Domain Functional Level 2012
Get the current domain and forest functional levels.
Domain functional level 2012. Before you can raise domain and forest functional levels you have to evaluate your current environment and identify the functional level requirement that best meets the needs of your organization. Windows server 2016 windows server 2012 r2 windows server 2012. A new domain that is created on a domain controller that runs at least windows server 2012 r2 must be set to the windows server 2008 domain functional level or higher.
Domain functional level and forest functional level can be seen in the general tab of properties. Windows server 2012. Right click the domain you want to raise the functional level of as in example below and then select raise domain functional level.
The kdc support for claims compound authentication and kerberos armoring kdc administrative template policy has two settings always provide claims and fail unarmored authentication requests that. Kerberos improvements from windows server 2012 and 2012 r2 are not implemented in samba. Weitere informationen zu features.
Select start administrative tools active directory domains and trusts. Downgrade domain functional level from 2012 r2 2012 to 2008r2 2008 to downgrade the domain forest functional level there are no gui tools but we can use the powershell command available in windows server 2008r2 2012 2012r2 for our requirement. Raising the domain functional level using samba tool.
When you raise the domain functional level to windows server 2016 and if the forest functional level is windows server 2012 or lower you have the option of rolling the domain functional level back to windows server 2012 or windows server 2012 r2. Windows server 2012 domain functional level features. To raise the domain functional level on a samba active directory ad domain controller dc use samba tool.
Domain functional level dfl determines the features of a domain controller dc based on the windows server operating system os it runs on. Feature set of a particular dfl will be available for a dc if it runs on the operating system version that is compatible with the functional level. In the raise domain functional level select an available domain functional level from the drop down list.