Raise domain functional level

[edutech4schools]

I have just removed our old 2003 server and only have 1 2008r2 server (primary school).

 

My next step would be to raise the functional level. It has been a while since I last did this.

 

is it still the same as 2003? or do I need to do anything else?

 

[h=2]To raise the domain functional level[/h]

• Open Active Directory Domains and Trusts.
  
• In the console tree, right-click the domain for which you want to raise functionality, and then click Raise Domain Functional Level.
  
• In Select an available domain functional level, do one of the following:
   
  
  • To raise domain functional level to Windows Server 2003, click Windows Server 2003, and then click
    

 

[h=2]To raise the forest functional level[/h]

• Open Active Directory Domains and Trusts.
  
• In the console tree, right-click the Active Directory Domains and Trusts node, and then click Raise Forest Functional Level.
  
• In Select an available forest functional level, click Windows Server 2003, and then click Raise.
  

[plexer]

That's the ticket.

 

Ben

[Michael]

Yep it is the same, but your Domain Functional Level will have to be at least 2003 (to have 2003 and 2008 domain controllers). There's hardly any changes/difference increasing it to 2008. There are a lot of differences between 2000 and 2003 however.

[hermand]

There's hardly any changes/difference increasing it to 2008.

 

They're good changes, though

[Michael]

Apparently this is what it adds:

 

•Fine-grained password policies – Allows multiple password polices to be applied to different users in the same domain.

•Read-Only Domain Controllers – Allows implementation of domain controllers that only host read-only copy of NTDS database.

•Advanced Encryption Services – (AES 128 and 256) support for the Kerberos protocol.

•Granular auditing – Allows history of object changes in Active Directory.

•Distributed File System Replication (DFSR) – Allows SYSVOL to replicate using DFSR instead of older File Replication Service (FRS). It provides more robust and detailed replication of SYSVOL contents.

•Last Interactive Logon Information – Displays the time of the last successful interactive logon for a user, from what workstation, and the number of failed logon attempts since the last logon.

 

Taken from here

[hermand]

Apparently this is what it adds:

 

•Fine-grained password policies – Allows multiple password polices to be applied to different users in the same domain.

•Read-Only Domain Controllers – Allows implementation of domain controllers that only host read-only copy of NTDS database.

•Advanced Encryption Services – (AES 128 and 256) support for the Kerberos protocol.

•Granular auditing – Allows history of object changes in Active Directory.

•Distributed File System Replication (DFSR) – Allows SYSVOL to replicate using DFSR instead of older File Replication Service (FRS). It provides more robust and detailed replication of SYSVOL contents.

•Last Interactive Logon Information – Displays the time of the last successful interactive logon for a user, from what workstation, and the number of failed logon attempts since the last logon.

 

Taken from here

 

Not sure if that was an agreement, or not, but yeah...! Fine grained passwords are a Godsend (And years overdue) and DFSR is better than FRS.

[Michael]

Oh yes, I agree it is an improvement! I've not had time to play with these new features however!