Domain Functional Level Overview
Group nesting group conversion which allows conversion between security and distribution groups security identifier sid.
Domain functional level overview. Note that the os version constraint is only for the domain controller and not applicable for the member. Get domain functional level using dsquery. Die folgenden tabelle stellt dar wie sich die windows server versionen bezüglich domain functional levels geändert haben. With windows server 2008 r2 you can now revert back or lower both the domain functional level and forest functional level of your domain provided you meet the specific conditions and limitations of this new feature described below.
The domain functional level indicates whether the domain supports new security features added in windows 2000 and in windows server 2003 and also whether support is available for older operating systems to participate in the domain. Dsquery dc lab dc local scope base attr msds behavior version ntmixeddomain. Option 1 from admin tools. Right click the root domain then select properties.
Overview in previous versions of windows server changes to domain functional levels dfl and forest functional level ffl could not be rolled back. Domain functional levels and forest functional levels. It would be. There are some explanations with the functions up to windows server 2008 r2 and some on the differences between windows server 2008 r2 and windows server 2012.
Today i recognized that it is not easy to find a comprehensive summary table about active directory domain and forest functional levels operating mode on the internet. All of the default ad ds features and the following directory features are available. 0 0 windows 2000 native 0 1 windows 2000 mixed 2 0 windows 2003 3 0 windows 2008 4 0 windows 2008 r2 5 0 windows 2012. From the administrative tools menu select active directory domains and trusts or active directory users and computers.
They also determine which windows server operating systems you can run on domain controllers in the domain or forest. Welche domain controller bei welchem domain functional level unterstützt werden geht ebenfalls auf der liste hervor. Universal groups for both distribution and security groups. Functional levels determine the available active directory domain services ad ds domain or forest capabilities.
Feature set of a particular dfl will be available for a dc if it runs on the operating system version that is compatible with the functional level. Overview domain functional level available features supported domain controller operating systems.