Domain Functional Level Differences
With windows server 2012 and r2 it is possible to roll back forest and domain functional level with limitation as defined in table in the link.
Domain functional level differences. Die folgenden tabelle stellt dar wie sich die windows server versionen bezüglich domain functional levels geändert haben. If you have to revert to a lower functional level with a version of windows server that is earlier than windows server 2008 r2 you must rebuild the domain or forest or restore it from a backup copy. Today i recognized that it is not easy to find a comprehensive summary table about active directory domain and forest functional levels operating mode on the internet. The domain functional level is raised to the second functional level by using the ldp exe utility or the adsiedit msc utility.
Open up powershell and run following cmdlets. However functional levels do not affect which operating systems you can run on workstations and member servers that are joined to the domain or forest. Feature set of a particular dfl will be available for a dc if it runs on the operating system version that is compatible with the functional level. They also determine which windows server operating systems you can run on domain controllers in the domain or forest.
Having compromised a windows domain one of the things i like to do that i think adds real. The output would look like below. Domain functional level dfl determines the features of a domain controller dc based on the windows server operating system os it runs on. You can run on domain controllers in the domain or forest.
Get adforest gets an active directory forest. The active directory functional levels of a ad domain or ad forest controls which advanced features are available in the ad domain or ad forest. Welche domain controller bei welchem domain functional level unterstützt werden geht ebenfalls auf der liste hervor. Domain functional level and forest functional level can be seen in the general tab of properties.
Then get addomain format list domainmode get adforest format list forestmode. The domain functional level is programmatically raised to the second functional level by directly modifying the value of the msdsbehaviorversion attribute on the domaindns object. There are some explanations with the functions up to windows server 2008 r2 and some on the differences between windows server 2008 r2 and windows server 2012. It also determines which windows server o s.
The active directory functional levels of a ad domain or ad forest depends on which versions of windows server operating systems are running on the domain controllers in the ad domain or ad forest. Functional levels determine the available active directory domain services ad ds domain or forest capabilities. Domain functional levels and forest functional levels.