

  • Windows Server 2003

  • Windows Server 2008
The Windows Server® 2003 operating system
All features from the Windows 2000 Server native domain functional level, and the following features:

  • Domain rename

  • Update of the logon time stamp

  • The ability to redirect Users and Computers containers

  • Constrained delegation

  • Selective authentication

  • Windows Server 2003

  • Windows Server 2008
Windows Server 2008 All features from the Windows Server 2003 domain functional level, and the following features:

  • Distributed File System Replication support for Shared System Volume(SYSVOL) replication

  • Advanced Encryption Services (AES 128 and 256) support for the Kerberos protocol

  • Last Interactive Logon Information Fine-grained password policies

  • Windows Server 2008

Forest Functional Levels – forest features

Forest features are limited by the forest functional level (Forest Functional Levels). The following levels are available:

Forest functional level

Enabled features

Supported domain controllers
Windows 2000 All default Active Directory features

  • Windows Server 2008

  • Windows Server 2003

  • Windows 2000 Server
Windows Server 2003

  • Forest trust

  • Domain rename

  • Linked-value replication

  • The ability to deploy a read-only domain controller that runs Windows Server 2008

  • Improved Active Directory replication for organizations

  • Deactivation and redefinition of attributes and classes in the schema with many sites

  • Windows Server 2003

  • Windows Server 2008
Windows Server 2008 This functional level provides all the features that are available at the Windows Server 2003 forest functional level, but no additional features. All domains that are subsequently added to the forest, however, will operate at the Windows Server 2008 domain functional level by default.

  • Windows Server 2008

Link to Microsoft.com

Komentáře